Charcoal HQ

@hichris123 I'm saying that you could insert JS code into a textbox. It wouldn't harm the server, but if displayed to another user, it could do something bad. Does PDO protect against that?

I'm not worried about SQL/interpreter injections

hichris123

@AnnonomusPerson Probably not.

Annonomus Person

Exactly

Did you see the xkcd on the heartbleed thing?

hichris123

394

Q: What's the best method for sanitizing user input with PHP?

Is there a catchall function somewhere that works well for sanitizing user input for sql injection and XSS attacks, while still allowing certain types of html tags?

^ There you go. :P

@AnnonomusPerson Yeah. :D

in Software Recommendations, 18 secs ago, by hichris123

Just wanted to congratulate you on actually working positivly throught all this, and not being too upset with your ban. You're contributing nicely now, so good work!

@Undo ^

Annonomus Person

@hichris123 Who got banned?

hichris123

@AnnonomusPerson ... long story.

Revious aka Sam.

Wait, did I spell his username right? checks

Annonomus Person

1:43 AM

@hichris123 But I don't need this for a database with PDO?

hichris123

@AnnonomusPerson If you're worried about XSS, for sanitizing that you need it. PDO should make it good for you with SQL Injection.

Annonomus Person

That's what I though.

Well, my site should be pretty secure once I add a few components to it.

Just need to code it now!

:D

hichris123

-4

Q: Which tools (inf2cat or MakeCat) should be used for Creating a Catalog File for Test-Signing a Driver Package for WinDivert

I am a newbie in windows packet filtering. I am working on a project that needs to filter packets in windows. The decision of filtering is made in userspace so I need a tool to send a copy of the packets from Kernel Space to my application before they hit the firewall. I've found WinDivert proje...

support

Eek!

@AnnonomusPerson I'm going to make @Undo code my homepage. :P

(not really)

Annonomus Person

lol

hichris123

(maybe)

Annonomus Person

1:46 AM

If you get mod you should make him.... :D

hichris123

What does a ♦ have to do with him working? You saying I can ban him if he doesn't work? :P

Annonomus Person

@hichris123 For a few seconds :D

hichris123

... say, what happened to @Undo's chat-ban?

Annonomus Person

Still there.

It's a weird technicality in the system.

hichris123

@AnnonomusPerson Really? I'm not seeing it.

Annonomus Person

1:48 AM

Hmm... he might've removed it.

Weird.

hichris123

Eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeek!

Annonomus Person

MUST BAN HIM AGAIN

:P

hichris123

99

A: The Many Memes of Meta

Meme: Eeeek! Originator: Marti First Seen: 4 Mar. 2011 ~ Eeeek what happened to my envelope? (sorry guys, 10k only. Screenshot for <10K users) Cultural Height: Probably still to be reached, given the increase of developers working for Stack Exchange. Although see comments here for first signs...

hichris123

2:08 AM

16

A: Stop using community wiki as a reputation denial mechanism

Community wiki isn't a tool for reputation denial. We originally had all these automatic triggers mostly to leverage existing systems to handle abuse situations. While it can be said that it "worked", it also very largely didn't work, and a lot of pain was had by people who had legitimate contrib...

:O

Undo

3:37 AM

@hichris123 okay. After I'm done with this app. And the mountain of consulting things I'm going to have piled up.

@AnnonomusPerson nope. 100% gone.

Another mod removed it :P

@hichris123 huh, I haven't seen him around much other than Meta.

I think I probably scared the crap out of him when I told him that the default for the next ban is a year.

hichris123

@Undo Lemme guess - you want paid? :P

In all seriousness, I'll make at least part of it, and give it to you for prettyifiying.

Or something like that. :P

Undo

Okay :P

hichris123

works on it from tablet

Undo

Project links: Blaze (GH) | Charcoal (GH)

That's better :P

goes off to Blaze stuff

Blaze

3:53 AM

[Blaze] answer flagged: stackoverflow.com/questions/22975659/…

[Blaze] answer flagged: stackoverflow.com/questions/9819829/…

[Blaze] answer flagged: stackoverflow.com/questions/11801376/…

Undo

@Blaze 1.3k user. Yeesh.

hichris123

goes to blaze

@Undo I left a comment.

Blaze

4:05 AM

[Blaze] answer flagged: stackoverflow.com/questions/17812379/…

hichris123

3:14 PM

@Undo Reviewer for you to flag if you feel like finding another bad review: stackoverflow.com/review/suggested-edits/4546828

Blaze

[Blaze] answer flagged: stackoverflow.com/questions/1831113/newline-in-constant/…

Undo

3:32 PM

returns

Oh @hichris123 still on spring break?

hichris123

@Undo Yeah.

Undo

sigh Problem with being a mod: You get to see all the really weird things people flag with really weird custom reasons in chat.

hichris123

Wait - you can flag things with custom reasons? :D

Undo

apparently

Shows up as an annoying orange blemish on my profile :P

@hichris123 Can you help me with something?

hichris123

3:50 PM

@Undo Sure: what do you need?

Undo

@hichris123 Got a flag on this saying that the comments are a mess. I don't feel like wading through them and figuring it out. Can you plz?

hichris123

rofl

takes away @Undo's diamond for a second since he's being lazy

Undo

it doesn't help that they're all written in music language :P

I started and thought, "I have no idea what any of this means. I have no business deleting anything here :P"

hichris123

I... have no clue.

I get some of it.

But I dunno what to delete.

Undo

I almost want to purge them all and be done with it :P

it's sat in the queue for like ten hours :P

strike that, thirteen now

meh, dismissed as helpful

if you get really bored you can flag them individually :P

Awal Garg

3:57 PM

Hello, I have come here first time

I would get out of here

Undo

Oy @AwalGarg

bye :P

We must be scary or something, @hichris123

Hi again!

Awal Garg

Ha ha, i tricked it

So what does it feel like hacking SE?

Undo

fun

and somewhat maddening

Awal Garg

And how do I do that fun?

Undo

You take an area that you want in to and poke at it.

Spoof POST requests, etc.

hichris123

4:02 PM

@Undo Really? :(

Undo

Trying to hack in to the mod tools is fun

Awal Garg

My area would be - chat.stackexchange.com

hichris123

But... we don't have mod tools!

Undo

@hichris123 Which is why you want to hack into them, right?

@AwalGarg Yup. Trying to get into TL is fun

Awal Garg

What is TL?

Undo

4:04 PM

It's chat.stackexchange.com/rooms/4/teachers-lounge

The mod-only room

where they talk about sekrits all day long

Awal Garg

Wow, that was a nice page i just visited

Is it safe to click the Request Access button?

Undo

don't :P

Your job is to get into the room without pressing that button

(if you press the button someone will just deny your request)

Awal Garg

Ok, anyway I can accomplish that?

Undo

I don't know of one

But it's software, therefore there's a vulnerability somewhere

Awal Garg

Do those mods know what evil thing we are planning here?

Undo

4:07 PM

possibly

It's a fun challenge

locked up pretty tight.

If you can get in without a diamond, you will forever be hailed as a hero. At least until the bug gets fixed.

3ventic

If you mess with the software, the developers probably dislike you.

But if you also report your findings, they probably somewhat like you.

Awal Garg

BTW, I pressed something and the button says : "It is safe to click me!!!"

Undo

eh?

3ventic

Oh damn that looks awful

Awal Garg

Wait, I will get a screeenshot and post it

Undo

4:08 PM

@3ventic eeeeeeek

3ventic

The stylesheet is limited to /rooms but...

the request access page is under /rooms

I think it's the only non-room page under /rooms

The styles look kewl inside the rooms

hichris123

@Undo But before that, you make yourself a backdoor. :P

Undo

hahaha

uhmm...

hichris123

@Undo wha?

Awal Garg

See, I told you

Undo

4:11 PM

@AwalGarg Which browser are you using?

@hichris123 That would be known as a Bad Thing (c).

Awal Garg

Let me check

3ventic

$('input[type=submit]').val('It is safe to click me!!');

Awal Garg

Mosaic

Mosaic (web browser)

NCSA Mosaic, or simply Mosaic, is the web browser credited with popularizing the World Wide Web. It was also a client for earlier protocols such as FTP, NNTP, and gopher. The browser was named for its support of multiple internet protocols. Its intuitive interface, reliability, Windows port and simple installation all contributed to its popularity within the web, as well as on Microsoft operating systems. Mosaic was also the first browser to display images inline with text instead of displaying images in a separate window. While often described as the first graphical web browser, Mosaic w...

Undo

So apparently you know about its dev tools :P

Awal Garg

What is that?

:P

Undo

4:12 PM

things you use to change what's on the page :P

Anyway, your challenge is to break into TL.

Awal Garg

Ha ha

:P

Ok I will try

hichris123

@Undo You love issuing pretty much impossible challenges. :P

Undo

Not impossible

Simply improbable.

Awal Garg

@hichris123 Thnx for breaking me

@Undo Thnx for breaking me again

Undo

lol

Awal Garg

4:14 PM

Ok, I am using chrome and I know of dev tools

Undo

good

Awal Garg

But I think, Mosaic will be a better choice right?

Undo

I hope not :P

hichris123

@Undo That's why I said pretty much.

@AwalGarg I dunno. Ask on Software Recommendations. ;)

Undo

@AwalGarg A good place to start is with the network tab and monitoring the AJAX requests made.

then use something like Postman to spoof those requests.

3ventic

4:16 PM

Just hook into Undo's HTTP traffic and borrow his cookies for a while

Undo

That... would also work :P

Awal Garg

@3ventic Nice idea

Undo

changes router password

turns on SSH tunneling

eats cookies

Awal Garg

@Undo Then turns it off

hichris123

@3ventic okay, give me a minute. works on tool to steal cookies

3ventic

4:17 PM

@hichris123 A robotic arm that finds plates full of cookies?

hichris123

@3ventic Nah, it has to use PHP.

Awal Garg

Why not use one to steal hard drives from the SE Server room

3ventic

Probably Horrible (for stealing) Plates (of cookies)

Awal Garg

And a tool for decrypting them

Undo

Because then you have to make it past the armed gaurds, @AwalGarg.

3ventic

4:19 PM

Why not go to SE office in New York and ask them nicely?

Awal Garg

Ok, I am Jackie Chan

BTW, I came here to discuss an idea I'm working on

Undo

Oh?

Please tell

Awal Garg

Should I start the honour

?

Undo

go for it

Awal Garg

But, I need confirmations

Nobody will steal that

OK?

Undo

4:20 PM

I probably won't

Awal Garg

So, all way clear

Undo

But if it's a really sekrit idea, it's a good idea not to post it in public chatrooms.

Awal Garg

I am working on a web application for people

where people can chat

BUT

In a more productive way

I mean, I have a plan to eradicate the usual mishappening

that we lose focus like I did

just now

And, they can chat to themselves, one other person, 2 other people, 3 other people, 4 other people,

n other people,

But I won't reveal that plan here

For that, I need to get into TL

Whoever helps me to get into TL, I will reveal the superb plan to him or her

Undo

haha

nice try :)

Awal Garg

I am a hard worker

Has anybody here seen the movie - The Social Network

Undo

4:25 PM

nope

Awal Garg

I will assume you are answering on behalf of everybody present here

Then, go and see it

(you don't have to go, long live the pirate bay)

Why don't we hack into SE and add real smileys?

Its so damn freaking watching those :) and :P

Undo

You get used to it

and it's a lot better than those neon yellow orbs floating everywhere.

Awal Garg

Its better to get hacking

Ok, we can hack, add, see, compare, and then

we can decide if to revert

Now, I must be scary...

?:?

Blaze

4:42 PM

[Blaze] answer flagged: stackoverflow.com/questions/7562565/how-to-get-javax-comm-api/…

[Blaze] answer flagged: stackoverflow.com/questions/22848328/…

[Blaze] answer flagged: stackoverflow.com/questions/15590600/…

[Blaze] answer flagged: stackoverflow.com/questions/22992234/…

[Blaze] answer flagged: stackoverflow.com/questions/22451162/…

hichris123

6:38 PM

47

Q: Would anyone care for some processed meat-like substance with a gelatinous glaze?

Something sort of magic happened a short time ago, sometimes a graph is worth a thousand flags: That's right, around March 28, the spam protection layer blocked about 20,000 spam attempts, mostly in the form of suggested edits, while users didn't see much of an increase in what they had to fl...

discussion spam-prevention

@Undo ^

Undo

reads

wow

> Note, I'm currently working on a tool that will allow anyone interested to meta-moderate actions that the spam system takes. You just look at lots of crap while clicking 'spam' or 'not spam' - It's something I plan to hang off the network sort of unofficial-like for a while to determine just how useful of an endeavor it turns out to be.

There was talk about that, but IIRC it was going to be mod-only.

hichris123

Wow, cool.

Hmm, any plan to release this soon? We've been trying to find patterns in spam to use for SmokeDetector, so downloading this and hooking it up to SQL would help a lot. — hichris123 11 mins ago

Left a comment on the post.

Undo

6:56 PM

writing an answer

0

A: Would anyone care for some processed meat-like substance with a gelatinous glaze?

Yes. This. We in Charcoal HQ have Smoke Detector, a chatbot that hooks into the the realtime question feed and runs some Doorknob-inspired regexes to detect spam. Note that it's kinda not working right now, because servers, but nevermind about that. Anyway, with data like this we could, in theo...

hichris123

@Undo We need to get answers working, too...

Undo

answers are harder

no known websockets for realtime network-wide answers.

hichris123

I know. :(

Is there a websocket sniffing tool?

Undo

maybe we can get them to build one

hichris123

@Undo A websocket for answers you mean?

Undo

7:00 PM

yeah

hichris123

Hmm... feature request time!

hichris123

7:29 PM

rofl

@tinkertim why is your mother complaining about her questions being closed

Tweeted by spolsky on March 22, 2014 at 2:42 PM in reply to tinkertim

196

Earth Science

Proposed Q&A site for those interested in the geology, meteorology, oceanography, and environmental sciences.

Currently in commitment.

4 more people!

Undo

@hichris123 rofl

really?

hichris123

@Undo Well, it was in reply to this:

Just signed an email to my mother as "- Stack Exchange Team". Gotta love muscle memory, gotta love it.

Tweeted by tinkertim on March 22, 2014 at 2:16 PM

Undo

hahaha

Undo

8:23 PM

@hichris123 Just curious, how are you buying your EC2 instance?

Straight on-demand?

Blaze

9:05 PM

[Blaze] answer flagged: stackoverflow.com/questions/18377290/…

[Blaze] answer flagged: stackoverflow.com/questions/21872518/…

[Blaze] answer flagged: stackoverflow.com/questions/22998867/…

hichris123

@Undo Free tier right now.

Undo

oh, right

forgot

hichris123

Still like 8 months...

Undo

good

hichris123

But eventually I'll have to look at billing.

needs credits

3ventic

9:16 PM

resources.3ventic.eu/irclog/… lol

Undo

wow. 20MB/s EC2 -> S3 :D

moves a bunch of stuff from EC2 to S3

Blaze

9:46 PM

[Blaze] answer flagged: stackoverflow.com/questions/11303529/…

Annonomus Person

2

Q: Let's customize our tour section!

The Arduino Stack Exchange Tour Page There are a few fields that we can update and change in that page. Here are the things we can change: 1.) Arduino Stack Exchange is a question and answer site for developers of open-source hardware and software that is compatible with Arduino. It's b...