HACKING - A general rule for software companies... - GoFuckYourself.com

V_RocKs · 10-17-2006, 03:07 AM

You should not have the customer using your software to update/edit their templates. Sure, a hacker would first have to crack his way into the software (sometimes, when proper authentication techniques are used) and then use said software to insert any code the hacker wants to use into the template, but many of your customers are going to use hair-brained passwords and that is a given, so stop making a simple problem into a huge one by coding template editing tools into your software.

Carry on.

darksoul · 10-17-2006, 03:33 AM

oh please.
can you enligthen us with the software you wrote ?
Or are you the type of dude that provides consultancy based on no real world experience ?
According to you the delete function shouldn't exist in an operating system
because someone could get in and use it.

GrouchyAdmin · 10-17-2006, 03:36 AM

Hey, Darksoul - hit me up.

I'm thinking of adding 'static entry' support to axslinks. I'm considering abusing your 'status' with a different numeric so if it matches, it doesn't do the recip. checking.

However, I really fucking hate serialized shit in a flat file (and Smarty.) Oh, and don't want to do something that'll be made redundant.

darksoul · 10-17-2006, 03:43 AM

Quote:

Originally Posted by toonpornblog

Hey, Darksoul - hit me up.

I'm thinking of adding 'static entry' support to axslinks. I'm considering abusing your 'status' with a different numeric so if it matches, it doesn't do the recip. checking.

You lost me here

Quote:

However, I really fucking hate serialized shit in a flat file (and Smarty.) Oh, and don't want to do something that'll be made redundant.

the reason I didn't use sql was easy of use, I hate serialized shit also.
Smarty is quite nice shit tho.

GrouchyAdmin · 10-17-2006, 03:49 AM

Quote:

Originally Posted by darksoul

You lost me here

I think Smarty is a bit overpowered for what it does, but then again, I'm a purist (read: hack)

In the array for the entry:

Code:

    [34] => Array
        (
            [linkid] => 34
            [url] => http://www.com
            [title] => WWW
            [link] => http://www.com
            [pagerank] => 4093929322
            [status] => 2
            [date] => 1161069500
        )

I was thinking of piggybacking on 'status', and a code of, say, 9 - so when you arbitrate through the list from cron, if it sees a status of NUM, it won't test for an active link, as this is a static link, despite their current linkback status.

I coded a simple boolean set in my own shit, but I'm trying to modify axslinks to do what a friend wants - and man, other than breaking any future axslinks compatibility, I'm coming up with a loss.

P.S. Thanks for using time_t. Thank GOD someone else in the world knows it exists.

We now return you to your usual drama, troll, and troll drama threads.

darksoul · 10-17-2006, 04:01 AM

Quote:

Originally Posted by toonpornblog

I think Smarty is a bit overpowered for what it does, but then again, I'm a purist (read: hack)

So its mod_rewrite for example. Every powerfull thing can do wonders but if used wrong can cause havoc.

Quote:

In the array for the entry:

Code:

    [34] => Array
        (
            [linkid] => 34
            [url] => http://www.com
            [title] => WWW
            [link] => http://www.com
            [pagerank] => 4093929322
            [status] => 2
            [date] => 1161069500
        )

I was thinking of piggybacking on 'status', and a code of, say, 9 - so when you arbitrate through the list from cron, if it sees a status of NUM, it won't test for an active link, as this is a static link, despite their current linkback status.

I coded a simple boolean set in my own shit, but I'm trying to modify axslinks to do what a friend wants - and man, other than breaking any future axslinks compatibility, I'm coming up with a loss.

P.S. Thanks for using time_t. Thank GOD someone else in the world knows it exists.

Thats quite easy to do altho it needs a few files edited.
I'll have it in the next release.

GrouchyAdmin · 10-17-2006, 04:06 AM

Quote:

Originally Posted by darksoul

Thats quite easy to do altho it needs a few files edited.
I'll have it in the next release.

Yeah. I just don't feel like making a broken hack version where I add a checkbox to the edit mode which does a status override or something as stupid. I'd still rather use a boolean, but that's me.

For now, I've just written my own three line function to read data.inc and map it with my static links. It's good enough for a couple days.

As another suggestion, I really hate {links} - I'd love the ability to set specific things for X entries. Having it use that one set for every link works great for middot or single line use, but it doesn't make for pretty text. Right now I have mine count through the array and place markup where appropriate (after 5 entries, break..)

gooddomains · 10-17-2006, 04:07 AM

what is this about ?

darksoul · 10-17-2006, 04:14 AM

Quote:

Originally Posted by toonpornblog

Yeah. I just don't feel like making a broken hack version where I add a checkbox to the edit mode which does a status override or something as stupid. I'd still rather use a boolean, but that's me.

For now, I've just written my own three line function to read data.inc and map it with my static links. It's good enough for a couple days.

Quote:

As another suggestion, I really hate {links} - I'd love the ability to set specific things for X entries. Having it use that one set for every link works great for middot or single line use, but it doesn't make for pretty text. Right now I have mine count through the array and place markup where appropriate (after 5 entries, break..)

Thats where smarty comes handy

You can modify rebuild_output() to skip the linktemplate and pass you the whole data.

$smart->assign("links",$links);
then you'll have the hash in the template which you can layout as you see fit.
example:

Code:

{foreach item=$link  from=$links}
<a href="$link.link">$link.title</a>
{/foreach}

Having that you can do you pretty much everything you want with the data.

GrouchyAdmin · 10-17-2006, 04:22 AM

Quote:

Originally Posted by gooddomains

what is this about ?

It's probably one of the most useful thread hijacks at this time of the morning.

Cheers, DarkSoul.

darksoul · 10-17-2006, 04:27 AM

Quote:

Originally Posted by toonpornblog

It's probably one of the most useful thread hijacks at this time of the morning.

Cheers, DarkSoul.

its nice having some usefull threads around here
digging through all the crap gets boring

V_RocKs · 10-18-2006, 02:29 PM

Quote:

Originally Posted by darksoul

oh please.
can you enligthen us with the software you wrote ?
Or are you the type of dude that provides consultancy based on no real world experience ?
According to you the delete function shouldn't exist in an operating system
because someone could get in and use it.

Software I wrote? What in the world are you talking about?

I am talking about affiliate sponsorship software that allows the admin to use an edit function inside the admin to edit the templates for things like FAQ page. Or TGP trading scripts that allow the webmaster to edit the templates to the toplists... Real world applications we all use.

10-17-2006, 03:07 AM	#1
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,428	HACKING - A general rule for software companies... You should not have the customer using your software to update/edit their templates. Sure, a hacker would first have to crack his way into the software (sometimes, when proper authentication techniques are used) and then use said software to insert any code the hacker wants to use into the template, but many of your customers are going to use hair-brained passwords and that is a given, so stop making a simple problem into a huge one by coding template editing tools into your software. Carry on.

10-17-2006, 03:33 AM	#2
darksoul Confirmed User Join Date: Apr 2002 Location: /root/ Posts: 4,997	oh please. can you enligthen us with the software you wrote ? Or are you the type of dude that provides consultancy based on no real world experience ? According to you the delete function shouldn't exist in an operating system because someone could get in and use it. __________________ 1337 5y54\|)m1n: 157717888 BM-2cUBw4B2fgiYAfjkE7JvWaJMiUXD96n9tN Cambooth

10-17-2006, 03:36 AM	#3
GrouchyAdmin Now choke yourself! Industry Role: Join Date: Apr 2006 Posts: 12,085	Hey, Darksoul - hit me up. I'm thinking of adding 'static entry' support to axslinks. I'm considering abusing your 'status' with a different numeric so if it matches, it doesn't do the recip. checking. However, I really fucking hate serialized shit in a flat file (and Smarty.) Oh, and don't want to do something that'll be made redundant. __________________ AIM: GrouchyGfy

10-17-2006, 04:07 AM	#8
gooddomains Too lazy to set a custom title Join Date: Jul 2003 Location: Netherlands Posts: 10,127	what is this about ?