| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Comments:
<0> well almost anything <1> md5 is great for storing p***words in a db... where collisions are not a big deal <2> lietu: AHUM <2> ah, thought so <1> ...given enough time and money... <0> I use 2x md5 with salts <2> bacula <2> even in the database of the DoD? ;) <2> lietu: BAD LIETU! <3> I just know some VisualBasic no php rofl <2> one time should be enough <1> Fushuing: good thing I don't work for the DoD ;) <3> ok now I got that thing working, tnx, now let me see what I can do <0> $p*** = md5("peanut" . md5("salt" . $realp*** . "pepper")) . "butter"); ;) <3> to grab an htp***wd file to add edit del users <2> you stole that from vBulletin, congratulations ;)
<0> stole what from where? <2> MarkL: i recommend using a salt <4> Fushuing: No point <2> lietu: i don't remember the file anymore :S <0> I just made that up, I don't really use those words ;) <2> MarkL: make it less collisionable... <4> Fushuing: How is someone going to get the md5 in the first place? <2> break into the database? :D <4> Fushuing: By cracking the server, in which case your users md5 p***words don't matter <2> SQL injection >.> <2> lotsa ways <3> dont u guys know an already made php script for what I want to do <0> MarkL: users md5 p***words matter, they could be using the same p***words elsewhere, the reason your server gets hacked might not be your server, but the users <2> O-Lestat: we don't support/help with third party scripts <2> ... <4> lietu: In which case no method matters if they have the p***word already <2> s/server/fault <1> btw: hashing is a kind of encryption. <2> it could limit it :S <0> I mean, they could want to get the p***word from your site to get into their other accounts <0> bacula: not really, it doesn't store the original <2> for, if you can use a md5 hash in combination with a sql injection, you won't be able to use it on a different site which uses a different salt <0> ... rainbow tables can be used to determine the original, but it's not really decrypting ;) <2> lietu: not even determing... <2> guessing :S <0> Fushuing: well quite accurate guessing with a good rainbow table ;) <1> lietu: it's a one way encryption. I'm talking in encryption textbooks... <2> because there are a ****load of matches <5> Can someone tell me why, when I try to ***ign $this->var to the returnval of a mysqli_connect, that nothing after the statement is executed, but if I ***ign $var to it, it does? <5> I declared, inside the cl***, "private $var" <0> bacula: ah, right <3> erm <3> Parse error: syntax error, unexpected ',' <1> patrick_ : sounds like a var scope issue <3> nvm <0> O-Lestat: well where the heck are you trying to stuff those ","s in? <3> I put em in the wrong place lol, hhe sorry my bad <0> Fushuing: sorry, I mean quite accurate guessing with a good rainbow table and bad p***words ;) <5> bacula: "cl*** the_cl*** { private $var; function foo() { $this->var = mysqli_connect(...); } }" <4> http://gdataonline.com/seekhash.php is quite good at cracking hashes for average p***words ;) <0> but I'm sure in, say, 2 yrs, they develop some way to find, say the "top100" propable matches for even a 2x salted md5 sum, .. 100 guesses isn't much, considering they run ~20k word dictionary hackers etc ;) <1> patrick_ : put that in your constructor <1> then it will be available to the cl*** <0> after all, it's all just mathematics <0> 1 + 1 = 3 et cetra ;) <5> bacula: You mean in "function __construct() { }"? <6> hi <5> because that doesn't work, either <7> how do I manually terminate a session from the client side? <0> Tarantulafudge: um, flush the browser cache and restart the browser? ;) <6> what is the way for POST values in a telnet session? <5> anyone else? <0> s/cache/cache, cookies etc crap data <7> is the session id stored in a cookie? <4> Tarantulafudge: Most times. But it can also be in the url if you allow it to <3> erm <3> is there a server or something <3> to make telnet enabled on a pc <0> O-Lestat: usually it's in the /etc/inetd.conf of a unix computer, of windozes I wouldn't know <8> I can't (quickly) see a way to do sasl authentication when sending mail .. anyone know anything?
<0> but you shouldn't enable telnet on modern computers, well atleast pretty much never <3> oh <0> 'coz it's not encrypted in any way <5> Anyone know why, when I have "private $var;" inside a cl***, and then in a function I try to access it with "$this->var", I get "Fatal error: Using $this when not in object context" <3> ok I was just wondering <9> anyone have experience with phpunit? <9> i get this error when I try to run scripts directely <9> Fatal error: Cl*** 'PHPUnit2_Framework_TestCase' not found <4> patrick_: Sounds like your using it in a static method via foo::bar() for example <4> patrick_: $this-> requires an instance <9> in some warning.php file form it's dir <9> its <5> ohhhh <5> MarkL: Not used to OO :). How could I accomplish this without an instance? <9> running from cmd line with phpunit file.php works fine <4> patrick_: You can't and probably don't want to ;) <3> lietu do u know windows remote desktop connection? <0> O-Lestat: let's say I've heard of it and know enough to disable it on every windows xp computer I install <3> how enable it? <0> I always just right click "my computer" on the desktop, choose preferences and it's somewhere in there... I never cared enough to learn the names of the control panel icons ;) <5> lietu: Or, you could use ssh :) <0> I wouldn't know <10> !tell O-Lestat about u <6> is that ok: POST /paymentByp***_return_payment.php HTTP/1.1 <6> Host: grog.aditel.org <6> User-Agent: Waterfox 1.65 <6> Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5 <6> Content-Type: application/x-www-form-ulrecoded <6> Content-Length: 304 <6> id=1ac0313a&n=1234 <0> I'm smart enough to use windows only as a gaming/warez/movie watching/mp3 listening/etc desktop and not to trust it in doing any other job ;) <0> ... it can hardly do that, heh <2> hey guys, i wanna create a small competition <3> o.O <2> for who can make the best art in PHP <10> Fushuing: not here, please. <2> :( <10> !+g7 <11> Guideline #7) No spam, bots, scripts, trolls, job postings (no job posting / asking for jobs on ##php. You might want to check out: ##php.jobs http://www.geekfinder.com, http://www.monster.com, http://www.rentacoder.com or http://www.getacoder.com, or php.net/links, "Developers and Job Opportunities"), advertisements or onjoin/away/back messages. <12> <? php print eval("1+2"); ?> -- when I run this script from the command-line, php says: "Parse error: parse error, unexpected $ in /tmp/b.php(1) : eval()'d code on line 1". Where is the the unexpected $? <2> not THAT kind of competition :S <3> lietu it is different the one you told me and the other. <10> Fushuing: I don't care. Not here. <0> O-Lestat: what is different from what? make sense, dude <3> in windows <0> ... right, now THAT cleared it up a whole lot <4> jeff2: 1+2 isn't valid php code <3> you go to All Programs > Accessories > Communications > Remote Desktop Connection <0> O-Lestat: you asked how to enable it <0> that might be the client program, not the server <3> oh <10> O-Lestat, lietu: Take it to #windows <3> do you know about the server? <0> ... I'll rather just drop the subject <0> O-Lestat: no <3> ok <12> MarkL, so eval() can't be used to evaluate expressions? <4> jeff2: Not plain expressions like 1+2 no <12> MarkL, I suppose I could set the expression to a variable, then read the variable after the eval()..that works <13> is there a way to get the approximate "pixel width" of a string? <13> for a particular font or ingeneral <13> i dont need a perfect solution, just a fair approximation <0> easy, use a fixed width font and calculate it based on the width? ;) <0> too bad different OSes don't use the same fonts, eh? ;) <13> lietu: i cant change font i must use the font i have <0> well the point kinda was that unless you're using it to create an image somehow, it's bound to fail on different systems, like for example someone using Windows and different linux distributions, the rare users that want to define their fonts manually etc <14> Hey back again... How can i stop the form from submiting ($_POST) the data on refresh? I want it only to submit when i click a button <13> lietu: i get it. <14> is it something with isset? <13> Cambridge13: you wil have to make the page reload twize <13> +-spelling <14> what do you mean? <13> when you submit data
Return to
#php or Go to some related
logs:
monkeys-audio deb #dns #suse ubuntu 1680x1050 how #qemu boot to pcmcia cd-room
tun0+bandwidthd #ldap 019876543210 lame brhist centos
|
|