Skip to content

Archive for June, 2008

28
Jun

Heard on Slashdot !

I have been a Slashdot fan for a while now, and these guys are just a STITCH. Sometimes they get going on a riff and the results are laugh out loud funny.

I am posting this ‘repost’ to illustrate, the link at the bottom will take you to the original material.

Posted by ScuttleMonkey on Friday June 27, @03:12PM
from the new-swimming-holes dept.
Earth Science
phobos13013 writes “Recently released evidence is showing the North Pole ice is melting at the highest rate ever recorded. As a result, the Pole may be completely ice-free at the surface and composed of nothing but open water by September. As reported in September of last year, the Northwest Passage was ice-free for the first time known to man. The implications of this, as well as the causes, are still being debated. Are global warming experts just short-sighted alarmists? Are we heading for a global ice age? Or is the increase in global mean temperature having an effect on our planet?”

The Polar Bears. No place to go any more.

But lack of polar bears is good for seals. screw those polar bears and their radical bear agenda!

But lack of seals is good for cod. screw those seals and their radial seal agenda!

Those seals are not radial! They exhibit bilateral symmetry!

Note: the above is a marine biology joke. If you have not majored in Marine Biology, please go back to college and complete enough courses until the above is funny in context.

Ohhhh yeah… studied Marine Biology have you? Well then… answer me this:

What do Walruses and Tupperware have in common?

…they both like a tight seal!

sorry…last day, won’t be here all week =(

And, plankton take solar energy and convert it into stored food energy.

So, Global Warming = Less Polar Bears = More Seals = Less Cod = More Plankton = More Solar Conversion = Global Cooling!!!!

Who cares if humans get wiped out?

Me.

… what does seal taste like?

It’s kind of gamey… like spotted owl and bald eagle…. :-D

They live in areas around which, according to the article, have plenty of ice…

Damn…That must be why my freezer keeps growling at me.

No, thats the half eaten carton of Ben and Jerry’s from 1997, clean out your damn fridge..

LINK

24
Jun

Locking Down WordPress- A PHP Primer

1. Set register_globals to OFF
2. Turn off Display Error/Warning Messages. Set error_display to ZERO.
3. Never run unescaped queries
4. Validate all user inputs. Items on Forms, in URLs and so on
5. Move config.php and files containing Passwords to MySQL to a secure
directory outside of the public_html folder
6. Access Control: You don’t want the user to have access to any Admin
function or Clean up scripts
7. The .htaccess file is your friend. Use it to deny access to your site
or files. (We also have an easy IP Deny Manager tool in the cpanel)
8. PHP can parse any valid script, whether it is called foo.php,
very_long_name.php.php.php, or even deleteme.bat.
* Using the default extension of “.php” means that before your
hackers start you have already told them you are using PHP.
* As mentioned, you can use any filename for your scripts – if
you are using PHP for every script on your server, consider using the
“.html” extension for your scripts and making PHP parse HTML files.
* You can change your file extension by adding this line to the
.htaccess or turn it on via the Apache Handlers in the cPanel (AddHandler
application/x-httpd-php5 .html)
* To protect against SQL injection attacks Sometimes hackers will
try to screw up your database by inserting SQL code into your form input
fields. They can for example, insert code that could delete all the data in
your database!
* To protect against this, you need to use this PHP function:
* mysql_real_escape_string()
* This function escapes (makes safe) any special characters in a
string (programmers call text a ‘string’) for MySQL.
9. Example: $name = $_REQUEST['name']; $safe_name =
mysql_real_escape_string($name); Now you know the variable $safe_name, is
safe to use with your SQL code.
10. Keep the PHP code to yourself. If anyone can see it they can expliot
vulnerabilities.
* You should take care to store your PHP files and the necessary
passwords to access your MySQL databases in protected files or folders.
* The easy way to do this is to put the database access passwords
in a file with a .inc.php extension (such as config.inc.php), and then
place this file in a directory which is above the server’s document root
(and thus not accessible to surfers of your site).
* Then, refer to the file in your PHP code with a require_once
command.
* By doing things this way, your PHP code can read the included
file easily but hackers will find it almost impossible to hack your site.

You can find more information about hardening your PHP scripts at:
PHPsec.org

Also, for security purposes, you cn refer to these two websites:

PHPIDS – Web Application Security 2.0 – Index

BlogSecurity

23
Jun

Violent Storm 6-22-08 Great Barrington, Ma