Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #11683 > unrolled thread

Finally got it working my way

Back to article view | Back to comp.lang.php

Contents

  Finally got it working my way richard <noreply@example.com> - 2013-11-01 07:50 -0400
    Re: Finally got it working my way richard <noreply@example.com> - 2013-11-01 07:54 -0400
      Re: Finally got it working my way Denis McMahon <denismfmcmahon@gmail.com> - 2013-11-01 16:33 +0000
        Re: Finally got it working my way richard <noreply@example.com> - 2013-11-01 13:01 -0400
          Re: Finally got it working my way Denis McMahon <denismfmcmahon@gmail.com> - 2013-11-01 19:07 +0000
            Re: Finally got it working my way "Beauregard T. Shagnasty" <a.nony.mous@example.invalid> - 2013-11-01 21:40 +0000
        Re: Finally got it working my way richard <noreply@example.com> - 2013-11-01 13:04 -0400
          Re: Finally got it working my way Scott Johnson <noonehome@chalupasworld.com> - 2013-11-01 18:32 -0700
          Re: Finally got it working my way Evan Platt <evan@theobvious.espphotography.com.invalid> - 2013-11-01 22:28 -0700
    Re: Finally got it working my way Norman Peelman <npeelman@cfl.rr.com> - 2013-11-02 08:27 -0400
      Re: Finally got it working my way richard <noreply@example.com> - 2013-11-02 11:39 -0400
        Re: Finally got it working my way Luuk <luuk@invalid.lan> - 2013-11-02 17:10 +0100
          Re: Finally got it working my way richard <noreply@example.com> - 2013-11-02 13:36 -0400
        Re: Finally got it working my way Norman Peelman <npeelman@cfl.rr.com> - 2013-11-02 17:34 -0400
          Re: Finally got it working my way richard <noreply@example.com> - 2013-11-02 18:45 -0400
            Re: Finally got it working my way Tim Streater <timstreater@greenbee.net> - 2013-11-02 22:57 +0000
              Re: Finally got it working my way richard <noreply@example.com> - 2013-11-03 01:03 -0500
            Re: Finally got it working my way Norman Peelman <npeelman@cfl.rr.com> - 2013-11-02 22:57 -0400

#11683 — Finally got it working my way

www.mroldies.net

Don't bitch to me about the gawd awful mess of javascript.
thats the way it came in the package.
I don't care. It works.

[toc] | [next] | [standalone]

#11684

On Fri, 1 Nov 2013 07:50:58 -0400, richard wrote:

> www.mroldies.net
> 
> Don't bitch to me about the gawd awful mess of javascript.
> thats the way it came in the package.
> I don't care. It works.

I'll be damned.
the messy thing actually frickin validates.

[toc] | [prev] | [next] | [standalone]

#11685

On Fri, 01 Nov 2013 07:54:35 -0400, richard wrote:

> On Fri, 1 Nov 2013 07:50:58 -0400, richard wrote:
> 
>> www.mroldies.net
>> 
>> Don't bitch to me about the gawd awful mess of javascript.
>> thats the way it came in the package.
>> I don't care. It works.
> 
> I'll be damned.
> the messy thing actually frickin validates.

You're failing to validate your user input to ensure it complies with 
expected values and handle out of range values suitably:

Could not successfully run query (SELECT id, 
atitle,btitle,artist,label,avid FROM A1972 WHERE id<101) from DB: Table 
'richbull_top100.A1972' doesn't exist

-- 
Denis McMahon, denismfmcmahon@gmail.com

[toc] | [prev] | [next] | [standalone]

#11687

On Fri, 1 Nov 2013 16:33:55 +0000 (UTC), Denis McMahon wrote:

> On Fri, 01 Nov 2013 07:54:35 -0400, richard wrote:
> 
>> On Fri, 1 Nov 2013 07:50:58 -0400, richard wrote:
>> 
>>> www.mroldies.net
>>> 
>>> Don't bitch to me about the gawd awful mess of javascript.
>>> thats the way it came in the package.
>>> I don't care. It works.
>> 
>> I'll be damned.
>> the messy thing actually frickin validates.
> 
> You're failing to validate your user input to ensure it complies with 
> expected values and handle out of range values suitably:
> 
> Could not successfully run query (SELECT id, 
> atitle,btitle,artist,label,avid FROM A1972 WHERE id<101) from DB: Table 
> 'richbull_top100.A1972' doesn't exist

no shit sherlock.
furthermore, that code does not even exist on that page.
show me the exact page you used.

[toc] | [prev] | [next] | [standalone]

#11691

On Fri, 01 Nov 2013 13:01:48 -0400, richard wrote:

> On Fri, 1 Nov 2013 16:33:55 +0000 (UTC), Denis McMahon wrote:
> 
>> On Fri, 01 Nov 2013 07:54:35 -0400, richard wrote:
>> 
>>> On Fri, 1 Nov 2013 07:50:58 -0400, richard wrote:
>>> 
>>>> www.mroldies.net
>>>> 
>>>> Don't bitch to me about the gawd awful mess of javascript.
>>>> thats the way it came in the package.
>>>> I don't care. It works.
>>> 
>>> I'll be damned.
>>> the messy thing actually frickin validates.
>> 
>> You're failing to validate your user input to ensure it complies with
>> expected values and handle out of range values suitably:
>> 
>> Could not successfully run query (SELECT id,
>> atitle,btitle,artist,label,avid FROM A1972 WHERE id<101) from DB: Table
>> 'richbull_top100.A1972' doesn't exist
> 
> no shit sherlock.
> furthermore, that code does not even exist on that page. show me the
> exact page you used.

I took one of the links on your page and hand edited it. This is the sort 
of thing people will do to try and exploit any code errors in your 
website.

If you understood the code you were using you should be able to tell from 
looking at the error message I posted what I did and why it failed.

The lesson is this: Any data that your script receives as part of the 
http request is susceptible to having been manipulated by external 
parties with the malicious intent of exploiting bugs in the underlying 
server software (php, apache, mysql) to hack your website. If you do not 
perform suitable verification and validation of such data, your website 
will eventually be hacked, and will then be subverted by criminals in 
support of their criminal activities.

If I was an attacker, I would now know that the person who coded this 
website did not properly validate and verify the request inputs. I 
probably also know that there's php code and a mysql database behind the 
website, and possibly that the coder used the deprecated php mysql_* 
functions (that error message may be mysql_query specific). This could 
mark the website as one that was worthy of further specific attacks aimed 
at exploiting known bugs in either php or mysql.

This is how websites get hacked. We've been telling you this for years. 
You've been ignoring us for years. We don't expect anything to change.

-- 
Denis McMahon, denismfmcmahon@gmail.com

[toc] | [prev] | [next] | [standalone]

#11694

Denis McMahon wrote:

> richard the sto0pid wrote:
>> no shit sherlock.
> [snippage]
> If you understood the code you were using you should be able to tell
> from looking at the error message I posted what I did and why it failed.

RtS - as we all know - is not a coder, not even close. All he can do is 
copy something someone else wrote, and muddle with it on his site. He 
doesn't know why.

> This is how websites get hacked. We've been telling you this for years.
> You've been ignoring us for years. We don't expect anything to change.

Please be sure to let him know that not only is his own site at risk, but 
so are the thousand other sites on his shared server.   <g>

-- 
   -bts
   -This space for rent, but the price is high

[toc] | [prev] | [next] | [standalone]

#11688

On Fri, 1 Nov 2013 16:33:55 +0000 (UTC), Denis McMahon wrote:

> On Fri, 01 Nov 2013 07:54:35 -0400, richard wrote:
> 
>> On Fri, 1 Nov 2013 07:50:58 -0400, richard wrote:
>> 
>>> www.mroldies.net
>>> 
>>> Don't bitch to me about the gawd awful mess of javascript.
>>> thats the way it came in the package.
>>> I don't care. It works.
>> 
>> I'll be damned.
>> the messy thing actually frickin validates.
> 
> You're failing to validate your user input to ensure it complies with 
> expected values and handle out of range values suitably:
> 
> Could not successfully run query (SELECT id, 
> atitle,btitle,artist,label,avid FROM A1972 WHERE id<101) from DB: Table 
> 'richbull_top100.A1972' doesn't exist

PS:
I also understand you are showing me that, that is a possibility.

[toc] | [prev] | [next] | [standalone]

#11700

On 11/1/2013 10:04 AM, richard wrote:
> On Fri, 1 Nov 2013 16:33:55 +0000 (UTC), Denis McMahon wrote:
>
>> On Fri, 01 Nov 2013 07:54:35 -0400, richard wrote:
>>
>>> On Fri, 1 Nov 2013 07:50:58 -0400, richard wrote:
>>>
>>>> www.mroldies.net
>>>>
>>>> Don't bitch to me about the gawd awful mess of javascript.
>>>> thats the way it came in the package.
>>>> I don't care. It works.
>>>
>>> I'll be damned.
>>> the messy thing actually frickin validates.
>>
>> You're failing to validate your user input to ensure it complies with
>> expected values and handle out of range values suitably:
>>
>> Could not successfully run query (SELECT id,
>> atitle,btitle,artist,label,avid FROM A1972 WHERE id<101) from DB: Table
>> 'richbull_top100.A1972' doesn't exist
>
> PS:
> I also understand you are showing me that, that is a possibility.
>


The why be a jackass about it 3 minutes earlier?

Scotty

[toc] | [prev] | [next] | [standalone]

#11701

On Fri, 1 Nov 2013 13:04:50 -0400, richard <noreply@example.com>
wrote:

>PS:
>I also understand you are showing me that, that is a possibility.

http://community.agriculture.com/t5/image/serverpage/image-id/6290i07953E55367EA616/image-size/original?v=mpbl-1&px=-1
-- 
To reply via e-mail, remove The Obvious and .invalid from my e-mail address.

[toc] | [prev] | [next] | [standalone]

#11702

On 11/01/2013 07:50 AM, richard wrote:
> www.mroldies.net
>
> Don't bitch to me about the gawd awful mess of javascript.
> thats the way it came in the package.
> I don't care. It works.
>

  What works? It doesn't play the song I'm choosing from the list...

-- 
Norman
Registered Linux user #461062
-Have you been to www.php.net yet?-

[toc] | [prev] | [next] | [standalone]

#11703

On Sat, 02 Nov 2013 08:27:22 -0400, Norman Peelman wrote:

> On 11/01/2013 07:50 AM, richard wrote:
>> www.mroldies.net
>>
>> Don't bitch to me about the gawd awful mess of javascript.
>> thats the way it came in the package.
>> I don't care. It works.
>>
> 
>   What works? It doesn't play the song I'm choosing from the list...

which one?
what browser?

[toc] | [prev] | [next] | [standalone]

#11704

On 02-11-2013 16:39, richard wrote:
> On Sat, 02 Nov 2013 08:27:22 -0400, Norman Peelman wrote:
>
>> On 11/01/2013 07:50 AM, richard wrote:
>>> www.mroldies.net
>>>
>>> Don't bitch to me about the gawd awful mess of javascript.
>>> thats the way it came in the package.
>>> I don't care. It works.
>>>
>>
>>    What works? It doesn't play the song I'm choosing from the list...
>
> which one?
> what browser?
>

It's now or never
http://mroldies.net/player.php?year=1960&nid=6

and all other songs from the bottom half of the page......

[toc] | [prev] | [next] | [standalone]

#11707

On Sat, 02 Nov 2013 17:10:59 +0100, Luuk wrote:

> On 02-11-2013 16:39, richard wrote:
>> On Sat, 02 Nov 2013 08:27:22 -0400, Norman Peelman wrote:
>>
>>> On 11/01/2013 07:50 AM, richard wrote:
>>>> www.mroldies.net
>>>>
>>>> Don't bitch to me about the gawd awful mess of javascript.
>>>> thats the way it came in the package.
>>>> I don't care. It works.
>>>>
>>>
>>>    What works? It doesn't play the song I'm choosing from the list...
>>
>> which one?
>> what browser?
>>
> 
> It's now or never
> http://mroldies.net/player.php?year=1960&nid=6
> 
> and all other songs from the bottom half of the page......

Oh. You're talking about from the charts.
I guess I should take that out of the picture for now.

[toc] | [prev] | [next] | [standalone]

#11712

On 11/02/2013 11:39 AM, richard wrote:
> On Sat, 02 Nov 2013 08:27:22 -0400, Norman Peelman wrote:
>
>> On 11/01/2013 07:50 AM, richard wrote:
>>> www.mroldies.net
>>>
>>> Don't bitch to me about the gawd awful mess of javascript.
>>> thats the way it came in the package.
>>> I don't care. It works.
>>>
>>
>>    What works? It doesn't play the song I'm choosing from the list...
>
> which one?
> what browser?
>

   When the page loads, the player loads the song at the top of the 
list. I can play that song. If I choose another song from the list it 
reloads the page with a new (different list) and loads the top (#1) song 
(whatever it may be) into the player.


-- 
Norman
Registered Linux user #461062
-Have you been to www.php.net yet?-

[toc] | [prev] | [next] | [standalone]

#11714

On Sat, 02 Nov 2013 17:34:35 -0400, Norman Peelman wrote:

> On 11/02/2013 11:39 AM, richard wrote:
>> On Sat, 02 Nov 2013 08:27:22 -0400, Norman Peelman wrote:
>>
>>> On 11/01/2013 07:50 AM, richard wrote:
>>>> www.mroldies.net
>>>>
>>>> Don't bitch to me about the gawd awful mess of javascript.
>>>> thats the way it came in the package.
>>>> I don't care. It works.
>>>>
>>>
>>>    What works? It doesn't play the song I'm choosing from the list...
>>
>> which one?
>> what browser?
>>
> 
>    When the page loads, the player loads the song at the top of the 
> list. I can play that song. If I choose another song from the list it 
> reloads the page with a new (different list) and loads the top (#1) song 
> (whatever it may be) into the player.

What browser?
There is nothing in the javascript that causes a reload.
or you could have your browser set to open ALL links in a new page or
something.

[toc] | [prev] | [next] | [standalone]

#11715

In article <fob03bcyiwuo$.1ec0fisdr8i7q.dlg@40tude.net>, richard
<noreply@example.com> wrote:

> On Sat, 02 Nov 2013 17:34:35 -0400, Norman Peelman wrote:
> 
> > On 11/02/2013 11:39 AM, richard wrote:
> >> On Sat, 02 Nov 2013 08:27:22 -0400, Norman Peelman wrote:
> >>
> >>> On 11/01/2013 07:50 AM, richard wrote:
> >>>> www.mroldies.net
> >>>>
> >>>> Don't bitch to me about the gawd awful mess of javascript.
> >>>> thats the way it came in the package.
> >>>> I don't care. It works.
> >>>>
> >>>
> >>>    What works? It doesn't play the song I'm choosing from the list...
> >>
> >> which one?
> >> what browser?
> >>
> > 
> >    When the page loads, the player loads the song at the top of the 
> > list. I can play that song. If I choose another song from the list it 
> > reloads the page with a new (different list) and loads the top (#1) song 
> > (whatever it may be) into the player.
> 
> What browser?
> There is nothing in the javascript that causes a reload.
> or you could have your browser set to open ALL links in a new page or
> something.

I'm not getting the reload (Safari 6.1), but how do I access anything
but the initial list that's there. If I select a year, that changes the
list in the bottom half of the page, but none of those is playable.

-- 
Tim

"That excessive bail ought not to be required, nor excessive fines imposed,
nor cruel and unusual punishments inflicted"  --  Bill of Rights 1689

[toc] | [prev] | [next] | [standalone]

#11719

On Sat, 02 Nov 2013 22:57:21 +0000, Tim Streater wrote:

> In article <fob03bcyiwuo$.1ec0fisdr8i7q.dlg@40tude.net>, richard
> <noreply@example.com> wrote:
> 
>> On Sat, 02 Nov 2013 17:34:35 -0400, Norman Peelman wrote:
>> 
>>> On 11/02/2013 11:39 AM, richard wrote:
>>>> On Sat, 02 Nov 2013 08:27:22 -0400, Norman Peelman wrote:
>>>>
>>>>> On 11/01/2013 07:50 AM, richard wrote:
>>>>>> www.mroldies.net
>>>>>>
>>>>>> Don't bitch to me about the gawd awful mess of javascript.
>>>>>> thats the way it came in the package.
>>>>>> I don't care. It works.
>>>>>>
>>>>>
>>>>>    What works? It doesn't play the song I'm choosing from the list...
>>>>
>>>> which one?
>>>> what browser?
>>>>
>>> 
>>>    When the page loads, the player loads the song at the top of the 
>>> list. I can play that song. If I choose another song from the list it 
>>> reloads the page with a new (different list) and loads the top (#1) song 
>>> (whatever it may be) into the player.
>> 
>> What browser?
>> There is nothing in the javascript that causes a reload.
>> or you could have your browser set to open ALL links in a new page or
>> something.
> 
> I'm not getting the reload (Safari 6.1), but how do I access anything
> but the initial list that's there. If I select a year, that changes the
> list in the bottom half of the page, but none of those is playable.

That is correct.
I need to seperate the lists better.
If you take the initial list in the top section, note the year and number
of the first song.
Now click on that year in the lower part and you should find it listed in
the top 20 of that year.
That is how I based my play list. I took the top 20 songs for each year.

Search for "Billboard Magazine Top 100" and you should find hundreds of
sites with the same list.

[toc] | [prev] | [next] | [standalone]

#11718

On 11/02/2013 06:45 PM, richard wrote:
> On Sat, 02 Nov 2013 17:34:35 -0400, Norman Peelman wrote:
>
>> On 11/02/2013 11:39 AM, richard wrote:
>>> On Sat, 02 Nov 2013 08:27:22 -0400, Norman Peelman wrote:
>>>
>>>> On 11/01/2013 07:50 AM, richard wrote:
>>>>> www.mroldies.net
>>>>>
>>>>> Don't bitch to me about the gawd awful mess of javascript.
>>>>> thats the way it came in the package.
>>>>> I don't care. It works.
>>>>>
>>>>
>>>>     What works? It doesn't play the song I'm choosing from the list...
>>>
>>> which one?
>>> what browser?
>>>
>>
>>     When the page loads, the player loads the song at the top of the
>> list. I can play that song. If I choose another song from the list it
>> reloads the page with a new (different list) and loads the top (#1) song
>> (whatever it may be) into the player.
>
> What browser?
> There is nothing in the javascript that causes a reload.
> or you could have your browser set to open ALL links in a new page or
> something.
>

Thunderbrowse (MOZILLA/Gecko), works in FF and Chrome though.

-- 
Norman
Registered Linux user #461062
-Have you been to www.php.net yet?-

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.php

csiph-web