RELOAD!

[Minesweeper] Games Played: 84, Bombs Used: 51, Moves Performed: 11891, New Users: 9

Exploits of a hacker:

I bought a digital download album through my Visa card's reward program.

It had 27 tracks, and it was only letting me download 10. And there wasn't an option to download the whole album.

I opened my dev tools, network tab, reloaded the page, found the response with the data--and there were the links for all 27 tracks.

[rubberduck-vba/Rubberduck] ufo2mstar forked us into ufo2mstar/Rubberduck

[rubberduck-vba/Rubberduck] ufo2mstar created pull request #5015: Enhancing the GettingStarted guide to merge ufo2mstar/Rubberduck/patch-1 into rubberduck-vba/Rubberduck/next

> Adding things that I found useful to get started that weren't very obvious here.. Hi @retailcoder I love that the getting started guide is very detailed and thorough 😄 I would have loved it even better if it were a little more targeted towards newcomers like me and highlight some of the cool features here to get me started quickly!! I would like to propose a revamp of this guide to get your guys' feedback 😃 I just tried to give a flavor of my proposal here and can work on it based on...

your thoughts.. please let me know. Cheers!

[rubberduck-vba/Rubberduck] retailcoder commented on docs/GettingStarted.md of pull request #5015: Enhancing the GettingStarted guide

[rubberduck-vba/Rubberduck] retailcoder commented on docs/GettingStarted.md of pull request #5015: Enhancing the GettingStarted guide

[rubberduck-vba/Rubberduck] retailcoder commented on docs/GettingStarted.md of pull request #5015: Enhancing the GettingStarted guide

[rubberduck-vba/Rubberduck] retailcoder created comment on pull request #5015: Enhancing the GettingStarted guide

[rubberduck-vba/RubberduckWeb] retailcoder created pull request #71: hide hidden inspections, add reference explorer home page highlight to merge retailcoder/RubberduckWeb/master into...

rubberduck-vba/RubberduckWeb/master

[rubberduck-vba/RubberduckWeb] retailcoder synchronized pull request #71: hide hidden inspections, add reference explorer home page highlight

[rubberduck-vba/RubberduckWeb] retailcoder merged pull request #71: hide hidden inspections, add reference explorer home page highlight from retailcoder/RubberduckWeb/master into...

rubberduck-vba/RubberduckWeb/master

[rubberduck-vba/RubberduckWeb] retailcoder pushed commit aa32d6dd to master: hide hidden inspections, add reference explorer home page highlight

[rubberduck-vba/RubberduckWeb] retailcoder pushed commit 5db4a160 to master: fix page title

[rubberduck-vba/RubberduckWeb] web-flow pushed commit eb207eec to master

@Duga live

Hm, the attributes don't seem to (all) work

ttgtb

crickets

chirp chirp

Jiminy?!?

soo ... who's the real boy in here then?

certainly not that jackass.

lol, love the lurking

so, the reference explorer now has its own page on the website - I didn't add a button/link for it in the header, because it's getting crowded in there

I need to reinstate some kind of actual menu bar

yay for webdev?

yeah

also this is why some of the attributes aren't working

        References = node.Elements("references").Select(e => e.Attribute("name")?.Value).ToArray();
        HostApp = node.Element("hostapp")?.Attribute("name")?.Value.Trim();

should be reference and hostApp

yay stringly-typed stuff

/s/attributes/xml-doc elements/

now I know why javascript folks love all-lowercase names

@MathieuGuindon too bad they are not terribly consistent

snake_case, camelCase, PascalCase, mnfd conventions abound.

I mean, I'll have to quadruple-check the actual casing of <hostapp /> vs <hostApp /> in the inspections to make sure they're consistent

or, you could just harvest the .NET attributes. Less stringly stuff.

I know you mentioned that before, but I'm really not seeing how that can be done

or you could write a DTD or XSD to check the XML-docs against during compile time :)

xsd sounds like a good idea

True but they weren't terribly fun to write....

I'm sure there's classes that makes XML-POCOs

@MathieuGuindon wouldn't you just load the DLL assembly, then read the attributes, no?

@this currently mat loads an XML file

that's the thing: loading the DLL means I don't get the xml-doc

I know. The change means loading both XML and DLL and unioning them

one reason for not loading the DLL was that deploying RD on the website is a royal PITA

<pedant>s/unioning/joining/</pedant>

hmm. I thought it is possible to load an assembly without actually referencing it.

and the code wouldn't have to work

since you're just reading the metadata off the assembly...

@this yea, but how do you get the assembly?

^

ship it as an artifact.... just like you've been w/ the XML file?

wonders if he's missing a point

I suppose the other alternative is to harvest the attributes and write to our own XML file as a build task

that way we don't need to ship the DLL as an artifact; we now just have 2 XML files

sounds pretty complicated vs just putting an xml element in the handful of inspections' docs that need it

You know me. One place for everything, and everything in its place. :)

whelp, just lost another SO user. He had a valid question "I've never done this before and I don't even know where to start", that, unfortunately, doesn't fit the SO model. Got 4 close votes & deleted his question.

^ question now deleted.

@QuackExchange look at that tyke trying to program! How adorable!

Just had my review. c. 2k raise and another work from home day.

Basically, slightly over a cost-of-living raise.

nice!

Yep. Especially the extra WFH day.

Which will save me another c. $1k on gas prices (and reduce my carbon emissions and give me 2 more hours of my life back each week...)

man, its nice that i only spend 30-45 minutes on my daily commute

total

Mine is about 45 in perfect conditions, but they have a bunch of roads closed (to various degrees) right now.

ahh lame. perfect conditions for me is like 24 minutes

Two bridges are shut down to be redone. Another major highway is having a lane added.

but thats almost never

So that's three massive slow-downs.

One of the bridges is my exit, which will fortunately be done in a couple months.

The other two won't be done for a couple more years.

theres always that jerk off that drives slow blocking 20-30 cars in the "fast" lane

oof

then there's the aggressive semi truck drivers that do that swerve maneuver when switching lanes

MN drivers are usually pretty good, but I've seen those occasionally.

Meeting now, TTYL.

central california sucks for people

later

Stumbled on a kickstarter that zaps people to keep them from sleeping while driving. SMH.

@Hosch250 $1/hr raise?

@IvenBach Sounds good until you put it that way...

Not digging into how much Hosch makes but that's probably like a 2% raise. :sadface:

@IvenBach 2.67%.

That does give me the sads.

The sadder part is that it's one of highest percents the company will hand out this year.

:P

You're making me depressed hearing that.

The company hasn't been doing too well, so I heard.

That may be so.

Just so long as they can still make payroll, I don't think we're in too deep of trouble.

@Hosch250 Yikes, keep your resume fresh.

Having trouble making payroll is serious !@#$

I don't think they are yet.

They just aren't making as much as they hoped.

Right, but the fact that it's even in the realm of possibility means it's time to at least start applying elsewhere.

Unless I'm misinterpreting and it's not in the realm of possibility.

I assume this company is privately-held?

If not, just check their annual report to see how it's going.

It is.

Got it, that's tough.

I would know well in advance if my company was in serious trouble.

@puzzlepiece87 Nobody's mentioned it... I'm just saying, I haven't heard that they are having trouble, so I'm assuming they aren't.

Yeah, I must have read way too much into your statement.

@puzzlepiece87 haven't seen you for a while.

How are your coding adventures progressing?

@IvenBach Yeah, I am banging my head against the wall with some ADODB stuff.

May ask a question but making sure I'm doing every single research I can think of before asking.

@IvenBach Good so far - I switched from Python to C# for my language to learn in 2019 because Python isn't fast enough out of the box and we need to go as fast as possible and I don't want to fight our IT team every time I need a Python speed module or whatever they're called.

I have VS 2019 and I'm at the very beginning of converting my most business-critical VBA app to C# for massively-expanded future plans, but currently helping with some dumb urgent deadline because a company we acquired 3 years ago still doesn't have their !@#$ together.

Breaking out the snow shovel to walk behind the elephant?

@IvenBach pretty much

@IvenBach How are you?

Looking into scripting automation for Bluebeam right now.

I have been going through git training the last few days.

Registering for grad school gave me access to Lynda and LinkedInLearning classes so I'm gorging.

@puzzlepiece87 Also found out I have a super power. I can take out our buildings first floor power by barely trying.

lol

@IvenBach please explain!

I need some ideas...

lean on the MAIN switch, for example

hahahah something a little more sophisticated perhaps?

Bump it lightly with my thigh...

in other news, I'm going to have to write a secure dynamic SQL generator in VBA

lol that question still going?

apparently

@IvenBach I already teased you about that :P

Mug is a tenacious duck. Owing to the lack of actual teeth it takes him longer to take large enough bites.

@puzzlepiece87 Oh... Apparently my memory is still fading too.

Less than 2 weeks ago :P

@MathieuGuindon Is it true that anything queried through a Command object is parameterized/secure?

If so, I lightly beat you to the punch, perhaps.

Ugh, okay, I give up!

What dumb thing am I doing wrong here?

Works fine:

cmd.CommandText = "select * from npidata_pfile.csv"
rst.Open cmd

@puzzlepiece87 depends how the sql command string is made and whether it has, uh, parameters

"No value given for one or more required parameters":

cmd.CommandText = "select NPI from npidata_pfile.csv where NPI = '1013931781'"
rst.Open cmd

Here's (part of) the first line of the .csv file:

"NPI","Entity Type Code","Replacement NPI", (...)

could the string delimiter for .csv files need to be a double-quote rather than a single one?

I've tried a dozen combinations using double quotes, square brackets, tons of things. I must be doing something super dumb.

You can query a .csv file with SQL?

@MathieuGuindon Oh, yes, it obviously is.

@Hosch250 Yup!

Huh, TIL.

^ ditto

well, not really (SSIS can connect to a flatfile through ODBC)

@MathieuGuindon Thank you so much for telling me what to search. Now I'll go search string delimiter for the schema.ini file.

just, never did it

I just use CsvParser in C#.

I just needed to know what to look for.

And linq/loops as needed.

does cmd.CommandText = "select NPI from npidata_pfile.csv where NPI = ""1013931781""" work?

@MathieuGuindon I actually wrote 95% of a dynamic sql engine in VBA once, but I hopelessly overcomplicated it. So it has never gone into production.

@MathieuGuindon Unfortunately not, same error.

Tried that and just tried it again, but definitely appreciate the suggestion. When I was researching before asking, I saw someone else using double quotes instead of single.

@puzzlepiece87 I'm just as stumped as you are then

@MathieuGuindon There's something it's mad about about how I'm specifying this column I think

are you sure it's the file name that needs to be the from clause?

I wish I could examine this text file by hand more easily.

@MathieuGuindon That has been my experience in the past, yes.

@M.Doerner so, I'm not crazy then, it is possible :)

And selecting top 10 * works from it

Oh here

I can verify specifically that it's the column and not the where clause.

Try [NPI].

Yes, confirmed.

cmd.CommandText = "select top 10 NPI from npidata_pfile.csv"
rst.Open cmd

I think it is possible, but making it secure demands some discipline on the side of the user.

Same error

Indeed @Hosch250, tried [NPI] and ["NPI"], trying both again.

Might also be a space in the name.

Maybe a space before the first quote, or something.

These two failed:

cmd.CommandText = "select top 10 [""NPI""] from npidata_pfile.csv"
rst.Open cmd

and

cmd.CommandText = "select top 10 [NPI] from npidata_pfile.csv"
rst.Open cmd

Or maybe some bastard genius put a no-break unicode space in.

When you insert things like schemas and table names via dedicated types, you should really not generate them based on user input.

If there was a no-break unicode space in there, I'd be able to see it with asc(left(rst.Fields(0).Name,1)), right?

Yes, I did that and confirmed it's 34, 78

(", N)

This freaking thing...

There was a no-break space?

no, there wasn't one

Oh for goodness sakes

Oh.

I got it

This is dumb.

This fails:

cmd.CommandText = "select top 10 [""NPI""] from npidata_pfile.csv"
rst.Open cmd

This works:

cmd.CommandText = "select top 10 ""NPI"" from npidata_pfile.csv"
rst.Open cmd

Thanks for helping me through that.

LOL.

I'm probably misunderstanding something, but that seems aggravating and dumb to me.

The way I understand brackets to work is to be like "Okay, everything inside here is the header, don't miss anything due to spaces, etc."

So in my mind, a passed ["Title"] should be equivalent to a passed "Title".

Grrr.

If I'm dumb and wrong, this is one of the times where not actually being a computer scientist is probably biting me in the butt.

Great, and now it's right back to breaking now that I have to include more complex column names like "Employer Identification Number (EIN)"

bangs head slowly against the wall

Trim the quotes from the file.

Process against the sanitized file.

@Hosch250 Tempted to do that just for the first line. The double quotes are there because address fields have commas in there.

Oh, LOL.

Going back to adding the TextDelimiter field to the schema field like @MathieuGuindon got me on the track of.

Just found results for that.

@M.Doerner definitely. I was thinking the engine needs to be able to query the schema and retrieve a list of available tables and columns.

FWIW, the "engine" I wrote was server-side - the user got to send in a XML document. That way the code stayed entirely server-side.

x__x

@MathieuGuindon feeling lazy, i wanted to leave the robustifying to OP.

My reasoning was that if you do it in VBA, you have no guarantee that someone can inject malicious code and thus make your engine do things you didn't mean it to do

@BigBen TBH I'm not 100% sure of it. it's possible VBA only sees the US-formatted formula, regardless of locale

Nah, I use ISO date format all the time, so it's possible.

hmmm that's an interesting question. anybody in the pond able to test it?

Of course, date literals would get US-formatted, but there should be no reason to have them anyway.

@this context:

oh, thought that was for dyanmic SQL engine, my bad.

@this that's right - but the goal wouldn't be to make something 100% secure. Just something that isn't blatantly wrong, and easy enough to use that the string-concat habits stop.

@BigBen not now, unfortunately. that question is bugging me though. you'd think there's a way to use INDEX to get to the actual array without parsing the formula itself... I can't get it to work :(

yeah I wasn't sure of how to get the actual array.

not even sure what this will be used for, or if (y)our effort is worth it

just plain old curiosity here. thinking dynamic arrays in O365 could help there

now that's a thought.

...but my O365 expired and the email I sent to MVPGA got a reply behind a login wall that wants a login I don't seem to have, so I gave up on it and moved on

if I'm bored later I might play around with it.

bangs head some more

select top 10 "NPI", "Provider First Name", "Provider First Line Business Mailing Address" from NPPES_Database

Returns 10 rows of

xD this is a tough mountain

No wonder it stopped erroring

It stopped interpreting them as columns

lol, at least it's legal :)

Legal ≠ Logical

[rubberduck-vba/Rubberduck] smokeythemonkey starred us

@Duga I always thought he was a bear.

lol

@IvenBach That's what you get for thinking movies are true.

You mean Count Chocula doesn't care about my childs dental hygiene?! The Horror.

@IvenBach gonna have someone to start the forest fire.

Can't have the ol' Smokey the bear be out of a job, can we?

California's got you covered.

I blame it on the hellmouth

man...

i love it when engineers are like... so you know how you have required fields...

can you make an engineering override?

-_-

data integrity isnt a problem... -_-

@Duga -10

@KySoto I'm curious why that's a feature request. Short of #Because I don't get it.

prototyping parts

if they are conditionally required, then they are not required.

@KySoto not unlike "hey can we have a dropdown for the customer accounts", followed by "hey can we be able to enter any non-existing customer account in that field"

^

lol

literally my day today

wait a bit, and they'll add "oh, BTW let me do anything just like in Excel, plz"

lol, it is Excel

because, you know, order forms must be in Excel

its not like the whole reason i have this chain of data integrity because of being able to track what happened to parts for when we get RMA's

@MathieuGuindon Do you work at my company?

lol

when im like, well i could make you a seperate application to do this data entry from...

We have a system where clients can send an ecard to other employees.

@KySoto been saying this for 4 years now

lol

We do a user search, pull up the user, etc... They want to be able to send it to any random email address now.

Of course that will break our FK system, and all.

@Hosch250 next you'll need to validate the email address. send the RFC-compliant regex to anyone asking this.

im pretty sure my boss will be like... uhhh yeah i dunno about doing that...

@MathieuGuindon We already do that with shop, LOL.

MS has an email validator that we use.

And yes, I did share that regex.

@Hosch250 awesome :)

new System.ComponentModel.DataAnnotations.EmailAddressAttribute().IsValid(emailAddress)

thats cool man

in ComponentModel?

That's a bit annoying

IKR?

I think it's part of EF, or something.

I suppose at least it's not in System.Web

That's where all their annotations go.

[EmailAddress]
public string Email { get; set; }

Like, ForeignKey, etc.

makes sense

yeah

@Vogel612 git question. When doing git pull upstream next, git is under the covers really doing git fetch followed by git merge. git fetch first pulls down any changes from the remote to the computer. This means that there's a branch locally named upstream/next that has all the changes, but are yet to be merged/applied?

it's not a branch, but a ref

that said, the distinction is somewhat meaningless

That reference is a bookmark of sorts that provides a sign post?

yes. both refs and branches are literally just a file with the name of the reference and the content is a commit hash

branches have some special support

@Vogel612 and by this you mean exploring into the .git/refs/remotes/upstream/next file?

yeap

cat ftw

When doing merge or pull or push git is taking care of all the book-keeping for us, letting us care more about the abstraction we're working with.

that's the whole point of a tool like git

cat being

Display text files on screen.
Copy text files.
Combine text files.
Create new text files.

you can actually manually create a commit, so long as you have a way to create sha256 hashes

@IvenBach all of these

though the copy and create new is usually just making use of stream redirection

The idea I get. How it's actually done is where I'm still piecing things together.

you really don't need to worry about it, but the gist is: everything in git that's metainformation is actually a textfile

:deep-breath: And meta-information is just information about the information you're working with?

yea... I should've said "versioning information", since that's the only metainformation git handles

@IvenBach man cat

I knew there would be a Thundecats reference.

@this aaaand now I'm thinking of TWRP

I'll just let myself out now

I was a couple years too late to be part of the Thundercats generation.

hahahahaha

It's the same person too :shameful:

The proto-typical #Engineer.

gin branch isn't a valid command? I must want it to be EOD.

@IvenBach this is hilarious

^ That's the worst part.

/best

Not if you knew the person Pineapple.

:sigh: I just want today to be concluded.

Idea: setup a webcam device near the impact area, compile video content during the entire year, play the 3-minute finished video at the company xmas party

after all wine bottles are depleted, preferably

The video idea did go through my peanut-humored brain.