Jump to content

requinix

Administrators
  • Posts

    15,067
  • Joined

  • Last visited

  • Days Won

    414

Everything posted by requinix

  1. 1/2. What do you mean by "system variable"? 3/4. What do you mean by "alias"? 5. Interactive means you can do stuff, non-interactive means you can't do stuff, and non-login means you can't even log in. Is there something specific about those terms that you think you're missing?
  2. "any" means that if one or more of the bits are set then it counts as a match. "all" means that every bit you set has to be there for it to match. Since you only care about one particular bit, both of those will have the same effect.
  3. Include the ID with the form, either as a query parameter or as a form field. Pre-fill the fields with the existing data. Change your PHP code to do an UPDATE instead of an INSERT. And, obviously, change everything that says "add".
  4. Your rules say that every single thing containing a slash needs to be rewritten to page.php. Are you sure you don't mean that every single thing containing a slash which does not exist should be rewritten?
  5. It is not possible to know the MAC address of a client's computer. At all. You'll need to find an alternative method to identify a user.
  6. parse_blocks isn't a built-in function. Something is providing it, likely either your own code or some library you installed. And if it's your own code then you can change it... But anyway, I'm not sure given your description, but it sounds like you need a foreach loop on that array which looks for any keys starting with "testimonials_". Extract the number and the last part and use those to build a different array - perhaps one looking like array( 0 => array( testimonial => ... name => ... company => ... ) )
  7. /u=s checks if any of the permission bits are set. -u=s checks if all of the permission bits are set. A mode of 4666 means setuid + owner read/write + group read/write + other read/write. A mode of 4000 means setuid only. I'd link you a page that tells what the numbers mean but apparently nobody likes to document them directly - only constants. So it's easier to just believe me.
  8. What's this parse_blocks doing? Because if it's returning a whole bunch of information you don't want and the parts you do want aren't in the format you need, then shouldn't that be adjusted?
  9. No, that is not all of your code. Because it doesn't show what $rgy or $newamount are. The problem isn't the update itself. As gizmola suggested, the problem is going to be whatever sets up the different variables which the update uses.
  10. You make it sound like your question is "how do I find files with the setuid bit set" but you posted the answer yourself in one of those examples, so I don't think this is the question you actually want to ask. Maybe you mean to say "what's the difference between these commands?" in which case I would point you to the documentation to see what -mode and /mode mean. I think you have a more specific question to ask. One that directly answers something you aren't understanding. And it's probably not the first question you started with.
  11. Remember the part where I said you might not be validating transaction amounts? Did you look into that?
  12. We don't know anything about your application. If you wrote it and you don't know what happened, what would we be able to do? That said, my guess is an unvalidated input somewhere. Do you verify that all transactions must be for positive amounts?
  13. That's good. That's not good. For example, let me point out something: this shuffle($numbers); sort($numbers); randomly shuffles the $numbers and then sorts them in increasing order. It's nonsense, and not the sort of thing you should be trying to learn. "AI" is good at stringing words together in a way that, according to some calculated probabilities, hopefully make sense. But that is all it does - and it is certainly not intelligent. Be very careful with anything it says or creates.
  14. Nor are you expected to: Javascript development has these things called "libraries" which you can use to do the work for you.
  15. You're finding the one record that is the fourth lowest, right? If you're only finding one then it doesn't matter how you sort... But if you want to consider ties then you'll need a ranking-type solution anyways.
  16. Which is why many big supermarkets have an "index" somewhere: a sign or list listing a bunch of different types of items and which isles they're on. Because they want to make it easy to find things - but not too easy. But that aside, you're at least thinking like a user now in recognizing that going through a list of everything is too much - unless, perhaps, it's sorted (which supermarket isles aren't, but that's another story). So back to the webpage. You're looking for cookies. What do you want to do? Do you want to scroll through a list of categories until you find one that may or may not be applicable? Like you said, if I want cupcakes then it could be with breads or it could be with cookies, so there's still going to be some guesswork. Here's a more specific question: do you, as the user, actually care about the category? For example, if you could find cookies without having to know whether it's in the bread isle or the cookies isle, would you like that? Hint: go into the post editor box and type "@r"...
  17. Forget the technology, forget the dropdowns and the Javascript and the CSS, forget all the details for a minute and try to put yourself into the shoes of a user: You've been asked to provide the food you ate last. You can choose a type of candy, or a type of fruit, or a type of meat. What would you, as a user, ideally want to see in order for you to make the choice. Would you rather have one list of everything? Do you want to choose the type of food first and then the specific food second? Do you want all the lists of food available at once and you'll just pick one from the appropriate list? Something else? And does your answer change if you're on desktop vs mobile? Decide what the overall user experience should be, at a high level, as if by someone who doesn't understand web development, and create a UI to support it.
  18. You don't do any validation of $class to make sure it's a number between 8 and 55 before trying to use it with $days Same for $class as used with $periods, except values of 7, 8, 15, 16, 23, 24, and so on aren't valid You do a mysqli_connect for every single mysqli_query. All you need is one at the beginning of the script, then assign the connection to a variable and use that You're connecting as root, and without a password. Do things right and create a proper user with a proper password. If $whose is a string then don't put the variable directly into a query - use prepared statements instead Same for $sub, except it's even worse because that value came from the user, and a malicious user could easily screw up your database by doing something as simple as inserting an apostrophe And then you turn around and use $sub as a table name? That's completely wrong: never use unknown variables, especially from $_GET or $_POST, as table or column names. Fixing the above should resolve the error message too Why are there <br>s in your data? That doesn't make sense and suggests you're doing something weird with the data, like putting HTML into it. Using isset with the pwd in the $_POST only checks if there was a field named "pwd" in your form. If that field is left empty, isset will still return true. And assuming pwd is a password, shouldn't you be checking that password? When you do check the password, make sure that your code does not keep running after that. Right now the user will get redirected with some Javascript, yes, but all your code kept on running. And you're doing the thing where you use a variable as a table again, this time with $whose Are you putting multiple values into your $whose table? Don't. One value at a time, using multiple rows if you have to. On that subject, apparently $period is a column name? Don't. What you're doing with $day, where you have a column named "day" and multiple rows for the days, is what you should be doing with periods too. ...Are you putting an actual password into your form? And your own phone number as the sender? What's the point of the "msg" form field? Either that or what's the point of the "s" message you put into the session? What's going on with this? And why have a form that automatically submits? If you want to do something immediately then do it - don't send a form to the user (which they won't see for long) that is just going to come right back to you. All your various outputs need to be escaped with functions like htmlspecialchars so that someone like me can't insert <>s or "s that will mess up your HTML, or worse let me hijack some other user's browsing sessions for my own malicious purposes. Is this a school assignment or something?
  19. $ echo $0 -bash $ bash -c 'echo $0' bash $ bash -c 'echo $0' foo foo You can use -c if you want to run a command within bash - perhaps you need bash-specific features - and you aren't already running within bash. I'm not sure what's so complicated about that... Maybe it would be easier if you pointed out what you're confused about?
  20. https://www.regular-expressions.info/ has a decent tutorial/reference on regular expressions. ^ and $ are anchors that indicate the beginning and the end of the string, respectively, though that behavior can be slightly modified with flags.
  21. Did you consider trying them?
  22. Hard to help if you don't give any information.
  23. Same problem: March 30th - 1 month = February 30th -> March 2nd.
  24. Careful with dates like March 30th... Easiest method I know: date + mktime. $previous_month = date('Y-m', mktime(0, 0, 0, date('n') - 1, 1));
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.