Forum bugs...

v3|0c17y · Eleet Joined: 28 Jan 2005 Posts: 650

dunno if its just me but with all the php vulnerabilities reported and such, I have notice the SIRC forum to be somewhat buggy, such as seeing "new posts" when already read and also marked as read and such, I have cleared my browser's history and checked everything, here seems all clear so just to let sirc staff know, dunno if it might be also a problem with the database still.....

using firefox 1.0.4 on win xp pro also on FC3

PingBad · Guru Joined: 05 Feb 2005 Posts: 2031 Location: New Zealand

The issue was first raised when the forum was updated. Jason (last I checked) is still sorting out a way to resolve these issues

JohnB · Posted: Jul 01, 2005 6:31am Post subject:

We are waiting for the next release of phpbb....then we'll update and fix the bugs hopefully Smile

JohnB
SearchIRC.com staff

v3|0c17y · Eleet Joined: 28 Jan 2005 Posts: 650

I'm starting to dislike php Mad

Guest · Posted: Jul 10, 2005 2:56pm Post subject:

v3|0c17y · Eleet Joined: 28 Jan 2005 Posts: 650

w00t · Posted: Jul 11, 2005 6:11pm Post subject:

No, it's not. I believe the kernel itself is written in C or something, mind you with windows "kernel" is rather a dubious term.

http://www.php.net/ <-- read those headlines and tell me how many vulnerability announcements you see? I see one, and by the looks of it, that involved PEAR - not PHP itself. I have no doubt there have been other issues, but no major security flaws.

PHP is the kind of language where it's possible to write secure code, however many people DON'T. (If you've looked into CMS and finance-related software lately written in PHP on places like SourceForge, you'll know what I mean. Around 90% of them must have require_globals on to work- and we all know just how easy it can be to write a flaw into something involving that, don't we?)

PHP continually gets a bad writeup because of misbehaving code- when the problem is in the script, not the core. Unlike say, CF, which doesn't nearly provide the flexibility of PHP (imo, for example, let's see someone write a mysql irc bot in CF :p)

Then again, as with all software, PHP will have problems. This is unavoidable. The only way to avoid problems is to stay up to date with updates and patches, and encourage our developers to learn how to write secure code and use proper work practices.

Jason · Posted: Jul 11, 2005 7:36pm Post subject:

PHP is written in C.

The first version of SearchIRC was also written in C (Bunch of C programs I wrote that ran as CGIs).

The second version of SearchIRC was all PHP.

This site runs with register globals disabled. All input has GPC quotes enabled to escape them. The web server runs with SELinux rules in place. It would be pretty hard to exploit much on the web server, and harder yet to exploit the system.

PHP is good at what it does best - I'm working on some commercial enterprise stuff right now, and in that arena we use Java and Oracle instead of PHP and MySQL. Ironic since PHP and MySQL are much faster, but ultimately not suprising..

MrBurns · Posted: Jun 29, 2006 2:46pm Post subject:

Since I don't want to start a completely new thread just for this I'm posting it here:

The moment I'm making this post the forum is running really incredibly slow. Pages take up to half a minute to load and every post I try to make seems to take ages. The connection check I did shows my bandwith to be 18.5 mbit down and 1.65 mbit up with a 0.011 second ping, so it ain't my connection that's being slow. There's a serious lag, and I'd like to know if it's simply cuz there are a lot of users online at this moment or is there some other problem?

Jason · Posted: Jun 29, 2006 6:11pm Post subject:

Could be because you're in .nl ....

SATAN-HHH · Eleet Joined: 29 Nov 2003 Posts: 850 Location: Texas

Probably is, considering site-to-site distance. I'm on a crappy dialup at the moment and it dosen't even seem slow to me. You're having to make too many hops from your computer to the searchirc server.

PingBad · Guru Joined: 05 Feb 2005 Posts: 2031 Location: New Zealand

I'm in NZ, and even on dial up it's relatively fast (then again, the US is only on the other side of the Pacific from me, go figure)

MrBurns · Posted: Jun 30, 2006 2:50am Post subject:

Normally, like on this very moment, the forum is normal. So it has nothing to do with distance. Like I said before, it only happens at a specific time.