I accidentally poured some mortar and grout down my bathroom drain when I was cleaning the remains of a bucket of mortar after tiling the kitchen. The drain was plugged up pretty bad so I tried to scrape some of it out with a wire hanger down the overflow, and that got it flowing again, but its s...
We should have a badge for folks that vote for questions/answers, but never ask or answer questions on the site themselves. Stalker (bronze) = 500 votes cast, 0 questions, 0 answers. Skulker (silver) = 2000 votes cast, 0 questions, 0 answers. Lurker (gold) = 5000 votes cast, 0 questions, 0 answers.
Jon Skeet's answer is the canonical answer. But: Suppose you have a link:
href = "\myApp\DeleteImportantData.aspx?UserID=27"
and the google-bot comes along and indexes your page? What happens then?
passing an ID via GET to a delete function is OK if you add limit 1 to the delete command, make sure the incoming ID is numeric and not empty (basic sql injection prevention tasks)
Ok, but by convention, Get is not supposed to change anything on the server. That's what Skeet's answer was trying to get at.
I was getting at the fact that gets can be bookmarked, and hyperlinked in <a > tags. Since spiders follow these, it's quite easy to accidentally do something mistaken.
Sure, you can make it safe, but there is a better mechanism.
still can't agree. any input / output on a website should be check for any kind of injection, period. null and voiding the question of wether GET should be used or not
every single page on my site that touches the DB gets this
alright, i'm just not in the mood of what to and not to do when programming a website. i have this conversation with to many people elsewhere - i've passed PCI-DSS and have built over 40 websites. we'll just agree to disagree today.
It can be made safe. But the standards suggest that I, as a developer, interacting with your service, should be able to assume that gets are idempotent.
i dont think thats a proper analogy. some times a GET needs to be used. all the time database queries need to be secured. with security in place, a GET can be fine.
with this logic, doing a GET passing an ID to delete an entry which i can pass with a href is a bad thing even though all my pages that make any DB query are protected against injection
and other systemic precautions taken
and standards are a delusion. show me a way standard way to secure a sql statement. it doesn't exist. theres multiple ways and each way has its pro's and cons. using a GET is no different
Methods can also have the property of "idempotence" in that (aside from error or expiration issues) the side-effects of N > 0 identical requests is the same as for a single request. The methods GET, HEAD, PUT and DELETE share this property. Also, the methods OPTIONS and TRACE SHOULD NOT have side effects, and so are inherently idempotent.
However, it is interesting to note that DELETE is in there.
I suppose if the data is gone, then it will also be gone on the subsequent calls.
Also, for those who are interested, every once in a while Zipcar or whatever has groupon deal for free membership etc for $30 (includes $30 driving credit)
I'll probably end up doing that to bring the 12' shelves homes
Semi-DIY related, 25" deep reach-in closet, for shelves on the back wall, 12" or 16" shelves?
this was a complete gut so it was just 1 layer of drywall (not plaster and lath) so i was able to find the studs and still had the markings on the floor - so most of them i hit a stud. where i missed, i used the toggle bolts
The hang track has holes every 8" and I think I have 58" of back wall space, so I'll probably cut the hang track to 56", which should give me 7 bolts to work with
The current list of integrated (we call this onebox, or oneboxing, ala search engines) sites is:
Stack Exchange sites: Questions / Answers / Users / Comments
Stack Exchange Chat: Messages / Rooms / Bookmarked conversations
Area 51 proposals
Posts from the Stack Exchange blog, the Server Fault b...
We got married in Vegas - little church of the west across from Mandalay Bay (we stayed there) - this time we're staying at THEHotel - on mandalay bay's property, all suites (different tower)
Many times we need to hire a contractor and try to extensively google for reviews on that contractor. Sometimes to no avail :(
Just curious what web resources you use when trying to find a contractor? Be it a review site or some other method, what have you used in the past to identify the best p...
I think if mods remove things, it just completely vanishes
Sweet, and we can link to them!
Anyway... @Aaron I'd vote to close that question. It seems to be from the early days of the community, when we were still trying to define what was on-topic.
I assumed the manufacturers of the fencing would sell an optional sleeve to protect the power-coating on the posts from the repeated scraping of the trimmer cord, but they do not? Does anyone have any ideas? Is this even needed?
man, we have the giant cement truck filled with cement...we don't want it, we can't get the cemetn out of it...I know let's blow the thing to beyond hell....
@Aaron powdered creamer in the sawdust cannon was pure awesome
In particular, the exterior of a toilet.
My parents tell me to wipe the outside and surrounding floor of the toilet with a diaper several times (and then to wash the diaper with water in the sink several times). I'm really not sure if this is the most time-efficient way to clean the exterior of ...
I don't know if you can get the stuff for household use, but there is an industrial product called activate that is excellent at cleaning up around toilets. It's got active enzymes that eat urine etc
My parents keep on complaining about the smell, but I don't smell anything at all.
I've put in two odor-maskers, but they're not helping at all.
I also try to ventilate, but it's almost always way too cold to open the windows here (yes, even in the middle of summer right now - Seattle has been ...
Jon Skeet's answer is the canonical answer. But: Suppose you have a link:
href = "\myApp\DeleteImportantData.aspx?UserID=27"
and the google-bot comes along and indexes your page? What happens then?
I assumed the manufacturers of the fencing would sell an optional sleeve to protect the power-coating on the posts from the repeated scraping of the trimmer cord, but they do not? Does anyone have any ideas? Is this even needed?
