270 reputation
210
bio website
location
age
visits member for 3 years, 3 months
seen Apr 29 at 9:15

Mar
9
comment Is it a good idea to create multiple heads with Mercurial?
Is this the preferred way to keep bad commits? I guess I'm looking for best-practices; it seems like either way would work.
Feb
17
comment How do you unit test an encoder?
@MichaelShaw just a piece of trivia, the encoder and decoder for ROT13 are the same; ROT13 is its own inverse. If you implemented ROT14 by mistake, then decode(encode(char)) would not equal char (it would equal char+2).
Sep
1
comment Is it a common practice to minimize JavaScript usage when building a website?
@JörgWMittag if you're going to disable a web technology, you should not expect to get the full benefits of the website. Scenarios differ, but if I'm building a web app I'm probably not wasting my time building in full compatibility for a minority of my users who refuse to move to the 21st century. Similar to how I don't support IE 6 in most of my projects.
Jun
29
comment What actions should I not rely on the packaged functionality of my language for?
No. I'm just clarifying that there is nothing wrong with the mysql_real_escape_string function itself, but instead with the people who use it without understanding its limitations.
Jun
29
comment What actions should I not rely on the packaged functionality of my language for?
Just to clarify: there is nothing "wrong" with using mysql_real_escape_string if you understand it and don't abuse it. It protects you against straight SQL injection in strings. It doesn't claim to protect from other types of SQL injection. Prepared statements are better because they help protect against the developer's mistakes.
Jun
29
comment What actions should I not rely on the packaged functionality of my language for?
@kevincline +1. Use well-tested methods, especially when security is a concern. No need to reinvent (and possibly screw up) the wheel; security is easy to make mistakes with.
Jun
28
comment Do Java applets have any place on the web today?
@James, right; I am more interested in knowing the place of Java on the client.
Jun
28
comment Do Java applets have any place on the web today?
I'm well aware that JavaScript isn't related to Java. Hence why I asked "...instead of JavaScript?" It seems like you don't have a good understanding of clientside technologies.
Apr
9
comment Why is my class worse than the hierarchy of classes in the book (beginner OOP)?
Use constants for "fixed rate"/"hourly rate" and "seminar"/"lecture" instead of strings.
Feb
9
comment Why don't public web applications use ini files for configuration
Also note that a PHP file can give some basic security. If Joomla used XML or .ini files for storing configuration, there would no doubt be lots of misconfigured instances running where the configuration was publicly accessible, which is usually not a good thing. With PHP files, it's going to be very, very rare for a server to be misconfigured to serve the contents of it to a visitor.
Aug
16
comment Will it ever be possible to build quality websites with editors alone, without needing to know HTML?
Thanks for the note, it was a bit unclear.