IRC Networks
Irc Logs Stats
Start date: 2007-09-27 02:48:27
Last update: 2008-10-24 20:19:38
Channels: 41
Logged Lines: 6230436
Size: 1982.48 MB
Powered by
Channel Info
Network: freenodeChannel: #php |
Search in www.irclog.org
Log from #php at freenode 2006-06-07
Pages: < Prev
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
Next >
[02:10]<jufyzg|wjzc>+Aren't you Mr. Anonymous.
[02:10]<rdvxzrwff>+and i know there is tamper resistant cookies out there, but to be honest, It's easier and safer to use Sessions
[02:10]<fyguwq>+notLoggedIn() is that a predifined function in php?
[02:10]<jufyzg|wjzc>+No, it's an example
[02:10]<rdvxzrwff>+no
[02:10]<jufyzg|wjzc>+You need to define all this.
[02:10]<jufyzg|wjzc>+cythrawll, you realize that sessions end up as a cookie, right?
[02:10]<jufyzg|wjzc>+Unless you have it passed through the query string, which is its own bag of shit.
[02:11]<rdvxzrwff>+yeah but thats only a session id
[02:11]<fyguwq>+Julian|Work: well i have two books here with me
[02:11]<rdvxzrwff>+not listening
[02:11]<fyguwq>+and both fail to explain anything well
[02:11]<jufyzg|wjzc>+linux2, sounds like it's time for a new book!
[02:11]<rdvxzrwff>+its a uniqid that points to vars on the server side
[02:11]<jufyzg|wjzc>+cythrawll, I understand
[02:11]<fyguwq>+Julian|Work: well they are good for everything but user authentication
[02:11]<rdvxzrwff>+to escalate levels there you have to guess a valid session identifier
[02:11]<jufyzg|wjzc>+linux2, so buy a book that includes user auth.
[02:12]<jdddd>+lol
[02:12]<rdvxzrwff>+which should be almost impossible
[02:12]<jufyzg|wjzc>+cythrawll, guessing sure, but there are ways to capture it.
[02:12]<jdddd>+CTRL+H
[02:12]<rdvxzrwff>+now that,s bad design Julian
[02:12]<jufyzg|wjzc>+What's bad design? Capturing session IDs?
[02:12]<rdvxzrwff>+no
[02:12]<rdvxzrwff>+allowing it to happen
[02:13]<jufyzg|wjzc>+Not everything's under my control.
[02:13]<jdddd>+browser history on any public computer will show past sessionid's
[02:13]<fyguwq>+Julian|Work: well i want this basically. if someone comes to my site and they are not logged in they will see the login bar on the right and it will say "you are logged in as guest". and then when they login i want it to remove the login bar with a logout bar and say "you are logged in as (username)" and then have another little added in piece that just says there are "(number of guests) on the site and (number of users logged in) logged
[02:13]<fyguwq>+in"
[02:13]<rdvxzrwff>+thats true
[02:13]<xmlxjym>-trans_sid will leak session ID's too. trans_sid is a terrible feature
[02:13]<rdvxzrwff>+but that's a public terminal
[02:13]<rdvxzrwff>+that is outside the control
[02:13]<jufyzg|wjzc>+I like to include IP/user_agent as part of a check.
[02:14]<rdvxzrwff>+but that's not any more safer than cookies
[02:14]<jdddd>+cy_ so will me mucking with your computer when you head to the kitchen.
[02:14]<jdddd>+cythrawll so will me mucking with your computer when you head to the kitchen.
[02:14]<jufyzg|wjzc>+Haha
[02:14]<rdvxzrwff>+people have been killed for less Jymmm
[02:15]<jdddd>+cythrawll if you feel froggish....
[02:18]<fyr>+ACTION really knows she isn't a CS geek when she has to pull out the dictionary to explain what a vertor and orthogonal is
[02:18]<jufyzg|wjzc>+A girl on the internet?
[02:18]<jdddd>+Julian|Work Yeah, you and lig.
[02:18]<jufyzg|wjzc>+I thought I was all alone.
[02:18]<fyr>+never alone
[02:18]<rdvxzrwff>+theirs girls on the internet all over
[02:19]<rdvxzrwff>+just not many in freenode
[02:19]<rdvxzrwff>+go to maispace
[02:19]<jdddd>+cythrawll he said girls, not sluts.
[02:19]<fyguwq>+i am completely lost as where to start
[02:19]<jdddd>+no offense lig
[02:19]<rdvxzrwff>+I cold say something derogatory but i wont
[02:19]<fyguwq>+first. how would i set username?
[02:19]<crvnfjv>+any hints on translating a "hexa" string (just 0-9a-f) into a 0-9a-z format, so more data can be written in a short string (must have a back function)
[02:19]<fyr>+none taken darlin Jymmm
[02:19]<a2zyd2fn>-!+sprintf
[02:19]<fyguwq>+so that i can make a function that says "you are logged in as 'guest'"
[02:20]<fyguwq>+and have permissions assigned to the guest user
[02:20]<jdddd>+lig I know how hard you've worked for for your "slut" status, and you should be proved of your accomplishments.
[02:20]<jdddd>+proud
[02:20]<rdvxzrwff>+linux2 for guest i would make everything default
[02:20]<fyr>+hehe - being a smart slut - is that an oxymoron?
[02:20]<jufyzg|wjzc>+http://www.rpgsource.net/gallery/girl_internet_1.jpg http://www.rpgsource.net/gallery/girl_internet_2.jpg <-
[02:21]<rdvxzrwff>+and then add on permissions when privleges escalate (log in)
[02:21]<jufyzg|wjzc>+Not at all. Maybe it's smart to be a slut.
[02:21]<zdzxzzmfdgzx>+kavelot: So, you want to convert hex to base-26 numbering?... http://php.net/base_convert
[02:21]<jufyzg|wjzc>+er, shit.
[02:21]<crvnfjv>+thanks :)
[02:21]<jufyzg|wjzc>+http://www.rpgsource.net/gallery/girl_internet_1.png http://www.rpgsource.net/gallery/girl_internet_2.png
[02:21]<fyr>+LOL
[02:22]<fyguwq>+cythrawll: can you give me a little help on this
[02:22]<fyguwq>+just to get me started
[02:22]<jufyzg|wjzc>+That's us.
[02:22]<fyguwq>+once i get going i will be all set. my books just fail to show how to setup userlevels
[02:22]<fyguwq>+the database assigns everyuser a level
[02:22]<fyguwq>+which is by number
[02:22]<rdvxzrwff>+yeah
[02:22]<2uffz[r]rn>-linux2, use numbers (1 to 5) to given priveliges
[02:23]<2uffz[r]rn>-linux2, 1 is the bottom user and 5 is the admin
[02:23]<fyguwq>+already have that setup in the database
[02:23]<fyguwq>+but now how do i make it so my pages limit users
[02:23]<jufyzg|wjzc>+if() statements
[02:23]<2uffz[r]rn>-linux2, using if's to check
[02:23]<a2zyd2fn>-What's wrong with this?
[02:23]<a2zyd2fn>- $db_query = ("UPDATE `client_accounts` SET `LastLogin` = 'now()' WHERE `ClientID` =%s LIMIT 1 ;", quote_smart($clientID));
[02:23]<a2zyd2fn>- $result = mysql_query($db_query);
[02:23]<fyguwq>+bullr[a]ge: ok not too hard
[02:23]<jufyzg|wjzc>+Schmoke time.
[02:23]<fyguwq>+would it make sense to just make a user in the database called guest
[02:24]<jufyzg|wjzc>+jbrimble, now() should not be in quotes.
[02:24]<fyguwq>+and login them by default
[02:24]<a2zyd2fn>-oh, i see
[02:24]<fyr>+ACTION notes orthogonal means at a right angle. she then thinks "What the heck is the difference between orthoganal and perpendicular then?"
[02:24]<rdvxzrwff>+if($_SESSION['level'] >= 3){ //level 3 and up can do this } else { //everyone else does this }
[02:24]<2uffz[r]rn>-jbrimble, $db_query = sprintf("UPDATE `client_accounts` SET `LastLogin` = now() WHERE `ClientID` =%s LIMIT 1 ;", quote_smart($clientID));
[02:24]<jufyzg|wjzc>+jbrimble, I don't think you need the trailing ; either.
[02:24]<a2zyd2fn>-The error I'm getting is this - Parse error: syntax error, unexpected ','
[02:24]<fyguwq>+cythrawll: ok makes sense
[02:24]<jufyzg|wjzc>+lig: 3 letters?







