| 00:00.05 | olds | yea, that's what I meant. I'll check it out. |
| 00:00.16 | Utah_Dave | I'd try to get you hired on here, but we're over staffed as it is. |
| 00:00.22 | Utah_Dave | unless you are in the Army National Guard |
| 00:00.51 | dataw0lf- | olds in the military? that'd be entertaining. |
| 00:01.20 | Utah_Dave | :) |
| 00:01.29 | Utah_Dave | anyway, gotta head home. thanks again, olds |
| 00:01.33 | *** part/#uphpu Utah_Dave (n=boucha@72-166-51-162.dia.static.qwest.net) |
| 00:01.39 | olds | np |
| 00:01.56 | olds | meh, I'd do okay in the military. |
| 00:02.17 | olds | I'd do the Air Force of course |
| 00:02.36 | dataw0lf- | I can't see it |
| 00:03.03 | olds | if my parents can do it, I can probably do it |
| 00:03.08 | olds | not enlisted, officer |
| 00:03.34 | dataw0lf- | eh, AF officer, yea. but that's just a fancy way of saying 'civilian' |
| 00:03.41 | olds | hehe |
| 00:03.41 | dataw0lf- | unless you're a pilot or something |
| 00:04.04 | dataw0lf- | you checked out indeed.com, olds? |
| 00:04.11 | olds | nope |
| 00:04.20 | dataw0lf- | good job search website |
| 00:04.21 | olds | I shall |
| 00:04.25 | dataw0lf- | aggregates most of the popular sites |
| 00:04.53 | dataw0lf- | dice.com, CL, monster.com |
| 00:04.53 | dataw0lf- | etc |
| 00:07.04 | olds | cool |
| 00:07.24 | olds | I'mma head home |
| 00:09.09 | dataw0lf- | cya |
| 00:30.41 | olds | man it's brisk out there |
| 00:31.55 | swb | two questions... |
| 00:32.08 | swb | how do you tell if someone is idle if you're using irssi? |
| 00:32.22 | swb | and, have you ever done "geotargeting" |
| 00:40.53 | mindjuju | sup dw |
| 00:48.28 | dataw0lf- | sup mindjuju |
| 00:49.33 | dataw0lf- | swb: /wii <user> |
| 00:50.27 | dataw0lf- | swb: I'm fairly familiar with geotargeting. |
| 00:50.49 | dataw0lf- | lemme know if you need any help |
| 00:50.56 | mindjuju | frickin' ms with their 5 "mega criticial" patches |
| 00:55.38 | swb | thanks dw! |
| 00:55.47 | swb | what do you think about this? http://ekstreme.com/geotargeting/geotargeting-php-code.php |
| 01:01.16 | dataw0lf- | check out the maxmind db |
| 01:01.19 | dataw0lf- | http://www.maxmind.com/app/geoip_country |
| 01:02.22 | dataw0lf- | I've been looking at devising a Google maps implementation |
| 01:03.05 | swb | I'm thinking using mod_rewrite would be preferable... to php code that is |
| 01:03.26 | swb | the code from the ekstreme link uses the maxmind db on the back end |
| 01:04.08 | swb | me too, I'm working on doing zip code proximity, what are you going to do with the maps api? |
| 01:16.22 | dataw0lf- | defined consumer areas |
| 01:25.09 | swb | would love to hear more about it, r u working late? or wait, r u 1 hr behind MST? |
| 01:51.22 | olds | yea he is |
| 02:15.23 | swb | hi olds, hey I see a bit of your conversation w/ Utah_Dave above... |
| 02:15.28 | swb | r u job searching in SLC? |
| 02:21.32 | olds | yes |
| 02:21.41 | olds | I just got done venting to com4 |
| 02:22.00 | swb | venting? about the search? |
| 02:22.07 | olds | no, about my current job |
| 02:22.13 | olds | com4 is my roomie |
| 02:22.18 | swb | oooooo, bummer! |
| 02:22.25 | swb | about the venting, not the roomie |
| 02:22.55 | swb | well, you should be able to find good job posts on the UPHPU-jobs mailing list! |
| 02:23.02 | olds | yea |
| 02:23.09 | olds | I hope so |
| 02:23.23 | olds | Do you know of anything I should apply for? |
| 02:24.09 | swb | no, but I'll keep my ears open, I am interested in setting up some kind of resume workshop / mock interview UPHPU meeting... and that might help you out |
| 02:24.14 | swb | interested? |
| 02:24.50 | swb | what's your code bg? any java experience? what's your current company? |
| 02:25.00 | olds | University of Utah |
| 02:25.16 | swb | !! what department? |
| 02:25.30 | olds | you first |
| 02:25.48 | swb | I work in research park, used to do work study as a web lackey for the bus. school late 90s |
| 02:25.55 | com4 | it is a bummer that i'm his roomie... it's like listening to a little girl whine about how her best friend is dating her ex boyfriend |
| 02:26.02 | com4 | Eeesh... it must be that time of month for him |
| 02:26.20 | swb | lol, hey wait, be nice |
| 02:26.32 | com4 | :) |
| 02:26.38 | swb | I'm sure it SUCKS to have a crapy job |
| 02:26.47 | olds | Biology Department |
| 02:27.01 | swb | code bg? |
| 02:27.34 | olds | Mostly php/mysql stuff |
| 02:27.50 | olds | I know some Java, nothing advanced |
| 02:30.09 | swb | my company has at least one java position and one oracle dba position open... not quite the right fit, but I'll let ya know if anything php/mysql comes up |
| 02:31.27 | olds | I'm pretty crafty with the sql |
| 02:31.47 | swb | maybe this one then... |
| 02:31.50 | swb | http://www.myriad.com/careers/job/3110-1500 |
| 02:32.58 | swb | here's the whole list: |
| 02:33.01 | swb | http://www.myriad.com/careers/index.php?orderby=cat&order=DESC#list |
| 02:33.26 | olds | ooo myriad genetics |
| 02:33.29 | olds | I know where that is |
| 02:33.52 | swb | snuggled against the bench, great for hiking on lunch break |
| 02:33.56 | swb | you should apply! |
| 02:34.01 | olds | some of my friends put bath bubbles in that waterfall out front |
| 02:34.12 | olds | I used to live in those dorms right by that |
| 02:34.12 | swb | bastards! |
| 02:34.18 | swb | lol |
| 02:34.47 | swb | wish those dorms were there when I was going to school!! |
| 02:35.09 | olds | Hmm, I don't have a BS/BA..... yet |
| 02:35.12 | olds | still in school |
| 02:35.19 | olds | I'm in the CS program |
| 02:35.22 | swb | r u looking for FT? |
| 02:35.33 | swb | how long do you have left? |
| 02:35.38 | olds | couple years |
| 02:36.49 | swb | I don't know how the hiring mgr feels about it, but I say, it never hurts to apply if you think you can do the requirements |
| 02:37.21 | swb | plus, you can introduce yourself and make contacts for possibly applying later, our pharma division is about to explode |
| 02:38.02 | olds | Yea, it never hurts to apply. |
| 02:38.17 | swb | good luck!! |
| 02:38.27 | olds | heh, yea I don't think I'll get that. |
| 02:38.50 | swb | it is full time, are you looking for full time? |
| 02:39.18 | olds | I'll take whatever at this point. |
| 02:39.25 | olds | I'm only taking 1 class in the Spring. |
| 02:39.47 | olds | So I think that most work places would be willing to work around it. |
| 02:39.59 | swb | what's your gripe w/ bio? |
| 02:40.14 | swb | hey, you can't get much closer to campus without being on campus |
| 02:41.04 | *** join/#uphpu wps (n=wps@208.53.47.251) |
| 02:41.04 | *** mode/#UPHPU [+o wps] by ChanServ |
| 02:41.11 | olds | I work for a specific lab within the Biology Department where I am the only computer programmer/developer. |
| 02:41.44 | swb | ha, I'm the only web developer in my dept. too, but that can't be the only trouble |
| 02:42.00 | olds | My gripe has to do with my boss (the head of the lab). |
| 02:42.04 | swb | oic |
| 02:42.38 | swb | I understand |
| 02:43.39 | olds | I don't wanna bash on my work in a public forum. That's unprofessional. |
| 02:43.42 | olds | :) |
| 02:43.45 | swb | how many peoeple work on the www.biology.utah.edu site all together then? |
| 02:43.55 | swb | gotcha, good form |
| 02:44.06 | olds | I have no idea. I work on the website for a specific lab within that website. |
| 02:44.44 | swb | I always wonder how many people get hired for a given department or site, just curious |
| 02:45.16 | olds | Yea, I have no idea how many people work within the department. |
| 02:45.55 | olds | There's ~40 people in the lab I work in. |
| 02:47.58 | swb | if you're coming to the mtg on thurs, you might run into someone who's hiring, I know someone said they were at the last meeting |
| 02:49.16 | swb | I think this was the company: http://origin3.net/ |
| 02:50.59 | olds | yea |
| 02:51.07 | olds | com4 and I will swing on down there for the meeting |
| 02:51.41 | swb | see ya thurs then |
| 02:57.08 | *** join/#uphpu wps_ (n=wps@208.53.47.251) |
| 03:02.28 | *** join/#uphpu dataw0lf (n=cyixevoa@dialup-4.255.161.11.Dial1.SanJose1.Level3.net) |
| 03:03.39 | dataw0lf | solaris is such a headache |
| 03:03.51 | swb | amen |
| 03:17.13 | macnewbold | I've got me 4 of those perpendicular hard drives now... |
| 03:17.24 | macnewbold | 4x750GB in a raid5 in a 1u server |
| 03:17.49 | macnewbold | they're really only 698GB when you know what a GB really is |
| 03:18.17 | macnewbold | so it makes a 2094MB array, just over 2TB |
| 03:18.24 | macnewbold | with about 48MB to spare |
| 03:18.28 | macnewbold | or 46 |
| 03:22.42 | dataw0lf | that's nice, how's temperature control? |
| 03:22.45 | *** join/#uphpu swb (n=designsi@box41.bluehost.com) |
| 03:23.19 | macnewbold | good enough apparently... it's in XM's colo facility |
| 03:23.25 | macnewbold | hasn't had an overtemp ever |
| 03:23.30 | dataw0lf | nice. |
| 03:23.32 | macnewbold | sure had a lot of fans though :) |
| 03:23.41 | dataw0lf | hehe, I bet. |
| 03:24.06 | swb | woohoo, geotarget test script looks like it's working |
| 03:24.09 | swb | <PROTECTED> |
| 03:24.25 | swb | um, ignore last line |
| 03:24.34 | swb | but check this link... http://www.myriadtests.com/geotarget-test.php |
| 03:25.20 | swb | of course, it should only come up as US for everyone |
| 03:26.16 | dataw0lf | good stuff. |
| 03:27.43 | swb | so now, how do I test it? only thing I can think of is to manually enter ips for domains from other countries... |
| 03:36.36 | *** join/#uphpu alphahawk (n=alphahaw@207.224.222.86) |
| 03:37.00 | alphahawk | okay stupid question of day. How do you make a " appear in a echo? |
| 03:37.07 | macnewbold | backslash it |
| 03:37.20 | macnewbold | or put it in single quotes |
| 03:37.31 | alphahawk | same with like a \ |
| 03:37.47 | macnewbold | or chr(34) |
| 03:37.51 | alphahawk | or do I just double \\ |
| 03:37.54 | macnewbold | yep |
| 03:37.57 | macnewbold | backslash the backslash |
| 03:38.03 | alphahawk | can you do \" |
| 03:39.46 | macnewbold | yep |
| 03:39.48 | macnewbold | exactly |
| 03:46.01 | alphahawk | theres not a function that already does that it there? i.e. finds all " ' and any other special chars like that and makes them echo safe? |
| 03:46.23 | alphahawk | nm found it |
| 04:08.29 | alphahawk | macnewbold do you have a site that explains the search strings and how they work for eregi and other functions? |
| 04:08.53 | macnewbold | I'd recommend the preg functions over the ereg, |
| 04:08.59 | macnewbold | and they're regular expressions |
| 04:09.10 | macnewbold | some of it is in an old presentation I gave: |
| 04:09.56 | macnewbold | http://www.macnewbold.com/uphpu/uphpu-strings.html |
| 04:09.59 | macnewbold | http://www.macnewbold.com/uphpu/uphpu-strings.txt |
| 04:10.21 | macnewbold | http://www.macnewbold.com/uphpu/uphpu-strings-regexp.ppt |
| 04:10.28 | macnewbold | it's a little past half way I think |
| 04:34.29 | *** part/#uphpu alphahawk (n=alphahaw@207.224.222.86) |
| 04:58.10 | wps_ | ping bigdog_ut |
| 04:58.20 | *** mode/#UPHPU [+o wps] by ChanServ |
| 05:21.38 | *** join/#uphpu jbot (i=ibot@pdpc/supporter/active/TimRiker/bot/apt) |
| 05:21.38 | *** topic/#uphpu is meeting Thursday @ 7: Database Design | UPHPU | uphpu.org |
| 05:21.38 | *** mode/#UPHPU [+v jbot] by ChanServ |
| 05:28.22 | el_gaucho | you there wps ? |
| 05:28.33 | wps | yes |
| 05:28.39 | el_gaucho | whatz up |
| 05:29.00 | wps | on the phone… one minute |
| 05:29.05 | el_gaucho | kk |
| 05:39.18 | wps | anyone aware of a way to search whois archives? |
| 05:39.23 | wps | are archives kept anywhere? |
| 05:39.42 | el_gaucho | you can search whois not sure they keep archives |
| 05:39.44 | wps | I need to see records from the past |
| 05:40.32 | el_gaucho | i dont think they do...but i have never searched for them |
| 05:42.51 | wps | sorry… still on the phone |
| 05:42.56 | el_gaucho | k |
| 05:43.54 | wps | do you know what the internic speed limit is on whois queries? |
| 05:44.08 | el_gaucho | nope |
| 05:54.35 | macnewbold | wps: depends what whois server you're talking to |
| 05:54.42 | macnewbold | they're generally independent |
| 05:58.43 | wps | alright |
| 05:58.44 | wps | I'm back |
| 05:58.44 | wps | sorry |
| 05:58.53 | wps | good point, macnewbold |
| 05:59.05 | wps | how do I know what server is used when I do a whois from the command line? |
| 06:06.27 | wps | bigdog_ut ? |
| 06:06.45 | el_gaucho | y |
| 06:07.34 | wps | which are you? :) |
| 08:01.09 | *** join/#uphpu el_gaucho (n=bigdog@zeus.thebigdog.biz) [NETSPLIT VICTIM] |
| 08:01.09 | *** join/#uphpu synic (n=squish@pdpc/supporter/student/synic) |
| 08:01.09 | *** mode/#UPHPU [+ov el_gaucho synic] by irc.freenode.net |
| 09:13.02 | *** join/#uphpu el_gaucho (n=bigdog@zeus.thebigdog.biz) [NETSPLIT VICTIM] |
| 09:13.02 | *** join/#uphpu synic (n=squish@pdpc/supporter/student/synic) |
| 09:13.02 | *** mode/#UPHPU [+ov el_gaucho synic] by irc.freenode.net |
| 14:25.05 | *** join/#uphpu jsmith (n=jsmith@h460507c2.area3.spcsdns.net) |
| 14:25.05 | *** mode/#UPHPU [+v jsmith] by ChanServ |
| 14:43.44 | drip | gm |
| 14:55.36 | jsmith | Morning... |
| 14:56.04 | drip | nothing like getting a knock on the door at 6:30 AM to ksl news standing there. |
| 14:56.21 | drip | lol |
| 14:57.27 | *** join/#uphpu wps (n=wps@64.72.210.10) |
| 14:57.27 | *** mode/#UPHPU [+o wps] by ChanServ |
| 15:04.46 | jsmith | drip: Huh? |
| 15:12.11 | *** join/#uphpu Black_Chaos (n=user@oalug/member/blackchaos) |
| 15:17.00 | drip | i guess my brother-in-law nominated my sister-in-law who is living with us for a KSL High 5.. |
| 15:17.31 | drip | so I answered my door to live tv this morning. |
| 15:17.41 | jsmith | Nice... or not. |
| 15:17.47 | drip | it was fine.. |
| 15:17.56 | drip | they were doing a segment on my sis-in-law |
| 15:18.13 | drip | since she's going through cancer battles |
| 15:18.43 | drip | it was a surprise thing where she thought her brother was taking her to breakfast but KSL was there too |
| 15:20.07 | drip | it was kinda funny too because i invited them in.. and kind of surprised them. made their lens all foggy |
| 15:20.08 | drip | he he |
| 15:59.06 | *** join/#uphpu timinator (n=timinato@c-67-171-118-199.hsd1.ut.comcast.net) |
| 15:59.06 | *** mode/#UPHPU [+v timinator] by ChanServ |
| 16:11.58 | *** join/#uphpu Utah_Dave (n=boucha@72-166-51-162.dia.static.qwest.net) |
| 16:11.58 | *** mode/#UPHPU [+o Utah_Dave] by ChanServ |
| 16:20.24 | *** join/#uphpu swb (n=designsi@box41.bluehost.com) |
| 16:29.24 | *** join/#uphpu jsmith-away (n=jsmith@h460507c2.area3.spcsdns.net) |
| 16:29.24 | *** mode/#UPHPU [+v jsmith-away] by ChanServ |
| 16:51.51 | *** join/#uphpu bigdog_ut (n=bigdog@208.177.146.102.ptr.us.xo.net) |
| 16:51.51 | *** mode/#UPHPU [+o bigdog_ut] by ChanServ |
| 17:28.06 | *** join/#uphpu drip (n=drip@67.96.135.254) |
| 17:28.09 | *** mode/#UPHPU [+v drip] by ChanServ |
| 17:31.04 | *** part/#uphpu Utah_Dave (n=boucha@72-166-51-162.dia.static.qwest.net) |
| 17:35.32 | *** join/#uphpu Utah_Dave (n=boucha@72-166-51-162.dia.static.qwest.net) |
| 17:35.32 | *** mode/#UPHPU [+o Utah_Dave] by ChanServ |
| 17:45.46 | swb | this is a good site: http://spoofee.com/ |
| 17:46.11 | swb | I'm looking for a good hard drive deal (christmas shopping) |
| 17:46.45 | swb | I know not all hard drives are created equal... I see a pretty good deal on the IOMega 320GB |
| 18:16.18 | macnewbold | IOMega makes hard drives? |
| 18:16.27 | timinator | sure |
| 18:16.39 | timinator | but they're having a tough time financially |
| 18:16.44 | timinator | IMO |
| 18:17.01 | timinator | they made their money on zip disks |
| 18:17.12 | timinator | when the rest of the world was on floppies |
| 18:17.27 | timinator | but they didn't make any other major innovative products |
| 18:17.43 | timinator | and now the world has moved on from 100MB disks |
| 18:18.14 | timinator | I've heard of their downsizing for the last several years |
| 18:18.56 | timinator | my guess is that their last chess move will be to cut prices to drive a bit of business and show some cash flow |
| 18:19.56 | timinator | then they'll either die off or hit a low plateau where they're just like the others in price and products |
| 18:20.39 | timinator | that's my opinion though |
| 18:20.51 | beandog | macnewbold: I was gonna say the same thing |
| 18:20.54 | timinator | I have no inside information |
| 18:21.16 | beandog | I would wait for a good deal on a WD SATA 2 500g hdd |
| 18:21.24 | beandog | Get one for ~$200 |
| 18:21.32 | timinator | ya |
| 18:21.34 | timinator | I agree |
| 18:21.43 | beandog | Just watch newegg's RSS feeds |
| 18:21.49 | beandog | and pcclub's too |
| 18:22.01 | *** join/#uphpu wps (n=wps@64.72.210.10) |
| 18:22.01 | *** mode/#UPHPU [+o wps] by ChanServ |
| 18:29.53 | *** join/#uphpu el_gaucho (n=bigdog@zeus.thebigdog.biz) [NETSPLIT VICTIM] |
| 18:29.53 | *** join/#uphpu jsmith-away (n=jsmith@h460507c2.area3.spcsdns.net) |
| 18:29.53 | *** join/#uphpu synic (n=squish@pdpc/supporter/student/synic) |
| 18:29.53 | *** mode/#UPHPU [+ovv el_gaucho jsmith-away synic] by irc.freenode.net |
| 18:47.08 | swb | so, WD = better than IOMega |
| 18:47.58 | beandog | Youre going to hear anecdotal evidence in each direction that foo > bar |
| 18:48.19 | beandog | So, just pick whatever you think is gonna be your best fit :) |
| 18:48.37 | swb | thanks beandog |
| 18:49.55 | timinator | I'd say WD>Iomega.... I used to have the most confidence in Iomega, but when a company has to cut costs, I get a little leery of their products. |
| 18:50.04 | timinator | and WD has a solid rep |
| 18:50.05 | macnewbold | I'd go with WD, Seagate, Maxtor, or CompUSA brand hard drives before I went with iomega, i think... |
| 18:50.17 | swb | ah, that's what I wanted to hear |
| 18:50.50 | timinator | I've had a maxtor and Lacie external drive and love them both.... I know that's a little different than an internal, but hey |
| 18:50.51 | macnewbold | I've had very few if any problems with WD, Seagate, and Maxtor |
| 18:50.54 | beandog | I would go with WD or Seagate, never Maxtor |
| 18:51.04 | beandog | IBM's have always been good to me, too. |
| 18:51.20 | macnewbold | yeah, I don't usually use Maxtor, but haven't had problems personally (yet) |
| 18:51.26 | macnewbold | IBM's have a good rep too |
| 18:51.57 | swb | I will keep an eye on those black friday ads too |
| 18:52.06 | swb | do you guys use external hard drives much? |
| 18:52.12 | beandog | never |
| 18:52.16 | timinator | I do |
| 18:52.18 | swb | I like them for storing photo backups |
| 18:52.23 | beandog | not that theyre bad, I just wouldnt use one. |
| 18:52.28 | timinator | ya, backups only |
| 18:52.54 | macnewbold | I use them rarely |
| 18:53.24 | timinator | I bought a 160 Lacie external several years ago and have used it for backups ever sense |
| 18:53.36 | swb | I saw the creative zen microphoto mp3 player for $30 on an ad mindjuju linked the other day |
| 18:53.47 | swb | looks like the BEST deal on that player I've seen |
| 18:53.59 | swb | I was wondering about Lacie brand |
| 18:54.25 | timinator | I've had good luck w/ mine |
| 19:02.55 | herlo | so I've an interesting question. And apparently it's going to show my lack of knowledge in a particularly scary area of PHP |
| 19:03.01 | herlo | register_globals = off |
| 19:03.19 | herlo | and I want to use a variable from one file in another. |
| 19:03.36 | herlo | currently, my webserver has register_globals = on and I want to avoid that |
| 19:04.12 | herlo | how do I pass global like variables using includes/requires so that I dont have to use the 'global $var' syntax? |
| 19:04.27 | herlo | or is that an okay practice? |
| 19:04.44 | timinator | $_GET["var"] or $_POST["var"] |
| 19:04.53 | timinator | just sanitize it |
| 19:05.09 | herlo | that doesn't help |
| 19:05.14 | timinator | oh |
| 19:05.18 | herlo | I've been able to get it already |
| 19:05.39 | herlo | and I don't see the point in accessing the same variable 30 different times, when I want to put it in multiple places in several included files |
| 19:05.52 | herlo | for example |
| 19:06.13 | herlo | I run $myvar = $_GET['avalue']; |
| 19:06.18 | herlo | then the next line is |
| 19:06.34 | herlo | wait, let me just pastebin it |
| 19:08.21 | herlo | http://pastebin.ca/249395 |
| 19:08.46 | herlo | so lets say that it submit the url http://my.server.name/File2.php?avalue=text |
| 19:09.15 | herlo | and then implement that code in the pastebin, what happens with register_globals, both on and off, or is that even affected? |
| 19:09.44 | macnewbold | herlo: make an include file that grabs all the variables you want and sanitizes them? |
| 19:09.57 | macnewbold | see also www.php.net/extract if you want all of them |
| 19:10.02 | macnewbold | but be careful |
| 19:10.31 | macnewbold | any variable that isn't supposed to come from the user should be defined before use, after the variables have been pulled from the users |
| 19:11.09 | macnewbold | what you've got in the pastebin will work |
| 19:11.30 | timinator | I agree w/ mac |
| 19:11.37 | macnewbold | with register globals on, $avalue will get set to $_GET[avalue] (really $_REQUEST[avalue]) |
| 19:11.47 | timinator | sanitize though |
| 19:11.50 | macnewbold | with register globals off, just $myval will get set, just like it does normally |
| 19:12.24 | macnewbold | yeah, make sure that any data is treated like what it is: _any_ characters the user wants to send you |
| 19:12.37 | timinator | something like: $myvar = sanitize($_GET['avalue']); |
| 19:12.57 | timinator | then write the function sanitize to check to JS and odd chars |
| 19:13.44 | herlo | okay |
| 19:13.53 | herlo | yeah, I've used extract before |
| 19:14.14 | herlo | does sanitize provide me a way to get that variable from file1.php inside file2.php? |
| 19:14.34 | herlo | doesn't seem to work the way you say it will |
| 19:15.21 | herlo | the example is a simpler representation of something that seems to require $global |
| 19:15.53 | timinator | well, you'll have to write sanitize first |
| 19:16.20 | timinator | so that you're checking for things you want to remove |
| 19:18.24 | macnewbold | herlo: yes, it works. global is global |
| 19:18.38 | macnewbold | if it is set via an include file, it is still available in all the ohters |
| 19:18.55 | macnewbold | it is not available in a functoin or a class, though, unless you use the 'global' keyword on it |
| 19:19.49 | herlo | macnewbold: and $global is bad right? |
| 19:19.50 | macnewbold | btw, sanitize() isn't a php builtin function |
| 19:19.59 | macnewbold | herlo: no, not really |
| 19:20.03 | macnewbold | depends who you ask though |
| 19:20.14 | macnewbold | almost everything in php is global |
| 19:20.18 | macnewbold | unless you're using classes heavily |
| 19:20.22 | macnewbold | and that's okay |
| 19:21.09 | timinator | no, sanitize() is not a php builtin function |
| 19:21.42 | timinator | :) |
| 19:21.47 | timinator | trying to help though |
| 19:29.26 | herlo | macnewbold, can you give me pros and cons of using $global then? I'd like a better understanding, security and practical comparison's would be nice... |
| 19:29.39 | olds | depending on what you're doing, you can do mysql_real_escape_string() or addslashes(stripslashes()) |
| 19:30.42 | olds | The cons are that you might set it to something else, so use sparingly |
| 19:31.20 | olds | or wait, maybe yo ucan't |
| 19:31.28 | herlo | olds: huh? |
| 19:31.46 | herlo | that's not a comparison of $global afaik |
| 19:32.29 | herlo | I mean, I understand what the functions you mention do, but that seems to me to be beyond $global, something to wrap around the variable after we obtain it, prior to doing $global |
| 19:32.47 | olds | I was looking at your conversation about sanitizing |
| 19:35.56 | herlo | yeah, don't need that, sorry |
| 19:36.34 | herlo | I appreciate the help though, I've done much sanitizing. Mostly, I am now interested in the pros and cons of $global using register_globals on|off |
| 19:38.37 | *** join/#uphpu fungus (n=fungus@2001:470:1f00:645:20a:95ff:fec5:636a) |
| 19:38.37 | *** mode/#UPHPU [+o fungus] by ChanServ |
| 19:39.29 | olds | Well it's a huge security risk to leave them on |
| 19:42.09 | *** join/#uphpu timinator_ (n=timinato@c-67-171-118-199.hsd1.ut.comcast.net) |
| 19:44.55 | olds | http://www.scit.wlv.ac.uk/~jphb/php/lang/register_globals.html |
| 19:49.50 | herlo | olds, I know, but I am looking for opinions from the group. I will definitely read the link too... |
| 20:04.53 | beandog | register globals is extremely bad. |
| 20:04.54 | beandog | bad bad bad. |
| 20:05.11 | beandog | If you forget to check for a variable, and someone sets it themselves, you are opening yourself up to some real foobalage. |
| 20:05.32 | beandog | Its bad enough you have to santize all user input |
| 20:05.43 | beandog | With register globals, youd have to verify that every variable is set exactly how you want it set. |
| 20:06.08 | beandog | Which you should anyway, but if you miss one, someone could set it themselves. |
| 20:06.51 | swb | how would they set variables themselves? |
| 20:06.57 | beandog | URLs |
| 20:07.03 | beandog | foo.php?password=123456 |
| 20:07.27 | swb | oic, that's what I would've guessed but wasn't sure |
| 20:07.30 | beandog | Consider a scenario where you check for a certain condition. If that condition is true, you set a variable to something |
| 20:07.38 | beandog | If its not true, you *assume* its blank and ignore it. |
| 20:07.46 | beandog | Later on down the road, you check for a condition on that 2nd variable |
| 20:07.55 | beandog | however, if register globals is on, someone might have already set that first one to something. |
| 20:08.29 | beandog | So you would either have to specifically set the first variable to nothing if the condition returns false |
| 20:08.38 | beandog | or ... well, no, there is no or. |
| 20:08.55 | beandog | Basically there are no *good* reasons to turn it on. |
| 20:08.57 | beandog | If you want to be lazy |
| 20:09.05 | beandog | use import_request_variables(); |
| 20:09.20 | beandog | but even then, not until youve already set the variables you want to be set. |
| 20:27.22 | *** join/#uphpu jsmith (n=jsmith@h460507c2.area3.spcsdns.net) |
| 20:27.22 | *** mode/#UPHPU [+v jsmith] by ChanServ |
| 20:41.02 | macnewbold | haha |
| 20:41.02 | macnewbold | if it ain't broke... |
| 20:41.02 | macnewbold | heck, I have a video card that _is_ broke, for at least a year now, and I still haven't fixed it, even though I still use the computer |
| 20:41.03 | macnewbold | I just use it headless now :) |
| 20:41.03 | macnewbold | FreeBSD is nice that way... as long as it boots okay and has sshd working, I'm good |
| 20:41.03 | mindjuju | lol |
| 20:41.03 | mindjuju | here's my video card |
| 20:41.03 | mindjuju | http://www.tigerdirect.com/applications/searchtools/item-Details.asp?EdpNo=1755113&sku=TC3H-1041 |
| 20:41.18 | mindjuju | well, for my computer at home, not work computer |
| 20:41.43 | beandog | lol |
| 20:41.49 | beandog | cost-effective is right. |
| 20:41.55 | beandog | Ooh, matrox. |
| 20:41.57 | beandog | I want one. |
| 20:42.30 | mindjuju | hey man, that's got 16 mindnumbing mb of RAM |
| 20:42.38 | mindjuju | and 4x AGP to boot |
| 20:42.53 | beandog | you can run X on much less than that |
| 20:44.51 | mindjuju | i can also play red alert on that vid card too |
| 21:26.08 | js-attacking | mindjuju: The phone company! |
| 21:27.00 | *** mode/#UPHPU [+v timinator] by ChanServ |
| 21:31.07 | beandog | bellsouth probably |
| 21:31.19 | beandog | or verizon |
| 21:31.20 | beandog | who knows. |
| 21:31.24 | beandog | Baby Bell Foo. |
| 21:39.41 | wps | lonnie always puts things so well |
| 21:39.56 | wps | concise, powerful |
| 21:40.08 | wps | I enjoy his comments and posts |
| 21:40.26 | fungus | Ahh, the plug comment? hehe |
| 21:40.34 | herlo | beandog, thanx for the input on 'register_globals'. Would anyone have an opinion on using the 'global' directive? |
| 21:42.07 | fungus | usage of the global directive is not wrong, or bad, but it should be used sparingly as global variables can be hard to debug, and deal with after the fact. |
| 21:42.42 | fungus | If you global variables are documented well, it won't be a big deal, and can be very useful. |
| 21:45.08 | herlo | fungus, give me your opinion on the usage here: http://pastebin.ca/249395 |
| 21:45.53 | beandog | why not juse use sessions? |
| 21:46.06 | fungus | I don't see why you need a global variable for it. |
| 21:46.09 | beandog | if you need to share stuff across pages |
| 21:46.12 | beandog | er |
| 21:46.13 | beandog | yah. |
| 21:46.14 | fungus | $_GET is superglobal |
| 21:46.59 | fungus | But i don't see where you would even use the global directive. |
| 21:47.07 | olds | yea |
| 21:47.17 | fungus | the global directive is only needed when you want to use a global variable inside a function/method |
| 21:47.30 | beandog | agreed |
| 21:47.32 | beandog | :) |
| 21:47.33 | beandog | KISS |
| 21:47.46 | beandog | The real question is, what are you trying to accomplish |
| 21:48.11 | olds | We use a global $db variable inside functions for anabasis (the project management system com4 and I are developing) |
| 21:48.40 | fungus | I personally only use global variables for things like database connection objects/handles, config arrays, and such. |
| 21:48.55 | beandog | well even inside your functions db_query() will work |
| 21:49.00 | beandog | unless youre using a connection class. |
| 21:49.07 | beandog | even then, the connection would still be open. |
| 21:49.09 | olds | Here's an example.... $db is connected in the config file.... |
| 21:49.13 | olds | http://svn.zzq.org/filedetails.php?repname=anabasis&path=%2Ftrunk%2FEXAMPLE-config.inc.php&rev=0&sc=0 |
| 21:49.28 | beandog | but youd have to global the class instance |
| 21:49.58 | beandog | ooh is that websvn? |
| 21:50.00 | beandog | that's pretty. |
| 21:50.04 | olds | http://svn.zzq.org/filedetails.php?repname=anabasis&path=%2Ftrunk%2Ffunctions.inc.php&rev=0&sc=0 |
| 21:52.24 | olds | cvs |
| 21:52.45 | beandog | oh man |
| 21:52.47 | beandog | I hate CVS |
| 21:52.55 | beandog | but viewcvs reads svn repositories too |
| 21:52.55 | olds | cvs is such a fuster cluck |
| 21:54.00 | fungus | CVS was great ... in it's day. |
| 21:54.09 | fungus | Now there are much better alternatives. |
| 21:54.11 | beandog | there ya go. |
| 21:54.17 | olds | go back to your typewriter old timer! |
| 21:54.22 | olds | ;) |
| 21:54.45 | olds | I wonder how long it'll take to put 5 million rows in this table |
| 21:55.01 | beandog | use a transaction |
| 21:55.19 | olds | meh, it won't take more than 5 minutes |
| 21:55.50 | fungus | 5 million times the time it takes to write the record and create each index item for one row. |
| 21:55.52 | olds | it's just calculating a random unix_timestamp and putting that into a datetime field |
| 21:56.08 | olds | yea |
| 21:56.21 | fungus | How is a random unix_timestamp useful? |
| 21:56.43 | olds | I'm messing around with some stuff |
| 21:56.57 | fungus | ahh, experimentation is always acceptable. |
| 21:57.57 | olds | it's at about 750,000 now |
| 22:03.01 | olds | 1.5 million |
| 22:03.07 | olds | ok maybe longer than 5 minutes |
| 22:03.33 | beandog | heh |
| 22:03.37 | beandog | what db |
| 22:04.52 | olds | mysql |
| 22:08.07 | macnewbold | what kind of server? |
| 22:08.14 | macnewbold | what's the code to insert a row? |
| 22:08.43 | olds | a small server? |
| 22:08.45 | olds | heh |
| 22:08.59 | olds | it's just a 2.8ghz Celeron D |
| 22:09.04 | olds | running Ubuntu 6.10 |
| 22:09.09 | olds | 1GB of RAM |
| 22:09.15 | beandog | thats small? |
| 22:09.34 | olds | it's my mythtv box |
| 22:09.56 | olds | while($i<5000000){ mysql_query("INSERT INTO example (time) |
| 22:09.58 | olds | VALUES(FROM_UNIXTIME(ROUND(RAND()*(1000000000))))"); $i++; |
| 22:10.13 | olds | that's the main chunk of it |
| 22:10.51 | beandog | Coulnt you just do something like INSERT INTO foo (SELECT now() LIMIT 5000000); |
| 22:10.55 | beandog | or something |
| 22:10.58 | olds | nope |
| 22:11.01 | olds | I tried |
| 22:11.11 | beandog | what version of mysql? |
| 22:11.15 | olds | 5.0.19 |
| 22:11.16 | olds | I think |
| 22:11.20 | beandog | Hmm |
| 22:11.23 | beandog | subselect should have worked. |
| 22:11.23 | olds | Your MySQL connection id is 1003 to server version: 5.0.24a-Debian_9-log |
| 22:11.44 | olds | it's at 3 million |
| 22:12.05 | olds | I think that's enough |
| 22:14.50 | beandog | has anyone tried the latest trac |
| 22:14.55 | beandog | Im about to upgrade mine |
| 22:46.23 | herlo | fungus, beandog: it's just a simple page, and it isn't what I am doing, but here's a good reason why I might use it that way. |
| 22:47.09 | herlo | I might just setup some configuration options, say $db_username = 'herlo'; or something, then I am going to want to use them later on... |
| 22:47.39 | herlo | I am obviously going to not want them in the main index.php page, and I could create an object, but if its simple why |
| 22:48.02 | macnewbold | herlo: you don't need an object |
| 22:48.05 | herlo | right |
| 22:48.11 | herlo | that's what I am saying |
| 22:48.16 | macnewbold | just set $db_username="herlo" in the file or in any file you include, |
| 22:48.22 | herlo | right |
| 22:48.25 | macnewbold | and you can use $db_username anywhere |
| 22:48.33 | herlo | then when I try to use tha tin another file, it doesn't seem to see it... |
| 22:48.42 | macnewbold | want to pastebin me the code? |
| 22:48.44 | herlo | similar to my pastebin'd code |
| 22:48.50 | fungus | herlo: that is a perfect reason to use global variables. |
| 22:48.50 | macnewbold | what's the link? |
| 22:48.53 | herlo | the exact code, maybe |
| 22:49.03 | herlo | fungus, is that just using the global directive? |
| 22:49.16 | macnewbold | no, you don't even need the global directive, unless you're inside a function or class |
| 22:49.23 | herlo | that's what I thouhg |
| 22:49.23 | fungus | you only need the global directive to read the global inside a function |
| 22:49.27 | fungus | err, yeah. |
| 22:49.35 | herlo | tbut it seems not to be working... |
| 22:49.42 | macnewbold | show me the code |
| 22:49.52 | herlo | I haven't the time right now to send the code, but I will later |
| 22:49.53 | macnewbold | and what it is doing |
| 22:50.01 | macnewbold | I thouht you arleady pastebin'd it |
| 22:50.04 | herlo | I think it'll be a good discussion of security and best practices on the list |
| 22:50.05 | macnewbold | *looks for a link* |
| 22:50.10 | herlo | macnewbold: that was just an example |
| 22:50.14 | herlo | not the real code |
| 22:50.18 | macnewbold | http://pastebin.ca/249395 |
| 22:50.34 | herlo | yeah, that's the example, I wrote that up for ease of understanding |
| 22:50.55 | herlo | assigning the $myvar can be assigned any value, not just $_GET stuff |
| 22:50.56 | macnewbold | if that's what your code does |
| 22:51.06 | herlo | very similar |
| 22:51.07 | macnewbold | then $myvar will be set to whatever $_GET['avalue'] is |
| 22:51.11 | herlo | right |
| 22:51.14 | macnewbold | thta's exactly how it works |
| 22:51.14 | herlo | I agree |
| 22:51.19 | macnewbold | how can you tell that it isn't working that way? |
| 22:51.20 | herlo | but it doesn't seem to be |
| 22:52.38 | herlo | well, I was more interested in the security worries of using superglobals and register_globals and what precautions I needed to take, but hten I got taken down this entirely too long discussion about other worries that I shouldn't/didn't consider |
| 22:52.45 | herlo | which is fine |
| 22:53.17 | herlo | but now I am back to my original question, which is why doesn't something similar to that work the way I think it should... |
| 22:53.18 | macnewbold | register_globals on opens up some possible holes, just like extract()ing can |
| 22:53.27 | herlo | k |
| 22:53.36 | macnewbold | but if you're careful, they're not the end of the world in any way |
| 22:53.47 | herlo | but I am not wholly interested in the extract() function as I am aware that it exists and use it regularly |
| 22:54.18 | macnewbold | the biggest problem is when they submit a value that you didn't intend to have come to them, and you didn't initialize it yourself, overwriting/ignoring whatever they sent |
| 22:54.18 | herlo | btw, the code I am looking at is someone elses, but has a promising concept... |
| 22:54.24 | macnewbold | ah |
| 22:54.55 | herlo | so I am still in the middle of trying to figure out where many of the variables are landing on a page |
| 22:56.43 | herlo | and I suspect from what I've been told here today, is that it has absolutely nothing to do with register_globals, nor the global directive. It means that my example was too simple, and that I'll have to come up with a better one.... |
| 22:59.15 | fungus | register_globals only does the automatic extracting of $_GET, $_POST, $_COOKIE, and $_SESSION. |
| 23:01.23 | fungus | that automatic extracting can be a security problem. Your own pre-initialized safe variables are just fine for global usage. |
| 23:03.21 | herlo | that's what I thought |
| 23:04.53 | *** join/#uphpu swb_ (n=designsi@box41.bluehost.com) |
| 23:05.56 | *** join/#uphpu _psychic_ (n=_psychic@71.32.228.156) |
| 23:05.56 | *** mode/#UPHPU [+v _psychic_] by ChanServ |
| 23:07.45 | fungus | The general practice I use is to validate, examine, or otherwise filter every value I get from a user modifiable superglobal. |
| 23:08.19 | beandog | register_globals extracts session variables too? |
| 23:08.35 | beandog | I thought it just did gpc |
| 23:09.04 | herlo | okay |
| 23:09.30 | fungus | IIRC it does session too. |
| 23:09.42 | beandog | hmm |
| 23:09.43 | beandog | thats crazy. |
| 23:14.08 | fungus | This is helpful if you have to deal with a register_globals setting you don't like. |
| 23:14.09 | fungus | http://php/manual/en/faq.misc.php#faq.misc.registerglobals |
| 23:14.29 | _psychic_ | register globals is the devil |
| 23:14.41 | fungus | agreed |
| 23:14.57 | _psychic_ | therefore, OSCommerce is the devils haircut |
| 23:18.42 | macnewbold | beandog, fungus: I'm pretty sure register globals doesn't do session variables |
| 23:19.32 | macnewbold | in any case, the data in a session can only be put there from serverside, so you are in tight control of what goes in there, unless you blindly trust data they supplied you |
| 23:19.32 | fungus | Verified. register_globals does use session variables. |
| 23:19.33 | fungus | http://php/manual/en/security.globals.php |
| 23:19.44 | macnewbold | weird |
| 23:19.47 | fungus | "Another example is that of sessions. When register_globals = on, we could also use $username in our example below but again you must realize that $username could also come from other means, such as GET (through the URL)." |
| 23:20.36 | macnewbold | that's not a session variable thoug |
| 23:20.36 | macnewbold | h |
| 23:20.59 | fungus | That statement says that a GET variable could override a SESSION variable. |
| 23:21.02 | macnewbold | yes |
| 23:21.12 | macnewbold | that's different than register globals doing extract($_SESSION) for you |
| 23:21.23 | macnewbold | which is what I thought you were saying |
| 23:21.40 | fungus | essentially the same thing. |
| 23:22.05 | fungus | hrm, I may be wrong... the ini setting doc seems to indicate sessions are not included. |
| 23:22.06 | fungus | http://php/manual/en/ini.core.php#ini.register-globals |
| 23:22.37 | fungus | These two docs are conflicting. |
| 23:24.06 | fungus | Considering that both the register_globals, and variables_order both indicate that sessions are not included, seems to indicate that the doc security.globals.php is incorrect. |
| 23:25.18 | fungus | oh, sorry. those links won't work for you. Just change them to php.net. I was using my local mirror. |
| 23:59.11 | herlo | fungus: thanx for the links, I have much reading to do |