|
Non-programmers will most likely not understand a word i'm writing here but maybe those with a programming background will get a laugh from it:
Today we released our mobile VOD platform and as with any big release, there was some trouble. Less than expected considering that half the backend was changed but gits great merging kept a lot of trouble away from us.
However, there was one bug that my colleagues couldn't figure out so i had to jump in to help. I spent 20 minutes searching for it, tracing through several functions, the huge if($action == 'asdf') {}elseif ($action == 'bvcx') {}... block, etc. and at first i couldn't find it either. It looked as if he went into a block where the if condition was a constant defined as false compared to true.
if (MOBILE_TEMPLATE == true) { // the code he shouldn't reach in this case }
Apart fromt he fact that "== true" doesn't make sense anyways, the code shouldn't enter this block in the situation we were testing. My colleague showed me the debug output of MOBILE_TEMPLATE which clearly showed that it's false.
After going through everything step-by-step and testing the variables myself i found this gem in my debug output:
string(5) "false"
Checking the declarations i found the source of the bug:
if ($product_id == 1) { define('MOBILE_TEMPLATE', 'false'); } else { define('MOBILE_TEMPLATE', 'true'); }
If you know your PHP, you will know that the string "false" evaluates to true in a boolean comparision since it's not an empty string.
Now i ordered the two guys responsible to fix that ASAP. They started with changing the code to:
if (MOBILE_TEMPLATE == 'true') { ... }
I wanted to punch them sooooo hard. Luckily i'm out of here at the end of the month...
   
|
Are those guys students or what ? Can't imagine people with a finished degree are doing such facepalm-worthy things.
|
Good luck finding a job where noone ever make mistakes.
|
And this is exactly why I prefer languages that are more strongly typed than PHP (which is pretty much every language).
|
On September 10 2012 19:42 gaymon wrote: Are those guys students or what ? Can't imagine people with a finished degree are doing such facepalm-worthy things.
They finished their degrees but this company doesn't exactly look for the brightest employees, only the cheapest, which is why we ended up with a team of programmers that write such bad code on a daily basis. I spend more time helping them to fix their messes than i spend actually doing my work.
There isn't a single day where they don't ask me "How can i do <stupid thing>?" and i have to go over and find out what mess they produced to get into a situation where they would want to do <stupid thing>.
When i started programming professionally a decade back i thought i'd be amongst the most intelligent people working on expanding their knowledge to write perfect code. Reality hit me hard.
|
"Perfect" code takes far longer than companies are willing to allow. You're dealing with less knowledgeable people because skilled coders cost too much, and shorter time frames to meet deadlines, meaning you get generic and mangled code that works, rather than spending the time to find a more elegant solution.
Sure, there are plenty of programmers that look for solutions in their spare time, or make it their goal to find elegance in projects, but they are likely freelancing or simply working by themselves. Finding such skill in someone attached to a company (that isn't a start-up) is rare. Companies are getting the ones who slugged it out in college/university and can hack together some code to do the basic stuff they need; they're far from the passionate people that end up becoming entrepreneurs most of the time.
|
hows the view from up there?
|
How much do these guys earn? I'm wondering because I myself am a bad coder but still I couldn't code as poorly as this. Earning anything more than you would earn at fast food in programming with no knowledge on php boolean doesn't make sense.
|
On September 10 2012 23:42 Djagulingu wrote: How much do these guys earn? I'm wondering because I myself am a bad coder but still I couldn't code as poorly as this. Earning anything more than you would earn at fast food in programming with no knowledge on php boolean doesn't make sense.
Of course i can't give exact numbers but it's far below industry average of anyone coming fresh from university. I earn around 75% of what any programmer fresh from university would earn and i'm the highest paid programmer in the team by quite a big margin.
There are only 2 reasons why people work here: 1. Every other job didn't want them (me) 2. They don't know better
I don't expect them to be great programmers, i can live with ... their 500 line if-elseif-elseif-...-else functions ... the fact that they write every number as "123" (with quotes) ... that they can't differentiate between a file_get_contents on an URL or a file ... their 5000+ line functioncollection files ... the fact that they couldn't debug their way out of a recursion if their life depended on it ... that they repeatedly try to use variables that were never defined ... their complete lack of object-oriented code or even understanding but this example of complete lack of understanding of basic types today just made me facepalm, especially since instead of correcting the mistake they merrily went ahead to make it worse until i stopped them.
Just for the laughs, another example that popped up today while fixing the bugs in the release:
if ((...) && !$_SERVER['SERVER_NAME'] == '....' ) { }
I told them a hundred times "Better to use a few paranthesis too much than have an expression that doesn't do what you think it does".
|
I'm pretty bad at php.
When you define do you have to do something like
if ($product_id == 1) { define('MOBILE_TEMPLATE', FALSE); } else { define('MOBILE_TEMPLATE', TRUE); }
?
edit: yeah that looks right to me. You should tell your friends to get a syntax highlighting text editor. Then they won't define something as a string when they mean to define it as a bool.
Why do you need to use define? Can't you just set a variable to true or false? Or is define just used for case sensitivity?
if (MOBILE_TEMPLATE == 'true') { ... }
Missing a $sign.
|
On September 11 2012 04:26 obesechicken13 wrote:I'm pretty bad at php. When you define do you have to do something like if ($product_id == 1) { define('MOBILE_TEMPLATE', FALSE); } else { define('MOBILE_TEMPLATE', TRUE); }
? edit: yeah that looks right to me. You should tell your friends to get a syntax highlighting text editor. Then they won't define something as a string when they mean to define it as a bool. Why do you need to use define? Can't you just set a variable to true or false? Or is define just used for case sensitivity? if (MOBILE_TEMPLATE == 'true') { ... }
Missing a $sign.
A define is PHPs version of a constant, i.e. a variable that can't be changed once it is set. They don't have a $ in front of their name and it's customary to write them in all caps to differentiate them from PHP keywords.
They are usually used to set configuration values that are required throughout the whole project. In 90% of the cases they are used wrong though, bad programmers abuse them to break encapsulation and have their functions depend on those defines instead of using function parameters, which makes stuff like unit testing almost impossible.
You could use a variable and define it as global everywhere you use them but you can't rely on them keeping the value you expect, other functions might change it.
Also, they are already using a syntax highlighting editor - they are bad programmers, not (completely) stupid - and luckily they are not my friends, i already have enough reasons to hate my life, i don't need such friends.
|
So basically they assigned the text "true" or "false" to a variable and mistook it for the Boolean value true and false, and then they tried to compare the variable with a true false comparison in which case it would always come true since both "true" and "false" where an actually string and therefore it would be true no matter what.
That's brilliant.
|
Hyrule19001 Posts
I prefer to do something like
if ($product_id == 1) { define('USING_MOBILE', 1); }
...
if(defined(USING_MOBILE)) { whatever }
|
Hyrule19001 Posts
On September 10 2012 23:42 Djagulingu wrote: How much do these guys earn? I'm wondering because I myself am a bad coder but still I couldn't code as poorly as this. Earning anything more than you would earn at fast food in programming with no knowledge on php boolean doesn't make sense. Bad coders can be had for about $20/hour in most places....
|
Zurich15315 Posts
On September 10 2012 23:42 Djagulingu wrote: How much do these guys earn? I'm wondering because I myself am a bad coder but still I couldn't code as poorly as this. Earning anything more than you would earn at fast food in programming with no knowledge on php boolean doesn't make sense. Oh don't worry there are very highly paid programmers who do worse things.
I don't find it excusable either, but so many people just don't give enough fucks to actually learn programming before or while they are programming.
|
On September 10 2012 19:01 Morfildur wrote:Now i ordered the two guys responsible to fix that ASAP. They started with changing the code to: if (MOBILE_TEMPLATE == 'true') { ... }
I wanted to punch them sooooo hard. Luckily i'm out of here at the end of the month...
So, not being a programmer myself, why doesn't their solution work ?
|
On September 11 2012 07:10 Geiko wrote:Show nested quote +On September 10 2012 19:01 Morfildur wrote:Now i ordered the two guys responsible to fix that ASAP. They started with changing the code to: if (MOBILE_TEMPLATE == 'true') { ... }
I wanted to punch them sooooo hard. Luckily i'm out of here at the end of the month... So, not being a programmer myself, why doesn't their solution work ? The problem is that they are using string operators when they should be using boolean. It clearly demonstrates that they have no fucking idea of what they are doing.
EDIT; let me clarify.
When you want to actually want to type something, like some sort of output to the user for example you would use a string, like this:
$string =' hello this is a message to the user'; echo $string;
However in this case they are simply to evaluate what path to take in a condition:
IF ($condition==true) {
}
In this case using a string makes no sense and a boolean should be used instead.
|
On September 11 2012 07:10 Geiko wrote:Show nested quote +On September 10 2012 19:01 Morfildur wrote:Now i ordered the two guys responsible to fix that ASAP. They started with changing the code to: if (MOBILE_TEMPLATE == 'true') { ... }
I wanted to punch them sooooo hard. Luckily i'm out of here at the end of the month... So, not being a programmer myself, why doesn't their solution work ? It's still comparing to a string rather than a bool, so that's just bad practice. Not only that, but whatever they want the revised code to do is not what the original code was supposed to do. That's just bad logic.
On September 11 2012 06:32 Morfildur wrote:Show nested quote +On September 11 2012 04:26 obesechicken13 wrote:I'm pretty bad at php. When you define do you have to do something like if ($product_id == 1) { define('MOBILE_TEMPLATE', FALSE); } else { define('MOBILE_TEMPLATE', TRUE); }
? edit: yeah that looks right to me. You should tell your friends to get a syntax highlighting text editor. Then they won't define something as a string when they mean to define it as a bool. Why do you need to use define? Can't you just set a variable to true or false? Or is define just used for case sensitivity? if (MOBILE_TEMPLATE == 'true') { ... }
Missing a $sign. A define is PHPs version of a constant, i.e. a variable that can't be changed once it is set. They don't have a $ in front of their name and it's customary to write them in all caps to differentiate them from PHP keywords. They are usually used to set configuration values that are required throughout the whole project. In 90% of the cases they are used wrong though, bad programmers abuse them to break encapsulation and have their functions depend on those defines instead of using function parameters, which makes stuff like unit testing almost impossible. You could use a variable and define it as global everywhere you use them but you can't rely on them keeping the value you expect, other functions might change it. Also, they are already using a syntax highlighting editor - they are bad programmers, not (completely) stupid - and luckily they are not my friends, i already have enough reasons to hate my life, i don't need such friends. Ah thanks.
|
Zurich15315 Posts
It does work. But instead of fixing the initial mistake they introduced another mistake which kinda masks the initial mistake on the surface. It'll work, it's just ugly and not the way it's supposed to be done.
|
On September 11 2012 07:15 Integra wrote:Show nested quote +On September 11 2012 07:10 Geiko wrote:On September 10 2012 19:01 Morfildur wrote:Now i ordered the two guys responsible to fix that ASAP. They started with changing the code to: if (MOBILE_TEMPLATE == 'true') { ... }
I wanted to punch them sooooo hard. Luckily i'm out of here at the end of the month... So, not being a programmer myself, why doesn't their solution work ? The problem is that they are using string operators when they should be using boolean. It clearly demonstrates that they have no fucking idea of what they are doing. EDIT; let me clarify. When you want to actually want to type something, like some sort of output to the user for example you would use a string, like this: $string =' hello this is a message to the user'; echo $string;
However in this case they are simply to evaluate what path to take in a condition: IF ($condition==true) {
}
In this case using a string makes no sense and a boolean should be used instead.
Ok that's what I thought too.
But after making the mistake to use strings instead of booleans, isn't it faster to fix the bug like they did, rather than change the type of the variable and risk having bugs every other place where the variable was used ?
|
On September 11 2012 07:21 Geiko wrote:Show nested quote +On September 11 2012 07:15 Integra wrote:On September 11 2012 07:10 Geiko wrote:On September 10 2012 19:01 Morfildur wrote:Now i ordered the two guys responsible to fix that ASAP. They started with changing the code to: if (MOBILE_TEMPLATE == 'true') { ... }
I wanted to punch them sooooo hard. Luckily i'm out of here at the end of the month... So, not being a programmer myself, why doesn't their solution work ? The problem is that they are using string operators when they should be using boolean. It clearly demonstrates that they have no fucking idea of what they are doing. EDIT; let me clarify. When you want to actually want to type something, like some sort of output to the user for example you would use a string, like this: $string =' hello this is a message to the user'; echo $string;
However in this case they are simply to evaluate what path to take in a condition: IF ($condition==true) {
}
In this case using a string makes no sense and a boolean should be used instead. Ok that's what I thought too. But after making the mistake to use strings instead of booleans, isn't it faster to fix the bug like they did, rather than change the type of the variable and risk having bugs every other place where the variable was used ? No, not if they used proper OOP encapsulation... which probably is sketchy.... you could do refactoring that comes with any professional editor so it should not be a problem. Also the benefit from keeping the bad code is only short term, the long term effect is that it will cost more time.
There is also a programmers standpoint on this. The code becomes "dumb" and you won't be able to read anything from it. Every time someone uses a string it's understood that its suppose to be used in some sort of output, thus you can predict what the code does, it becomes more easy to read and navigate in it. Once you start mixing it up you don't know wtf people are intending with the codes anymore. it becomes impossible to actually understand it. Never mind even trying to debug or add more code to it later... Further Strings takes more memory and process power to process compared to booleans.
|
I don't think you could get through the first class of any programming major at any school like that... Given that most schools teach the boolean type before strings and that one often needs to use some sort of string library before that kind of code will even compile.
I'm just going to turn a blind eye and pretend that those kinds of coders only exist in web design for now.
|
Hyrule19001 Posts
lol
it's PHP
a variable is any type
you can do
$foo = true; $foo = 12.381; $foo = "bar"; $foo = 4; $foo = array() and get no errors...not even any warnings
|
lol.I've certainly seen stuff like that at my job too. and my first reaction was...oh these guys must be entry level programmers/just getting off the block, and often when you correct them..in a maybe slightly harsh tone they really start to lose their stuff .
|
LOLOLOLOL
I'm in my first month of Comp Sci at school and i understand this...
|
I've been learning PHP over the course of the month and it's entertaining to be able to read the codes and shake my head to this. I can't imagine making such...mistakes.
|
|
On September 11 2012 07:10 Geiko wrote:Show nested quote +On September 10 2012 19:01 Morfildur wrote:Now i ordered the two guys responsible to fix that ASAP. They started with changing the code to: if (MOBILE_TEMPLATE == 'true') { ... }
I wanted to punch them sooooo hard. Luckily i'm out of here at the end of the month... So, not being a programmer myself, why doesn't their solution work ?
Their solution works but next time another programmer works with that and gets told "that constant is always either true or false" he writes "if (MOBILE_TEMPLATE == true)" and wonders why it doesn't work the way he thinks it would.
Yes, changing true to "true" fixes this bug initially but by not fixing the original problem you invite a huge mess of possible future bugs that are hard to trace. Suddenly you never know if anything is true or "true" and the whole code becomes a mess where every time you add or change a line of code you have to triple-check to make sure it actually works.
|
At first I was thinking like "well this happens all the time due to carelessness, it's just funny that they couldn't find it", but then I read the last part and the "solution" and it did make me chuckle.
|
Is entertaining want more. Will give cookie and stars.
|
I have never even studied programming beyond being forced to write stupid bits of excel VBA and making othello and java
And i can still understand this lol
Though i made some waaay more horrible mistakes when i first wrote othello hahahaha
But its mainly because nobody taught me anything so i didn't know where to even start, to get a working piece of logic together was already a miracle for me
|
PHP lol. There used to be a bug in their md5 digest function where when you passed a string and a salt, it just returned the salt.
|
Coming from the Ruby community and seeing many noobs adopting Rails (kinda) successfully, I'd mostly advocate towards using easy to use frameworks that are opinionated enough to force people to not make certain mistakes (avoids mistakes by doing things right instead of letting inexperienced programmers do it).
Such platforms that presents concepts like DRY, convention over configuration and MVC to the newcomer, in a easy way, are doing a great job educating while being useful. Even following tutorials that do not explain shit about what's going on already does good by practicing those concepts blindly.
Another point is to use languages/frameworks that does most things for the user. Less code from inexperienced people equals less bugs.
For PHP frameworks, anything between CakePHP, CodeIgniter and Symphony are good choices (refer to http://www.phpframeworks.com and http://en.wikipedia.org/wiki/Comparison_of_web_application_frameworks for more tho)
Edit: All that said, I understand that the majority of times you don't have the choice to either adopt or not certain technologies (boss won't let, project already started, etc). But you can always try to make it happen next time (and there's always a next time).
|
On September 12 2012 04:05 13k wrote:Coming from the Ruby community and seeing many noobs adopting Rails (kinda) successfully, I'd mostly advocate towards using easy to use frameworks that are opinionated enough to force people to not make certain mistakes (avoids mistakes by doing things right instead of letting inexperienced programmers do it). Such platforms that presents concepts like DRY, convention over configuration and MVC to the newcomer, in a easy way, are doing a great job educating while being useful. Even following tutorials that do not explain shit about what's going on already does good by practicing those concepts blindly. Another point is to use languages/frameworks that does most things for the user. Less code from inexperienced people equals less bugs. For PHP frameworks, anything between CakePHP, CodeIgniter and Symphony are good choices (refer to http://www.phpframeworks.com and http://en.wikipedia.org/wiki/Comparison_of_web_application_frameworks for more tho)
Well, 6 month ago there were talks about our company using a framework for future projects. Sadly, the head of the department doesn't trust frameworks "because they might have bugs that could be used by hackers" so we still haven't adapted any.
No, i'm not kidding.
|
You should write a letter about everything you think about the place and the people and tape it to your boss' door when you leave.
|
On September 12 2012 04:22 Morfildur wrote:
Well, 6 month ago there were talks about our company using a framework for future projects. Sadly, the head of the department doesn't trust frameworks "because they might have bugs that could be used by hackers" so we still haven't adapted any.
No, i'm not kidding.
oh man... that's so sad in so many levels. employing cheap developers that don't understand boolean logic or operator precedence, for example, is so, so much more dangerous... it's also costs so much more, given that you'll inevitably end up in the dreaded 20% feature / 80% bugfix cycle...
it would make sense if they are talking about paying thousands for licenses, but there are so many professional quality open source / free frameworks out there.
it really surprises me tho, that companies still don't use everything they can to ship as fast and as cheaply as possible... I sometimes thought companies were certainly profiting from open source frameworks and still not "paying back" anything in the form of contribution or sponsoring, etc... I guess I was wrong
|
Zurich15315 Posts
Frameworks are not the solution to shitty programmers though. The same guys will also implement the framework - and do just as much wrong as if they would code stuff themselves.
In the end, you just need able programmers, whether you code from scratch or implement based on a framework.
|
On September 12 2012 19:32 13k wrote:Show nested quote +On September 12 2012 04:22 Morfildur wrote:
Well, 6 month ago there were talks about our company using a framework for future projects. Sadly, the head of the department doesn't trust frameworks "because they might have bugs that could be used by hackers" so we still haven't adapted any.
No, i'm not kidding.
oh man... that's so sad in so many levels. employing cheap developers that don't understand boolean logic or operator precedence, for example, is so, so much more dangerous... it's also costs so much more, given that you'll inevitably end up in the dreaded 20% feature / 80% bugfix cycle... it would make sense if they are talking about paying thousands for licenses, but there are so many professional quality open source / free frameworks out there. it really surprises me tho, that companies still don't use everything they can to ship as fast and as cheaply as possible... I sometimes thought companies were certainly profiting from open source frameworks and still not "paying back" anything in the form of contribution or sponsoring, etc... I guess I was wrong Can you type out that last paragraph again? I don't understand what you said.
|
|
On September 13 2012 00:55 Inori wrote:Show nested quote +On September 12 2012 22:15 zatic wrote: Frameworks are not the solution to shitty programmers though. The same guys will also implement the framework - and do just as much wrong as if they would code stuff themselves.
In the end, you just need able programmers, whether you code from scratch or implement based on a framework. But they do teach best practices to those that are open to learning. And worst case scenario with a framework you get semi-working semi-hackish code that at least on some levels is secure and bug-free as opposed to one big security hole, filled with spaghetti code hell that some newbie developers produce. Some of the vulnerabilities in frameworks become well known whereas with self built code, you don't exactly know the vulnerabilities are. I'm mostly thinking of joomla as a cms because it's written as a framework, and yet it has addons that are vulnerabilities.
I think it's like how people build viruses for Windows.
Frameworks provide a lot of code that you don't have to write though and there are often addons or tutorials to do things in frameworks that are more standardized than starting from scratch. Do you ever find that frameworks are like black boxes though?
|
Zurich15315 Posts
Yeah exactly, there is no security benefit from having stupid people using frameworks over stupid people writing their own code.
You'll have few well published vulnerabilities that won't get fixed over many unpublished vulnerabilities that won't get fixed. Pick your poison.
|
|
I had some guys in school too. That wrote if(booleanvariable == true). That fucking makes me cringe. How the fuck can you mess up basic variables? I mean, they're basically the same ones for every language.
btw I'm in my second year of school. So if these guys finished their education they should know this kind of basic shit.
|
I sometimes make mistakes like this due to weak fundamentals :/
But I can't understand why a debug step through won't catch errors like that. If you follow the code path, it's pretty hard to miss when you are inside a block when you shouldn't be.
|
On September 13 2012 18:12 Inori wrote:Show nested quote +On September 13 2012 04:42 obesechicken13 wrote:On September 13 2012 00:55 Inori wrote:On September 12 2012 22:15 zatic wrote: Frameworks are not the solution to shitty programmers though. The same guys will also implement the framework - and do just as much wrong as if they would code stuff themselves.
In the end, you just need able programmers, whether you code from scratch or implement based on a framework. But they do teach best practices to those that are open to learning. And worst case scenario with a framework you get semi-working semi-hackish code that at least on some levels is secure and bug-free as opposed to one big security hole, filled with spaghetti code hell that some newbie developers produce. Some of the vulnerabilities in frameworks become well known whereas with self built code, you don't exactly know the vulnerabilities are. I'm mostly thinking of joomla as a cms because it's written as a framework, and yet it has addons that are vulnerabilities. I think it's like how people build viruses for Windows. Frameworks provide a lot of code that you don't have to write though and there are often addons or tutorials to do things in frameworks that are more standardized than starting from scratch. Do you ever find that frameworks are like black boxes though? Joomla is not a framework, Joomla is a Content Management System. CMS is a finished product that is limited in extensibility. Framework is a set of libraries you program the finished product on top of, nearly unlimited extensibility. You can write sites like google.com, youtube.com, facebook.com with a framework. You can't with a CMS. CMS: Joomla, Wordpress, Drupal Framework: Symfony2, ZF2, Laravel Apples and oranges. I'm aware that it's not a framework but since it uses a model view control and has default directories and table structrres as well as names, I figure it'd be easier to at least know what's on the backend. So I think joomla as well as all cms, use a framework.
I'm not completely sure if CMS have anything like plugins or addons, but if they do then that's a security vulnerability through commonly used 3rd party code.
I've only dabbled a bit with rails and cakephp and by a bit I mean very little so may be wrong.
|
|
Zurich15315 Posts
On September 13 2012 18:12 Inori wrote:Show nested quote +On September 13 2012 07:10 zatic wrote: Yeah exactly, there is no security benefit from having stupid people using frameworks over stupid people writing their own code.
You'll have few well published vulnerabilities that won't get fixed over many unpublished vulnerabilities that won't get fixed. Pick your poison. No security benefit? Can't speak for all frameworks, but Symfony2 is secure from XSS, CSRF and SQL injection - 3 most common vulnerabilities, out of the box. By design it forces on a developer security best practices like not storing plaintext passwords, not outputting errors to users, hiding filesystem layout. No offense, but claiming that there's no benefit to framework compared to own code on any level (and especially on security), even more so to a newbie developer, just means that you didn't look well enough into frameworks. I recommend you do, they're awesome. I have looked into Symfony2 extensively actually. I like it a lot.
What I am saying is that any frame work can have vulnerabilities (and, stupid people are VERY creative in still doing stupid shit no matter what a frame work teaches them). And once they are published, there are immediately (possibly automated) exploits for them. The same stupid programmers that make stupid code will download their framework exactly once and never update it ever again. So, few published vulerabilities versus many unpublished ones.
It doesn't really matter if they mess up their own shitty code, or other people's code. In the end the stupid people are the problem.
|
|
On September 13 2012 22:56 Inori wrote:Show nested quote +On September 13 2012 22:32 obesechicken13 wrote:On September 13 2012 18:12 Inori wrote:On September 13 2012 04:42 obesechicken13 wrote:On September 13 2012 00:55 Inori wrote:On September 12 2012 22:15 zatic wrote: Frameworks are not the solution to shitty programmers though. The same guys will also implement the framework - and do just as much wrong as if they would code stuff themselves.
In the end, you just need able programmers, whether you code from scratch or implement based on a framework. But they do teach best practices to those that are open to learning. And worst case scenario with a framework you get semi-working semi-hackish code that at least on some levels is secure and bug-free as opposed to one big security hole, filled with spaghetti code hell that some newbie developers produce. Some of the vulnerabilities in frameworks become well known whereas with self built code, you don't exactly know the vulnerabilities are. I'm mostly thinking of joomla as a cms because it's written as a framework, and yet it has addons that are vulnerabilities. I think it's like how people build viruses for Windows. Frameworks provide a lot of code that you don't have to write though and there are often addons or tutorials to do things in frameworks that are more standardized than starting from scratch. Do you ever find that frameworks are like black boxes though? Joomla is not a framework, Joomla is a Content Management System. CMS is a finished product that is limited in extensibility. Framework is a set of libraries you program the finished product on top of, nearly unlimited extensibility. You can write sites like google.com, youtube.com, facebook.com with a framework. You can't with a CMS. CMS: Joomla, Wordpress, Drupal Framework: Symfony2, ZF2, Laravel Apples and oranges. I'm aware that it's not a framework but since it uses a model view control and has default directories and table structrres as well as names, I figure it'd be easier to at least know what's on the backend. So I think joomla as well as all cms, use a framework. Literally LOL, that's the funniest thing I've heard in awhile. Joomla follows MVC? You can not be more wrong :D Joomla has one of the worst code quality out of open-source solutions I know. There's a reason why Joomla and Wordpress are often used by fanboys from other languages as an example on why they think PHP sucks and PHP developers are amateurs. Can you elaborate? They don't follow MVC?
Sorry for the derail btw.
|
|
I just stumbled over this function:
function dont_return_80($var) { return ($var != '80')?true:false; }
I don't know what it's for, i actually don't even want to know, but i somehow find it funny...
|
TLADT24920 Posts
On September 20 2012 15:34 Morfildur wrote:I just stumbled over this function: function dont_return_80($var) { return ($var != '80')?true:false; }
I don't know what it's for, i actually don't even want to know, but i somehow find it funny... Guessing it checks for a value of 80 and returns false if the variable var is 80? At least, that's what it looks like it does lol. I dunno what the program is about but I'm guessing there must be some input from the user and maybe some calculation? I'm totally guessing here lol.
|
On September 20 2012 15:47 BigFan wrote:Show nested quote +On September 20 2012 15:34 Morfildur wrote:I just stumbled over this function: function dont_return_80($var) { return ($var != '80')?true:false; }
I don't know what it's for, i actually don't even want to know, but i somehow find it funny... Guessing it checks for a value of 80 and returns false if the variable var is 80? At least, that's what it looks like it does lol. I dunno what the program is about but I'm guessing there must be some input from the user and maybe some calculation? I'm totally guessing here lol. Doesn't it return true if it isn't 80?
Could just be a test function in production. Like you want to try something out but you don't know if it'll work right.
|
On September 20 2012 15:47 BigFan wrote:Show nested quote +On September 20 2012 15:34 Morfildur wrote:I just stumbled over this function: function dont_return_80($var) { return ($var != '80')?true:false; }
I don't know what it's for, i actually don't even want to know, but i somehow find it funny... Guessing it checks for a value of 80 and returns false if the variable var is 80? At least, that's what it looks like it does lol. I dunno what the program is about but I'm guessing there must be some input from the user and maybe some calculation? I'm totally guessing here lol.
No he checks if $var contains the string 80.... then it returns either true or false.
I don't actually know PHP, but I think you shouldn't add ' ' signs to variables if you want to store numbers in them rofl.
And even then, a fucking function to check if a variable is 80 is stupid too, because you can just do $var != 80 and it will do EXACTLY the same as this, without using a function.
|
TLADT24920 Posts
^ I don't remember much from php so I just guessed that the variable is a number.
On September 20 2012 23:38 obesechicken13 wrote:Show nested quote +On September 20 2012 15:47 BigFan wrote:On September 20 2012 15:34 Morfildur wrote:I just stumbled over this function: function dont_return_80($var) { return ($var != '80')?true:false; }
I don't know what it's for, i actually don't even want to know, but i somehow find it funny... Guessing it checks for a value of 80 and returns false if the variable var is 80? At least, that's what it looks like it does lol. I dunno what the program is about but I'm guessing there must be some input from the user and maybe some calculation? I'm totally guessing here lol. Doesn't it return true if it isn't 80? Could just be a test function in production. Like you want to try something out but you don't know if it'll work right. Isn't that the same as what I wrote? lol.
|
On September 21 2012 10:16 BigFan wrote: ^ I don't remember much from php so I just guessed that the variable is a number.
Isn't that the same as what I wrote? lol.
On September 20 2012 23:38 obesechicken13 wrote:Show nested quote +On September 20 2012 15:47 BigFan wrote:On September 20 2012 15:34 Morfildur wrote:I just stumbled over this function: function dont_return_80($var) { return ($var != '80')?true:false; }
I don't know what it's for, i actually don't even want to know, but i somehow find it funny... Guessing it checks for a value of 80 and returns false if the variable var is 80? At least, that's what it looks like it does lol. I dunno what the program is about but I'm guessing there must be some input from the user and maybe some calculation? I'm totally guessing here lol. Doesn't it return true if it isn't 80? Could just be a test function in production. Like you want to try something out but you don't know if it'll work right.
|
Not a programmer or have any experience with PHP but did a bit of basic Java coding, are they trying to use a string to represent a boolean operator?
|
|
|
|