// Cache the result.  Be aware that this is only feasible if the cache
// is flushed in its entirety for any edit, since we don't yet have the
// ability to track individual changes to text, for things like item
// name changes, etc.
    $Cache->store('TextMarkup_'.$type.'_'.$id.'_'.$tag, array($this->format, $this->source, $this->html) );

McGlockenshire fucked around with this message at 02:07 on Jan 24, 2009

#!perl
use strict;
use warnings;
use Data::Dumper;
my @list = qw! -1 0 1 2 3 4 5 !;
my @sorted_list = sort { my $x = $a += $b; print "$x\n"; $x; } @list;
print Dumper \@sorted_list;

$VAR1 = [
          5,
          9,
          7,
          23,
          3,
          4,
          0
        ];

my @sorted_list = sort { my $olda = $a; my $x = $a += $b; print "$olda + $b -> $x ($a)\n"; $x; } @list;

-1 + 0 -> -1 (-1)
1 + 2 -> 3 (3)
3 + 4 -> 7 (7)
-1 + 2 -> 1 (1)
1 + 3 -> 4 (4)
4 + 5 -> 9 (9)
2 + 5 -> 7 (7)
7 + 9 -> 16 (16)
16 + 7 -> 23 (23)

McGlockenshire fucked around with this message at 10:41 on Jun 16, 2009

<?
class songs_global { 
// ...
    public function fixString($Instring=NULL){
    //Use this on any text you pass into the database.
    //Queries will fail if any variable contains a single quote.
    //First replaces addslashes /' with just a single quote, 
    //then replaces single quotes with two single quotes. 
    //ie bee/'s knees or bee's knees becomes bee''s knees,
    //then uses the first quote to escape the second
    //so INSERT 'bee''s knees' is interpreted as
    //INSERT 'bee's knees'

        if($Instring == NULL){
            return NULL;
        }
        $OutString = str_replace("'", "''", str_replace("\'", "'", $Instring)); 
        return $OutString;
    }?>

McGlockenshire fucked around with this message at 23:50 on Aug 18, 2009

McGlockenshire fucked around with this message at 05:57 on Jun 11, 2010

McGlockenshire fucked around with this message at 06:37 on Sep 27, 2010

McGlockenshire fucked around with this message at 07:11 on Sep 27, 2010

McGlockenshire fucked around with this message at 00:49 on Oct 1, 2010

<?php
// We already know that the password gets xored into nothingness, so
// we'll encrypt using the password, then decrypt using the empty string.
    $broken = $db->query_one("SELECT AES_ENCRYPT('hello', 'arbitrarypasswrdarbitrarypasswrd')");
    $result = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, '', $broken, MCRYPT_MODE_ECB);
    echo urlencode($result);
// => "hello%0B%0B%0B%0B%0B%0B%0B%0B%0B%0B%0B"
// 0x0b is chr 11, the vertical tab.  This is the padding that their manual warns about.
    echo base64_encode($broken);
// => mDTtUYy8j76a88bst164wA==
// This is the thing we'll expect to see when we've replicated the broken implementation.
// Let's try encrypting the same string using the same key and the same encryption mode (ECB, which is also considered scary/bad now).
    $crypted = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, 'arbitrarypasswrdarbitrarypasswrd', 'hello', MCRYPT_MODE_ECB);
    echo base64_encode($crypted);
// => 6NfWHAVuIFL9pwFbmNuDEw==
// Well that's not right.
// Let's add the padding.
    $wrong = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, 'arbitrarypasswrdarbitrarypasswrd', urldecode('hello%0B%0B%0B%0B%0B%0B%0B%0B%0B%0B%0B'), MCRYPT_MODE_ECB);
    echo base64_encode($wrong);
// => +sU43m6oTdmX+oPg2bU88g==
// Nope, way different.  Let's blank the key.
    $fuckmysql = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, '', urldecode('hello%0B%0B%0B%0B%0B%0B%0B%0B%0B%0B%0B'), MCRYPT_MODE_ECB);
    echo base64_encode($fuckmysql);
// => mDTtUYy8j76a88bst164wA==
// There, we managed to replicate how broken MySQL is.

<?php
    $key = 'a somewhat long passphrase that does not intentionally munch crap';
    $crypted = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key, urldecode('hello%0B%0B%0B%0B%0B%0B%0B%0B%0B%0B%0B'), MCRYPT_MODE_ECB);
// mcrypt_encrypt(): Size of key is too large for this algorithm in php shell code on line 1
    echo base64_encode($crypted)
// => tAM4mX6g69XWmODZ71b00w==
// MySQL gives the following for the same passphrase and un-padded string of 'hello':
// => Y2e2bJXEDf+5qsgb+I4Y8w==

php > $mc = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_ECB, '');
php > echo $mc;
Resource id #1
php > var_export( mcrypt_enc_get_supported_key_sizes($mc) );
array (
  0 => 16,
  1 => 24,
  2 => 32,
)
php > var_export( mcrypt_enc_get_key_size($mc) );
32
php > $random_shit = openssl_random_pseudo_bytes(32);
php > mcrypt_generic_init($mc, $random_shit, str_repeat("\0", 16)); // It wants an IV, even though ECB doesn't use one
php > echo base64_encode(mcrypt_generic($mc, 'hello'));
eN+lZyoWWMcj+YndwQn7gw==
php > $random_shit .= '1';
php > mcrypt_generic_init($mc, $random_shit, str_repeat("\0", 16));
PHP Warning:  mcrypt_generic_init(): Key size too large; supplied length: 33, max: 32 in php shell code on line 1
php > echo base64_encode(mcrypt_generic($mc, 'hello'));
eN+lZyoWWMcj+YndwQn7gw==
php > 

McGlockenshire fucked around with this message at 01:27 on Feb 25, 2011