Jump to content

Wuhtzu

Members
 View Profile  See their activity

  • Posts

    702

  • Joined

  • Last visited

    Never

About Wuhtzu

  • Birthday 04/12/1987

Profile Information

  • Gender
    Male
  • Location
    Denmark -> Fyn -> Aarup

Wuhtzu's Achievements

Member

Member (2/5)

0

Reputation

  1. Wuhtzu
    What I needed I found documented here: http://code.google.com/apis/analytics/docs/tracking/asyncUsageGuide.html#PushingFunctions The function just has to be passed to _gaq.push() like a function and not a string: onbeforeunload="timeTracker._recordEndTime(); _gaq.push([function(){ eTr = _gat._getTrackerByName('eventTracker'); timeTracker._track(eTr, undefined, document.title);}]);"
  2. Wuhtzu
    I guess you are right, that might prevent some of the string in string problems. I'll try that and get back to you
  3. Wuhtzu
    Hi everyone I am playing around with Google Analytics asynchronous tracking code and facing a "problem" where I have to have strings within strings in java script called by event handlers such as onClick. This piece of java script needs to be called when the even handler onBeforeUnload fires: onbeforeunload="timeTracker._recordEndTime(); _gaq.push(['java script code']);" So _gaq.push(['java script code']) takes a string of java script code and enqueues it for execution. The piece of codes needing to be executed is this: function(){ eTr = _gat._getTrackerByName('eventTracker'); timeTracker._track(eTr, undefined, document.title);} As you can see the code above function(){} has a string in it. How should those two pieces of code be merged so that everything gets interpreted correct? onbeforeunload="timeTracker._recordEndTime(); _gaq.push(['function(){ eTr = _gat._getTrackerByName('eventTracker'); timeTracker._track(eTr, undefined, document.title);}']);" I cannot mix " and ' since the html tags use ". The above with 'code 'string' more code' does (obviously) not work and escaping the quotes \' does not work either. Any suggestions? Best regards Wuhtzu
  4. Wuhtzu
    Ive updated the link to more clearly reflect this effect by enlarging the body and giving it a border: http://wuhtzu.dk/sandbox/onkey_ie8.html
  5. Wuhtzu
    Problem solved I didn't anticipate IE to actually restrict the "onKeyPress" and "onKeyDown" to the actual area of the <body>-tag. So The reason why I didn't see anything was because my mouse wasn't hovering over the body area which was only surrounding the "some text"-text in the upper left corner. So in some way IE actually behaved quite rationally and it turns out that either Safari, Firefox and Opera automatically enlarges the <body> to fill the whole screen or events on the body tag fire even though the mouse isn't actually hovering over the body. On the other hand, why should keyboard related events have anything to do with the position of the cursor? You can't really in my opinion determine if the keyboard is in the <body>-area or not. You could of cause base it on the markers position (not cursor, marker) but that's also a bad idea. So I guess i like firefox, safari and operas handling better. Thanks for reading and thinking guys!
  6. Wuhtzu
    Hi guys I've struggled with a very annoying problem for the last two hours. I simply can't get IE8 to trigger onKeyDown and onKeyPress. Included is a minimal working example. It works great in Firefox, Safari, Chrome and Opera. I vaguely remeber it triggering in IE8 at some point during this evening but if it did I've forgotten what made it work. The body tag has onKeyPress and onKeyDown call the function test() which simply displays an alert. What am I doing wrong? <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" dir="ltr"> <head> <title>ie8 onkeyup onkeypress test</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta http-equiv="Content-Style-Type" content="text/css" /> <script type="text/javascript"> function test(e) { alert("ie8 come on"); } </script> </head> <body onKeyPress="return test(event)" onKeyDown="return test(event)"> <p>some text</p> </body> </html> Best regards and thank you - Wuhtzu
  7. Wuhtzu
    They could trigger the statistics by asking the recipients email client to confirm that the e-mail message has been read/opened. Another possibility is to include a something like a remote image, stylesheet which the users e-mail client will get request using http. That HTTP request can be logged and the assumption: "If the user requests this resource linked to from within the e-mail message using http he/she has "read" the e-mail message" can be made...
  8. Wuhtzu
    Hi guys I am looking for something which seems odd at first sight (or hearing...): A browser which supports modern web standards but which does NOT feature any build-in search function (typically accessed by ctrl+f) to search the content/markup of the page being displayed. So what do I need that for - a Wikipedia race competition at a LAN. I really want to make it impossible for people to search the articles being viewed as it sort of defeats the purpose of the race. It might be the wrong place to fix the problem - choosing a browser which does not feature a search function But it seems like the easiest way. Other options would include converting the articles to images before presenting them to the users, write a small program to intercept common shortcuts for the search functionality (sort of like a key logger) but they seem horrible to implement. Any good suggestions? Both regarding the browser and maybe other alternatives? Best - Wuhtzu
  9. Wuhtzu
    I personally like http://world.std.com/~reinhold/diceware.html 's method of generating pass phrases a lot. It's easy to remember since it's normal short English words, but it still has a great entropy due to the amount of words in the word list. Could any of you comment on my points (I know they were buried deep beneath numbers and talking back and forth)? With the numbers being astronomically large, even for very short random passwords, is there any point in choosing "long" (8 chars and longer) passwords besides protecting one self from compromised user databases? Best regards Wuhtzu
  10. Wuhtzu
    Hello I couldn't think of where else to start of in my search for an answer to this question so here you guys go: What strength is really required from password used for restricting access to online services of various nature - forum accounts, paypal accounts, webmail accounts ect.? I have always been an advocate for choosing strong password but after a lot of thinking and calculating entropy of different password compositions I've begun to doubt my own (maybe soon to be old) beliefs. Some numbers: Set of characters and their length (1) [a-z] : 26 chars (2) [A-Z] : 26 chars (3) [0-9] : 10 chars (4) [!"@#¤%&/()=?{[]}+-*$,.;:_] : 25 chars The four most used sets of characters from which to construct passwords arranged by popularity (and hence size) in descending order must be: (1) : 26 chars (1)+(3) : 26 + 10 = 36 chars (1)+(2)+(3) : 26 + 26 + 10 = 62 chars (1)+(2)+(3)+(4) : 26 + 26 + 10 + 25 = 87 chars Lets consider some different length of passwords constructed from the above four sets and how many combinations they yeild: (if one can choose from m characters and the length of the password is n then there is m^n (m to the power of n) possible combinations) Length (1) (1)+(3) (1)+(2)+(3) (1)+(2)+(3)+(4) 2 6.7*10^2 1.2*10^3 3.8*10^3 7.5*10^3 3 1.7*10^4 4.6*10^4 2.3*10^5 6.5*10^5 4 4.5*10^5 1.6*10^6 1.4*10^7 5.7*10^7 5 1.1*10^7 6.0*10^7 9.1*10^8 4.9*10^9 6 3.0*10^8 2.1*10^9 5.6*10^10 4.3*10^11 7 8.0*10^9 7.8*10^10 3.5*10^12 3.7*10^13 8 2.0*10^11 2.8*10^12 2.1*10^14 3.2*10^15 9 5.4*10^12 1.0*10^14 1.3*10^16 2.8*10^17 10 1.4*10^14 3.6*10^15 8.3*10^17 2.4*10^19 Pretty large numbers it seems. Should an attacker decide to try and get access to some account he/she/it could systematically try all combinations of characters from one of the mentioned sets. On average the answer would be found by trying half of the combinations. Should the attacker decide to try password combination using the web service's own authentication interface (an HTML form with username and password input field) he/she/it would most likely have to send POST requests (containing the username and possible password) to the web service using for example cURL. A rough estimate of the time needed to send the request to the target web service, have the server process the request and get a response back could be 1.0 second. So the attacker can check one password each second. One day comprises of about 24 h/day * 60 min/h * 60 s/min = 8.6*10^4 s. So a password picked from set (1)+(2)+(3) of length 4 with 1.4*10^7 possible combination would take: 0.5*1.4*10^7 / 1/s = 0.7 * 10^7 s = 7.0*10^6 s = 7.0*10^6 s / (8.6*10^4 s / day) = 81 days. So a password from Set (1) with length of 6 or greater Set (1)+(3) with length of 5 or greater Set (1)+(2)+(3) with length of 5 or greater Set (1)+(2)+(3)+(4) with length of 4 or greater takes more than a year to break / guess assuming 1 try per second. Most web services are smart enough to restrict the number of log in attempts per time - e.g. 3 attempts per hour or something - which would cause one year of trying to become thousands of years of trying. And even if the webservice did not detect the repeated log in attempts, chances than someone notices anormalities in the webserver logs are pretty good. So choosing a password from set (1) of length greater than 6, set (1)+(3) of length greater than 5, set (1)+(2)+(3) of length greater than 5 or set (1)+(2)+(3)+(4) of length greater than 4 seems like a waste of brain capacity. Of course there are other scenarios. A dump of the web service's database could be stolen or leaked leaving the attacker in possession of hashed passwords. Now the attacker could generate all possible passwords, hash them and permutations, hashing them and comparing hashes) could be distributed over any number of computers and would not take long with the above mentioned password lengths. A person studying computer science at 2nd year or so should be able to do this within reasonable time. But take for example set (1) + (2) + (3) + (4) = 87 chars. Choose a 10 char password from that set which yields 2.4*10^19 possibilities. To compute all possibilities (not to speak of hashing too) in 1 year you need to compute 2.4*10^19 / (356*24*60*60) = 7.8*10^11 combinations per second or 4.1*10^13 combinations per second if you want to do it in a week. I think it's fair to say that you should have quite few CPU's at your disposal to pull of such computation rates. This can only be possible for large organizations with considerable know how and budget. On top of that most services hopefully use a salt for their hashes which may or may not be stolen with password hashes. If stolen with the password hashes it's of little use, but if is kept separately and not compromised it renders a dictionary attack completely useless. So, if you also want to be almost completely safe from dictionary attacks on stolen database entries, you could go with a password from set (1) of length greater than or equal to 10, set (1)+(3) of length greater than equal to 9, set (1)+(2)+(3) of length greater than or equal to8 or set (1)+(2)+(3)+(4) of length greater than or equal to 7 based on the assumption that computing 10^6 = 1000000 = 1 million combination per second is an expensive task. What do you guys think - I'm I right? Most people would be of with random password of 6 chars and paranoid people who _really_ do not want anyone else to post silly stuff on their behalf could go with 10 chars. Best regards and sorry for long boring post in the Miscellaneous sub forum Wuhtzu
  11. Wuhtzu
    I'm trying to do so because in reality the #content div is to be floated left and another div, say #content2, is to be floated right so I have two columns. The columns need to be of different background color, so that's why I need both #content and #content2 to go all the way to the bottom of the page... else the background color of something else (maybe #container, or even body) might be visible through. I have tried alot of things, but since I need the page centered it seem that I need a div to contain all other divs....
  12. Wuhtzu
    Hi all Have a look at this http://wuhtzu.dk/sandbox/forumpost/height100p/test.html The above is a div (#container, red border) holding two other nested divs (#header, green border and #content, blue border). What I want is for the height of #header and #content to sum up to the height of the #container. Right now, as you can see, the #content div is sticking out the bottom of the #container div. How much is it sticking out I hear you ask - it's sticking out what ever #header occupies. So when #header is 200px in height the #content div is sticking out 200px. How can I prevent this (or just obtain the effect I'm after)? I know elements can't know about other heights than their own. So if the window is 900px high at time of rendering, then #container gets height=900px and since #container is the parent of #content, #content too gets height=900px, even though #header occupies some space... But It must be possible to correct this? Applying negative margins and such doesn't seem to have an effect. Thanks guys! <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <!-- Title --> <title>100% height test...</title> <!-- Meta information --> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <!-- Styles --> <link href="style.css" rel="stylesheet" type="text/css" /> </head> <body> <div id="container"> <div id="header"> <p>HEADER</p> </div> <div id="content"> <p>CONTENT</p> </div> </div> </body> </html> html, body, p, div { margin: 0; padding: 0; } html, body { height: 100%; } #container { width: 600px; height: 100%; border-left: 3px solid #FF0000; border-right: 3px solid #FF0000; margin: auto; background: #FFFFF1; } #header { height: 200px; border-left: 3px solid #00FF00; border-right: 3px solid #00FF00; background: #FFF1FF; } #content { height: 100%; width: 400px; border-left: 3px solid #0000FF; border-right: 3px solid #0000FF; margin-bottom: -200px; margin-left: auto; margin-right: auto; background: #F1FFFF; }
  13. Wuhtzu
    You could first filter your input using a suitable regex and one of php's regular expression mathcing functions like preg_match: preg_match('/^(http:\/\/)?(www.)?([a-z0-9_-])+\.[a-z]{2,4}(\/[a-z0-9_.\/#?&=]*)?$/i', $url) which will do something like this: Valid: http://www.lol.dk/tis.html Valid: www.lol.dk/tis.html Valid: lol.dk/dild.html Valid: http://www.lol.dk/dild.html Valid: http://www.lol09-10.info/script.php?id=2&lol=nice#top Not valid: htp://www.newz.dk Not valid: <?php echo 'lol' ?> Just modify the regex to suit your needs - which TLD's to allow, whether or not to allow a file/path being specified and arguments being passed ect. Afterward you could use cURL instead of some dns look up via exec. cURL allows you to "visit remote pages", download their content, pass posts/gets to them and so on. So you could use it to request the page the user entered and check what http status code is returned. <?php $url = "www.phpfreaks.com"; $ch = curl_init(); // set URL and other appropriate options curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_NOBODY, 1); // grab URL and pass it to the browser curl_exec($ch); $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); if($http_code == false) { $http_code = "look up failed"; } echo "$url - HTTP Code=$http_code"; // close cURL resource, and free up system resources curl_close($ch); ?> which will give something like: http://www.phpfreaks.com - HTTP Code=200 http://www.thiscantpossiblyexistbecauseofthenumbers1234567979892937475.com - HTTP Code=look up failed www.newz.dk - HTTP Code=301 http://wuhtzu.dk - HTTP Code=200 http://www.jalæwejkfaweihfneue.dk - HTTP Code=look up failed www.phpfreaksss.com - HTTP Code=look up failed That's how I would do it I think
  14. Wuhtzu
    http://www.w3schools.com/XSL/xsl_intro.asp But if I were your professor or teacher on this computer science topic I would expect something other than just "what methods from known 3rd party packages / applications will you use". I would expect some theory on how to actually parse the document. It is basically a text file you get and you have to extract information from it. Which algorithms would you use to search through it, what data structures would you use to store the information. What will be the resource cost and running time of your algorithms ect. Or alternatively - how does XSLT parse the xml? What search algorithms does it use... Suppose you were the one inventing XSLT or similar or maybe making a competing package for doing the same job, only better. How would you perform the task of turning a xml file into something queriable like a database?
  15. Wuhtzu
    First of all have a look at for example: http://in2.php.net/SimpleXML to get an idea of what you can extract from the XML feed using PHP. If you can't use a database which already have "search algorithms implemented to perform queries" you need to come up with your own so to speak. One way would be to simply iterate over all the items in the feed and compare it to a list of items you want. So each time you encounter a item from the category 'keyboards' you add that item to your custom feed. This will take O(n) time since it's a linear search where you need to examine all n items to decide whether you want them or not. <inventory> <item category="keyboard"> <name>Logitech Extreme</name> </item> <item category="food"> <name>Apple</name> </item> <item category="toys"> <name>Killer Panda</name> </item> </inventory> Alternatively you could hope that the company has it feed set up such that all the keyboard elements (items) is children of a category element in which case you need only to examine the categories and decide if you want all (or just some) items of that category. <category="keyboards"> <item> <name>Logitech Extreme</name> </item> <item> <name>Logitech Extreme 2</name> </item> </category> It's really going to depend on the feed. You could also decide to parse the feed once a day and maintain your own database with the information (which would then at max be 1 day old, or some other time you specify). That would easily allow you to create more advanced queries and maybe even do some advanced caching on the most popular requests ect.
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.