| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
Comments:
<0> Hi tsume <1> hi im having a litle problem. when i go to http:/jezek.gtlvideos.com/display.php?thumb=45 it displays fine but then when i do <img src="http:/jezek.gtlvideos.com/display.php?thumb=45" alt="Image" /> it doesnt work. it doesnt display any image <2> considering that who wrote phpBB vs who wrote fudforum, i'd pick fudforum anyday <3> can't find any screenshots on fudforum. anyone have a link so i can take a look? <0> JAJMaster: Some of us don't believe in a supreme being. <3> who wrote fudforum? <1> I did <2> ilia <4> texasnewbie: just go to their home page...it's the forum for all to see <5> JAJMaster: anything much more powerfull than phpBB? <6> hi when I did this: nl2br(htmlspecialchars( Why is the tab not shown ? <4> pegazus: lots of options out there. Ups and downs for each I'm sure. <3> JAJ, just took a look and am skimming over the 126 page manual <4> kuja: that's just because you havn't met me yet <3> so what makes on forum more secure than another? there are always vulnerabilities in any forum, right?
<0> JAJMaster: Are you claiming to be a supreme being? <4> texas: phpBB has had some doozies...but there are a LOT of sites out there so that's maybe not saying too much <4> kuja: sometimes <0> JAJMaster: Then you sir, are an idiot. <4> kuja: and it depends on the context <7> you have to pay for vbulletin so i always ***umed it was checked for vulnerabilities more thoroughly <4> kuja: I'm pretty supreme at eating peppermint patties...mmmmm....peppermint patties ..... <--- considers making a midnight run <2> Pegazus: i suggest it cause it is written in a more secure manner <3> JAJ, so does more successful attacks against a forum package that gets more run constitute less security compared to lesser used forums? <2> Pegazus: hell.. a recent phpBB bug allowed joe user to post php evaled code <4> texas: hard to make conclusions based on the data...just interesting <2> and there are phpBB exploits not yet published <2> note to anyone using phpBB anyway... be sure register_globals is off <3> just wondering. i don't see anything about other forum packages that show they are more secure. of course, i haven't had time to look at alot of source recently <2> texasnewbie: well, i'd rather trust a php developer than 300 random people who think they know php <8> mmm <8> I'd rather trust an app that's not in PHP myself :) <3> zircu: understood. just trying to figure out what the threshhold is for 'better security' before i give out false information to clients about certain php packaged apps <8> but sometimes that doesn't work <2> the biggest problem with fudforum is the lack of themes like phpbb <2> texasnewbie: well, i would put fudforum up to phpbb as a contender <3> no problem <7> i like vanilla myself <3> always looking for options to offer clients <7> http://getvanilla.com/ very clean forum <3> is anyone here active in their local php meetup groups, or am i a dork for going to those meetings every month? <9> is it possible to have a php function called when a session times out ? <4> texasnewbie: it is accurate to say that there have been FAR more exploits found for phpBB than fudforum. It is also accurate to say that FAR more people use phpBB. One can guess at conclusions, but they are just guesses. Using fudforum will likely yield fewer security problems, but that doesn't necessarily mean that one has "better security" than the other...it "might", but you just can't tell from the available data. <7> think of it like windows, <7> woops <2> texasnewbie: well if you are the only person, showing up, yea you are a dork :) <0> Heh, *still* discussing forums? <0> **** forums, dedicate an IRC channel to the subject. *Problems solved* <10> he kuja <4> hehe, yeah...were people actually asking PHP questions the forum discussion would get in the way <2> JAJMaster: yeah that is a good point.. kind of why windows is targeted vs unix <10> kuja: what's up <3> zircu: good one.:) we had 21 people show up on tuesday. <0> zircu: A lot of *nix variations are open source. Open source == open community, open community == developers *** raping your code so that it doesn't puke like Windows. <2> kuja: i dont see how that is related <0> Well, if you want to discuss security of Windows for UNIX implementations. <0> s/for/vs/ <0> Windows is used more, it does have more exploits and security issues, but that's really not along the same lines as the two mentioned forum software. <11> zircu: wanted to let you know. Everything worked out when I removed the comment from the db with the line breaks. I'm sorry for putting you through all that trouble - Spoom as well. Thanks for all your help:) I used both your advice and Spoom's. <4> Jezek: you still around? <3> so do you guys develop web apps, php-enable web pages, or both? <2> kuja: dont do it <0> zircu: I need one :P <0> I just realized I'm in ##php, so I really really need one. <0> This is a very dangerous place to be :P <9> is it possible to have a php function called when a session times out ? <2> kuja: so you are saying that popularity of phpBB isn't related to why it has more known exploits? <3> nife, i would think so. if the user session ended and control went over to a guest profile, then yes it is possible. <2> sorry, i'm a bit slow tonite <12> haha <13> hi <7> zircu: it does in a way, the more people who code a project the more you have different coding styles, causing holes. also because there are more forums there are more reasons for people to hack them. <0> zircu: No, I'm saying that logic can't be applied to Windows vs *nix. <0> Well, in can, in a smaller way. <0> s/in can/it can/
<3> maskd: but is that *always* true about the more coders there are, the more style habits will conflict with one another? wouldn't that depend on the project managers? i contribute to sugar and there are strict standards for coding style. <2> kuja: i say in a big way, cause there are apps out there that just spider for exploits.. much like the apps that look for iis exploits <7> texasnewbie: if you look through phpbb's source you'll see that its not exactly complying to one standard <2> but yes on a smaller scale <14> is there an *easy* way to access the last element of an array? (by easy i mean shorter) <2> texasnewbie: that is why sugar is a reliable piece of software <0> zircu: You see, you can't just go through the Windows source code and start patching ****. Microsoft would have to hire you for that. Some random John Doe guy can come and write a patch of Linux anytime he wants. <0> s/patch of/patch for/ <2> kuja: ah i see where you're going now <15> hrlllo BOYS :) <15> hello BOYS :) <16> aubs: you better be a frickin chick. :/ <3> maskd: i'll defer to you about the phpbb source code. i've never really had enough time to analyze it. <15> OMG <4> not to wade too deep into the muck, but there is a bit of difference to the analogy. With something like a forum, the idea is to let a LOT of people have generally easy access to your stuff. Hence it is that much easier to exploit. Unix network security is quite good, but there is practically NO way to ensure that once you let someone interactively log in that they can't exploit your system. <14> actually <0> Ademan: php.net/end <13> hi <14> kuja: thanks <3> uh....what just happened (re. Aubs)?:) <13> a questin why i can print a superglobal variable <16> I think i hold the record for total number of glares and slaps in this channel by females... Jymmm takes a close second... but i'm sure i still hold the belt *evil grin* <2> JAJMaster: you are getting way to deep into the muck :) <13> it returns me Parse error: parse error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in <0> bujin: Yes, it means you've got a syntax error. We can't really do anything without some code. <13> oks <3> what's going on aubs <15> texasnewbie: wtf are you on about? <13> <?php <13> print "the ip is:$_SERVER['REMOTE_ADDR']"; <13> ?> <16> bujin: i think your missing a closing tag <14> bujin: dont multiline paste <16> or not <3> what do you mean aubs? <0> bujin: {$_SERVER['REMOTE_ADDR']} <14> http://rafb.net/paste <1> hey if this doesnt belong here then sorry.. but im writing random scripts to gain experience and can't think of anything to do right now. anyone have any suggestions? and nothing too advanced <16> kuja: :$var is a parse error? <13> whats it the page for multiline pasting <0> No, the ['REMOTE_ADDR'] is the error. <13> thanks kuja <4> bujin: pastebin.com <12> Jezek: write a script that reads the files / folders from a dir, and allows you to navigate through the folders (but NOT open files) <3> Jezek: parse some sample xml files and render the data in tables. <1> thx ill do both! :P <17> could someone look at this please? it seems to be messing with my session variables... http://pastebin.com/714787 <14> hey, has anyone actually used the openAL extension for php? wtf does it actually do? <15> texasnewbie: ou asked what is going on with me...? <4> jezek: did you figure out your image problem earlier? <1> yeah <4> jezek: Content-Type problem? <3> Aubs: it wasn't an insult. just asking what's up, as in how ya doin? <15> texasnewbie: ou = you <1> yep <18> is new mysqli() suposed to be so much slower then the old mysql_connect? over 1000 calls its 7 times slower <15> texasnewbie: /i'm doing great, thanks! <3> monster: no it isn't. <3> aubs: cool! what's going on tonight? i'm taking a break from looking at my newest project. so much spaghetti code left by the last guy.:-[ <18> maybe its a windows thing <13> kuja, why now u have to use the {} <3> trying to convert the project to smarty and adding some new functionality <13> kuja, when u use a superglobal variable <19> kuja? where? <15> texasnewbie: Nah, boyf's not happpy with cganges... <0> php-bot: tell bujin about u <0> :)
Return to
#php or Go to some related
logs:
no inittab file found gentoo monitor hmd-a240 refresh #lisp split window nautilus yast async all_squash add windows to grub #centos pear install Image_3D Motorola WU830G and Ubuntu gentoo+broadcom+bcm5704+driver
|
|