A young guy in a ball cap and sweatshirt and jeans, very typical OC college student type, showed up on the patio and sat outside. He produced from somewhere a bird, a small green one, something similar to a parakeet. Odessa, who was sitting next to me inside, pointed him out. We watched him talk to the bird, who wandered around on the table in front of him and periodically sat on his hand or let him skritch it. He was smoking but keeping the cigarette away from the bird. They appeared to be friends. And then later he walked off towards Wendy’s and we couldn’t see the bird any more. Where’d the bird go? He didn’t look like someone who’d have a bird! What is going on?
Jared sent me a Tori Amos video. Yes, that Jared.
The apostrophe in “McDonald’s” temporarily broke the large, professional website of the company for whom I work.
I read a whole book today. It’s been a while since I did that.
The apostrophe in “McDonald’s” temporarily broke the large, professional website of the company for whom I work.
Sounds like some cross-site-scripting waiting to happen there… That or SQL injection 🙂 Someone’s not scrubbing their input…
Way sadder than you think!
It’s Java munching on XML. And the sad part is, we have proven totally functional code that makes this impossible, and people just… don’t… USE it.
> Yes, that Jared.
Fogel?
LikeLike
Nah, I bet that guy is a big Tori fan. This Jared likes Tool and Meshuggah.
LikeLike
The apostrophe in “McDonald’s” temporarily broke the large, professional website of the company for whom I work.
Sounds like some cross-site-scripting waiting to happen there… That or SQL injection 🙂 Someone’s not scrubbing their input…
LikeLike
Never mind scrubbing input, they should be using bind variables. For example, if they’re using Perl, instead of
they should be using
That way, it because $name is never interpolated into a SQL string, it doesn’t matter what’s in $name. PHP has support for bind variables as well.
LikeLike
Way sadder than you think!
It’s Java munching on XML. And the sad part is, we have proven totally functional code that makes this impossible, and people just… don’t… USE it.
LikeLike
Was it “'” or ” ” “?
LikeLike
the apostrophe, not a double quote 🙂
LikeLike
That was an HTML-encoded apostrophe versus a SQL-encoded apostrophe.
LikeLike
oh okay, I spaced.
LikeLike