Reputation
40,490
Next tag badge:
150/100 score
17/20 answers
Badges
9 76 140
Newest
 Nice Answer
Impact
~1.5m people reached

Jul
4
answered Is there a concept of a variable with phases of initialization: uninitialized, initializing, immutable?
Jul
4
comment Should user input of a contact form be validated?
Server-side validation is necessary to prevent data pollution, but from a security standpoint, very rudimentary validation is enough: making sure that very large input is discarded as early as possible to reduce the attack surface for DoS, and rate-limiting + CAPTCHA checks to prevent spamming, brute-forcing and DoS attacks is about as wild as it gets. What you absolutely do want though is to convert data to the correct format whenever it crosses a layer boundary (database <-> logic or logic <-> presentation). But that's not validation.
Jul
4
comment Should user input of a contact form be validated?
Validation does not prevent XSS. Correct output encoding does.
Jul
3
awarded  Great Answer
Jul
2
comment How to familiarize myself with Python
You definitely want to participate in the Python community, or that of whatever tech you're learning. SO is a great resource, but it's not immersive enough to give you a good feel of the community's conventions and habits, and you'll have a harder time writing idiomatic code.
Jul
2
comment Why do most programming languages only support returning a single value from a function?
Functions in Mathematics and functions in most programming languages are two very different beasts.
Jul
2
answered How to familiarize myself with Python
Jul
2
answered Do logged in users need to browse a site over https?
Jul
2
comment Origin of common list-processing function names
Also note that while those languages don't have common ancestors officially, there absolutely has been a lot of influence, back and forth. Guido van Rossum had done his homework when he started designing Python, and Scheme, Common Lisp, Perl and (IIRC) Haskell and ML were already around at the time.
Jul
1
answered Why do some opensouce libraries lack comments?
Jun
24
reviewed Approve What's wrong with relative imports in Python?
Jun
21
comment When does SOAP make more sense than REST?
@maple_shaft: I disagree; "understandable" / "obscure" is subjective, but "simple" / "complex" is not. It may not be quantifyable, but it is observable, and people usually agree over the relative degree of complexity of any two given exhibits.
Jun
20
comment Break on default case in switch
@svick: all of them, to varying degrees. C set the standard back in the days, and C++, Java, JavaScript and PHP use mostly the same rules. C# is a bit different in that it disallows fall-through, but otherwise, the same applies.
Jun
20
answered Attributing credit for programming languages used
Jun
20
comment How to solve the problem of nested comments
@Vorac: glad you like the reference :D
Jun
20
awarded  Guru
Jun
19
answered What is the reason for using lowercase for the first word in a local variable (eg, employeeCount, firstName)
Jun
18
comment What were the Design Patterns of the procedural programming era?
OOP is actually a bit older: see en.wikipedia.org/wiki/Smalltalk. Also, DRY is not unique to OOP; the principle can be (and should be) in all programming paradigms, although they have different answers as to how to achieve it.
Jun
17
comment Break on default case in switch
@dan04: yes, good point. C# is an exception here, and it's probably because the language designers knew about the problems with switch fall-through in existing languages and wanted to prevent them. The rules C# imposes pretty much match the recommendations from my answer.
Jun
17
awarded  Good Answer