Lars Olav Torvik’s blog

16 Responses to “regex 0.9.4”

1. Thor Says:
   April 13th, 2008 at 22:02:04

   Heisann. å takk for hjelpen sist på diskusjon.no….
   Har det vært mulig å lagt til en knapp som escaper tekst(spesielt for pattern feltet).
   Det hadde mest sannsynlig spart litt tid.

2. Lars Olav Torvik Says:
   April 13th, 2008 at 22:20:04

   Hei Thor.
   Godt forslag. Jeg skal ta det til vurdering til neste runde med oppdateringer av verktøyet. Må vurdere litt hvordan dette eventuelt skal implementeres på de forskjellige språkene.

   Kom gjerne med flere forslag til forbedringer!

3. Thor Says:
   April 21st, 2008 at 18:55:04

   Høres bra ut
   Litt stopp i utviklingen hos meg foreløbig, da jeg har en dagsjobb i tillegg til webkoding-hobby… men skal si fra hvis jeg finner på noen andre lure forslag

4. Lars Olav Torvik Says:
   April 23rd, 2008 at 11:56:04

   Kjenner til det at programmering på fritiden går veldig ofte i rykk og napp etter hvor mye tid og motivasjon man har. Jeg vet i hvertfall det er slik for meg

   Tenkte litt på den ideen din men tror ikke det vil gå ann å implementere den fornuftig fordi umulig å vite når man skal escape og når man faktisk skal bruke spesial tegnet.

5. Thor Says:
   April 23rd, 2008 at 21:55:04

   ja skjønner.
   det var derfor jeg tenkte på en knapp dedikert til escaping. denne knappen gir brukeren en prompt der man kan skrive tekst og deretter plasseres teksten inn i pattern feltet det var noe veldig enkelt jeg så for meg, fordi det er kun når man først går i gang å lager pattern at det trengs en hurtig escaping.

6. Volcane Says:
   April 29th, 2008 at 12:47:04

   May I suggest you take this application down immediately and address the glaring security holes that is exposing your whole server’s contents to the world. I won’t mention details here but I am sure you can figure it out.

7. Lars Olav Torvik Says:
   April 29th, 2008 at 13:03:04

   Thanks for your comment. I have installed a patch that hopefully solves this problem

8. Volcane Says:
   April 29th, 2008 at 14:06:04

   Have another go, its still VERY trivial.

9. Mark Says:
   April 29th, 2008 at 14:10:04

   Yep, in firebug:

   document.getElementById(’pcre_modifiers_multiline’).value = ‘e’;

   Enable multiline mode and hack away! Filter your modifiers server-side and prevent it from happening at all.

10. Mark Says:
    April 29th, 2008 at 14:49:04

    (Still, nice little tool though, for people who can’t yet process regex in their heads

11. Lars Olav Torvik Says:
    April 29th, 2008 at 15:26:04

    It seems I’m a bit naive when it comes to security. Not used to create applications like this. Usally just regular registrations forms etc that I need to make secure from injection attacks etc. I just created a tool I would like to use my self and decided to share

    Mark: Thanks for the tips about the modifiers. The modifiers should now be filtered on the server.

    Volcane: I have done some other small modifications now but not sure if I have catched the security breach you saw or if it is the same as Mark commented. I would apreaciate it if you could send me a mail at meAlfaLarsolavtorvik.com with a concrete example I can test with.

    Atleast my app is getting some testing

12. Lars Olav Torvik Says:
    April 29th, 2008 at 15:36:04

    Oh another small comment for Mark. There actually are a couple of people who can’t proccess regex in their heads

13. Volcane Says:
    April 29th, 2008 at 16:03:04

    Thanks Lars, I think you’re app is great I have used several and reviewed several and once yours is sorted I think it will become my regex tester of choice, keep it up

    The basic rule is never rely on the client for input testing always do it server side and try to think out the box in terms of how people will use your app, def add some logging to see exactly what people are putting into your form so you can see what is being tried etc

14. Mark Says:
    April 29th, 2008 at 16:25:04

    Yes, watching the logs will be fun

15. Successful Says:
    February 14th, 2010 at 22:37:02

    Thanks admin this is web sites very nice .

16. Edwardo Koegel Says:
    August 31st, 2010 at 01:35:08

    Sick of obtaining low amounts of useless traffic for your website? Well i wish to inform you of a new underground tactic that produces me personally $900 each day on 100% AUTOPILOT. I possibly could be here all day and going into detail but why dont you just check their site out? There is really a great video that explains everything. So if your serious about producing hassle-free cash this is the website for you. Auto Traffic Avalanche

Leave a Reply

Name (required)

Mail (will not be published) (required)

Website

For spam filtering purposes, please copy the number 1578 to the field below: