| 00:21.54 | *** join/#bzflag Scrumpy (~Scrumpy@smurfnet.xs4all.nl) |
| 00:30.31 | *** join/#bzflag r2e (~r2e@ool-44c7b275.dyn.optonline.net) |
| 00:57.09 | *** join/#bzflag Scrumpy_ (~Scrumpy@smurfnet.xs4all.nl) |
| 01:01.33 | *** join/#bzflag xaver__ (~xaver@pD9ED3238.dip.t-dialin.net) |
| 01:03.58 | *** join/#bzflag Scrumpy (~Scrumpy@smurfnet.xs4all.nl) |
| 01:10.13 | *** join/#bzflag spldart (~spldart2@bzflag/contributor/spldart) |
| 01:10.14 | *** mode/#bzflag [+v spldart] by ChanServ |
| 01:19.40 | *** join/#bzflag llrr (~llrr@219-90-235-113.ip.adam.com.au) |
| 01:52.19 | *** join/#bzflag Upsetter (~Ups@89.246.186.72) |
| 01:53.53 | *** part/#bzflag Upsetter (~Ups@89.246.186.72) |
| 01:59.04 | *** join/#bzflag xwissen (~xaver@pD9ED38EB.dip.t-dialin.net) |
| 02:23.57 | *** join/#bzflag mrapplecomputer1 (~mrappleco@bzflag/player/MrAppleComputer) |
| 02:57.31 | *** join/#bzflag McSpider (~McSpider@xplr-ts-v10-208-114-184-180.barrettxplore.com) |
| 03:16.30 | *** join/#bzflag AAA_awright_ (~a3@ip24-251-157-63.ph.ph.cox.net) |
| 03:16.34 | *** join/#bzflag Think_Differentl (~js@bzflag/player/ThinkDifferent) |
| 03:18.49 | *** join/#bzflag chaoscon (jeremy@smartserv/ceo/chaoscon) |
| 03:28.12 | *** join/#bzflag AAA_awright (~a3@ip24-251-157-63.ph.ph.cox.net) |
| 03:39.10 | *** join/#bzflag Kutakizukari (~Kutakizuk@207-255-185-183-dhcp.gsv.md.atlanticbb.net) |
| 04:10.25 | *** join/#bzflag Kutakizukari (~Kutakizuk@207-255-185-183-dhcp.gsv.md.atlanticbb.net) |
| 04:37.00 | *** join/#bzflag TD-Linux (~wheeeeeee@97-86-227-194.dhcp.roch.mn.charter.com) |
| 04:37.00 | *** join/#bzflag TD-Linux (~wheeeeeee@about/essy/indecisive/TD-Linux) |
| 05:37.17 | *** join/#bzflag Yassen (~Yassen@unaffiliated/yassen) |
| 05:38.32 | *** join/#bzflag Yassen (~Yassen@unaffiliated/yassen) |
| 05:41.27 | *** join/#bzflag Bambino (~Bambino@S0106002191dd19a8.gv.shawcable.net) |
| 06:02.19 | *** join/#bzflag temporalD (~ATD@bzflag/serverop/TemporalDistraction) |
| 06:03.42 | *** join/#bzflag Bambino (~Bambino@unaffiliated/sniper15) |
| 06:22.41 | *** join/#bzflag Scrumpy (~Scrumpy@smurfnet.xs4all.nl) |
| 07:21.59 | *** join/#bzflag Marzipan- (~Marzipan@p5B226348.dip.t-dialin.net) |
| 07:23.19 | *** join/#bzflag Marzipan (~Marzipan@bzflag/player/Marzipan) |
| 07:55.00 | *** join/#bzflag Kutakizukari (~Kutakizuk@207-255-185-183-dhcp.gsv.md.atlanticbb.net) |
| 08:02.30 | *** join/#bzflag Upsetter (~Ups@89.246.186.72) |
| 08:13.06 | *** join/#bzflag McYukon (~McYukon@xplr-ts-v10-208-114-184-180.barrettxplore.com) |
| 08:15.03 | *** join/#bzflag jomojo (~jomojo@cpe-76-184-20-22.tx.res.rr.com) |
| 08:29.26 | *** join/#bzflag Pimpinella (~frank@gondolin.pimpi.org) |
| 09:35.00 | *** join/#bzflag Tupone (~Tupone@gentoo/developer/tupone) |
| 09:35.00 | *** mode/#bzflag [+v Tupone] by ChanServ |
| 09:42.21 | *** join/#bzflag bier|tp (~bier@pD9E2D4AA.dip.t-dialin.net) |
| 09:42.58 | *** join/#bzflag Gurpartap (~Gurpartap@unaffiliated/gurpartap) |
| 09:43.07 | Gurpartap | How to set a custom map in bzfs? |
| 10:05.56 | *** join/#bzflag Dontkillme (~chatzilla@frnk-5f74220e.pool.mediaWays.net) |
| 10:15.11 | a_meteorite | Gurpartap: add the argument -world path/to/map.bzw |
| 10:15.50 | Gurpartap | yeah learnt |
| 10:15.54 | Gurpartap | thanks a_meteorite :) |
| 10:19.03 | *** part/#bzflag Gurpartap (~Gurpartap@unaffiliated/gurpartap) |
| 11:13.49 | *** join/#bzflag xaver (~xaver@pD9ED38EB.dip.t-dialin.net) |
| 12:31.45 | *** join/#bzflag Dontkillme (~chatzilla@frnk-5f74220e.pool.mediaWays.net) |
| 13:24.15 | *** join/#bzflag Dontkillme (~chatzilla@frnk-5f74220e.pool.mediaWays.net) |
| 15:21.19 | *** join/#bzflag Scrumpy (~Scrumpy@smurfnet.xs4all.nl) |
| 15:53.53 | *** join/#bzflag Scrumpy (~Scrumpy@smurfnet.xs4all.nl) |
| 15:55.46 | *** join/#bzflag Dontkillme (~chatzilla@frnk-5f74220e.pool.mediaWays.net) |
| 16:34.47 | *** join/#bzflag bryjen (~bryjen@cpe-75-81-201-131.we.res.rr.com) |
| 16:34.47 | *** mode/#bzflag [+v bryjen] by ChanServ |
| 16:37.27 | *** join/#bzflag goingberserk (~abc@pD9E875CB.dip.t-dialin.net) |
| 16:51.04 | *** join/#bzflag goingberserk (~abc@pD9E875CB.dip.t-dialin.net) |
| 17:00.28 | *** join/#bzflag mrapplecomputer1 (~mrappleco@bzflag/player/MrAppleComputer) |
| 17:00.39 | mrapplecomputer1 | blast007: >:( |
| 17:07.47 | *** join/#bzflag JeffM2501 (~JeffM@bzflag/projectadmin/JeffM) |
| 17:07.48 | *** mode/#bzflag [+o JeffM2501] by ChanServ |
| 17:22.26 | *** join/#bzflag me1 (~ausom@bzflag/player/Me1) |
| 17:29.58 | *** join/#bzflag Dontkillme (~chatzilla@frnk-5f74220e.pool.mediaWays.net) |
| 17:31.31 | *** join/#bzflag Yassen (~Yassen@unaffiliated/yassen) |
| 17:39.57 | *** join/#bzflag QuantumTim (~tim@62.249.230.206) |
| 17:52.36 | *** join/#bzflag jcp (~jw@bzflag/contributor/javawizard2539) |
| 18:17.41 | *** join/#bzflag xaver (~xaver@pD9ED38EB.dip.t-dialin.net) |
| 18:18.29 | *** join/#bzflag xaver__ (~xaver@pD9ED38EB.dip.t-dialin.net) |
| 18:52.42 | *** join/#bzflag Runic (~Runic@23.96.207.68.cfl.res.rr.com) |
| 19:02.39 | *** join/#bzflag jomojo (~jomojo@cpe-76-184-20-22.tx.res.rr.com) |
| 19:12.45 | JeffM2501 | wonders where oh where the brlcad has gone, where oh where could he be. |
| 19:23.38 | *** join/#bzflag Scrumpy (~Scrumpy@smurfnet.xs4all.nl) |
| 19:32.17 | *** part/#bzflag Upsetter (~Ups@89.246.186.72) |
| 19:44.20 | *** join/#bzflag McSpider (~McSpider@xplr-ts-v10-208-114-184-180.barrettxplore.com) |
| 19:50.24 | JeffM2501 | mrapplecomputer1, you need more tacos ;) |
| 19:50.34 | mrapplecomputer1 | haha |
| 19:50.38 | blast007 | ;D |
| 19:50.49 | JeffM2501 | want a friendly sugestion? |
| 19:50.55 | mrapplecomputer1 | hm maybe |
| 19:51.08 | mrapplecomputer1 | sure *winces* |
| 19:51.10 | JeffM2501 | don't accept a config file directly, make a form for them to set options |
| 19:51.16 | JeffM2501 | then you can be sure what's in it |
| 19:51.25 | mrapplecomputer1 | i did that last time |
| 19:51.49 | JeffM2501 | you'll still have to filter maps, but you can just ignore the options block |
| 19:51.53 | JeffM2501 | and that's safe and easy |
| 19:51.58 | mrapplecomputer1 | ok |
| 19:52.09 | JeffM2501 | well your old system had the php pass paramaters directly from the php to the bzfs exe |
| 19:52.09 | blast007 | mrapplecomputer1: basically, don't trust ANY input you get ;) |
| 19:52.16 | mrapplecomputer1 | heh |
| 19:52.18 | JeffM2501 | you want to insulate the executable as much as possible |
| 19:52.20 | JeffM2501 | yeah its' true |
| 19:52.24 | mrapplecomputer1 | or i could just filter out the conf |
| 19:52.29 | JeffM2501 | one truth of network secure is NEVER trust a client |
| 19:52.37 | blast007 | cuz even if you have a form, someone could still inject other stuff after another value |
| 19:52.38 | mrapplecomputer1 | the only thing that bothers me is -reportpipe and -dddd |
| 19:52.43 | JeffM2501 | mrapplecomputer1, you could, but that's a lot harder, and if we add somethign you have to fix your filter every time |
| 19:52.44 | blast007 | like, say you have a box for maximum shots |
| 19:52.55 | blast007 | someone could put the number, and then also a report pipe :) |
| 19:53.06 | mrapplecomputer1 | so i have to filter either way |
| 19:53.06 | JeffM2501 | yeah it's tricky |
| 19:53.15 | mrapplecomputer1 | so ill just use a conf and filter it all at once ;D |
| 19:53.17 | JeffM2501 | filtering a file is harder then verifying input |
| 19:53.19 | JeffM2501 | isNumber |
| 19:53.33 | JeffM2501 | ok, I'm sure you are supersmart and know everything ;) |
| 19:53.37 | mrapplecomputer1 | :P |
| 19:53.47 | mrapplecomputer1 | thats exactly what i did for my old one |
| 19:53.56 | blast007 | yeah, which is why he's still using magic_quotes_gpc! (or did you turn that off now?) |
| 19:54.03 | mrapplecomputer1 | i turned it off :P |
| 19:54.06 | JeffM2501 | then what you changed to secure it may not have been the right thing ;) |
| 19:54.07 | blast007 | :) |
| 19:54.19 | JeffM2501 | have you layed out your design and walked it for holes? |
| 19:54.25 | JeffM2501 | or do you just bust out code? |
| 19:54.30 | mrapplecomputer1 | blast did ^^ |
| 19:54.36 | mrapplecomputer1 | i actually thought about all the possible holes |
| 19:54.46 | mrapplecomputer1 | fixed most of them, except -reportpipe, forgot about that one |
| 19:54.50 | JeffM2501 | no blast checked your code, not your design |
| 19:54.58 | JeffM2501 | the design usualy happens BEFORE you code |
| 19:55.03 | mrapplecomputer1 | oh yah i did |
| 19:55.06 | blast007 | I didn't even check his code. I just poked at his site. :P |
| 19:55.11 | blast007 | imagine if I had the code too |
| 19:55.20 | mrapplecomputer1 | my first web project was just an experminent |
| 19:55.24 | JeffM2501 | well good luck on your robust filter |
| 19:55.27 | mrapplecomputer1 | this time i know exactly what im doing :D |
| 19:55.34 | mrapplecomputer1 | blast007, wanna look at the code? |
| 19:55.41 | JeffM2501 | exactly? |
| 19:55.43 | blast007 | not really |
| 19:55.53 | JeffM2501 | don't be so hasty to say you know everything |
| 19:56.09 | JeffM2501 | the wisest man is the one who knows that he does not know everything |
| 19:56.30 | mrapplecomputer1 | i know, sorta what im doing :) |
| 19:56.48 | blast007 | mrapplecomputer1: even *I* have to think carefully when implementing security in something like what you are doing :P |
| 19:56.49 | JeffM2501 | you have an idea and are testing it is more accurate |
| 19:57.05 | mrapplecomputer1 | ok |
| 19:57.11 | mrapplecomputer1 | well ill keep working on it, thanks guys |
| 19:57.22 | JeffM2501 | you may want to lay out a deisgn doc that goes over the entire project, and have that reviewed first |
| 19:57.26 | blast007 | my pleasure! |
| 19:57.27 | JeffM2501 | before you go on to code |
| 19:57.47 | JeffM2501 | bets blast007 can't haxor his php :) |
| 19:58.19 | blast007 | 'his' being..? yours? |
| 19:58.27 | JeffM2501 | yeah mine |
| 19:58.40 | JeffM2501 | it's awesomely complex :) https://secure.opencombat.net/authserver.php |
| 19:58.48 | blast007 | well, yeah, doubt you have any exec() calls in there :P |
| 19:58.54 | JeffM2501 | yeah |
| 19:59.02 | JeffM2501 | they don't even return html pages |
| 19:59.14 | blast007 | heh, "no" |
| 19:59.30 | blast007 | yeah, not much to work with there ;D |
| 19:59.33 | JeffM2501 | it only accepts some very specific things |
| 19:59.40 | JeffM2501 | tho that is the registration interface |
| 19:59.59 | mrapplecomputer1 | https://secure.opencombat.net/ *waves* |
| 20:00.23 | JeffM2501 | I did get the patcher system working last night, http://www.opencombat.net/updates/client/version.txt |
| 20:00.28 | blast007 | do I get a prize if I get a taco on the homepage? |
| 20:00.48 | JeffM2501 | oh I'm SURE you could get a taco on www.opencombat.net |
| 20:00.52 | JeffM2501 | that's friggin wordpress |
| 20:00.59 | blast007 | heh |
| 20:01.24 | JeffM2501 | I thought about drupal but it's odd |
| 20:01.37 | JeffM2501 | oh, I did look at buddypress for the bzflag social site |
| 20:01.39 | JeffM2501 | it may work |
| 20:01.46 | JeffM2501 | but it does odd things with the domain names |
| 20:02.12 | JeffM2501 | everyone would get NAME.social.bzflag.org as a blog |
| 20:02.33 | blast007 | could almost have a different domain for the social site |
| 20:02.36 | JeffM2501 | yeah |
| 20:02.52 | JeffM2501 | cus I worry about people uploading images then being able to use them |
| 20:03.05 | blast007 | true |
| 20:03.15 | JeffM2501 | if Tim could split .org and .net it'd be fine |
| 20:03.52 | blast007 | well, still be nice to have it on a different domain, instead of people having to remember it's on bzflag.NET instead of .ORG |
| 20:04.05 | JeffM2501 | yeah |
| 20:04.16 | JeffM2501 | bzflagdrama.org |
| 20:04.41 | blast007 | hehe |
| 20:06.07 | JeffM2501 | the elgg thing isn't too bad, it's just a little confusing |
| 20:07.59 | *** join/#bzflag trepan (~trepan@blk-30-139-102.eastlink.ca) |
| 20:07.59 | *** join/#bzflag trepan (~trepan@unaffiliated/trepan) |
| 20:07.59 | *** mode/#bzflag [+v trepan] by ChanServ |
| 20:18.04 | *** join/#bzflag goingberserk (~abc@pD9E875CB.dip.t-dialin.net) |
| 20:26.17 | *** join/#bzflag R0b0t1 (~Enigma@unaffiliated/r0b0t1) |
| 21:49.53 | *** join/#bzflag JeffM2501 (~JeffM@bzflag/projectadmin/JeffM) |
| 21:49.54 | *** mode/#bzflag [+o JeffM2501] by ChanServ |
| 22:02.35 | *** join/#bzflag Think_Differentl (~js@bzflag/player/ThinkDifferent) |
| 22:20.19 | *** join/#bzflag McSpider (~McSpider@xplr-ts-v10-208-114-184-180.barrettxplore.com) |
| 22:23.46 | *** join/#bzflag McSpider (~McSpider@xplr-ts-v10-208-114-184-180.barrettxplore.com) |
| 22:29.38 | *** join/#bzflag goingberserk (~abc@pD9E875CB.dip.t-dialin.net) |
| 22:42.37 | *** join/#bzflag McSpider (~McSpider@xplr-ts-v10-208-114-184-180.barrettxplore.com) |
| 22:43.20 | *** join/#bzflag Kutakizukari (~Kutakizuk@207-255-185-183-dhcp.gsv.md.atlanticbb.net) |
| 22:56.01 | *** join/#bzflag goingberserk (~abc@pD9E83F7B.dip.t-dialin.net) |
| 23:00.21 | *** join/#bzflag McSpider (~McSpider@xplr-ts-v10-208-114-184-180.barrettxplore.com) |
| 23:16.27 | *** join/#bzflag temporalD (~ATD@bzflag/serverop/TemporalDistraction) |
| 23:23.14 | *** join/#bzflag ykman (~none@adsl-99-21-136-27.dsl.hstntx.sbcglobal.net) |
| 23:23.48 | *** join/#bzflag McSpider (~McSpider@xplr-ts-v10-208-114-184-180.barrettxplore.com) |
| 23:24.44 | *** join/#bzflag yosefk (~none@unaffiliated/yosefk) |
| 23:37.09 | *** join/#bzflag McSpider (~McSpider@xplr-ts-v10-208-114-184-180.barrettxplore.com) |