One of my Twitter friends is in the running for Miss High Times, and thanks to Twitter (and her great looks) she’s at 7th place.

She needs your votes! Head over to MissHighTimes.com and rate all of her pictures with a 10 (especially this one)

While you’re at it, follow her on twitter, too.

(Oh and vote for her friend CoralReefer too! (@CoralFish)

Revision3 has launched a new show called ROFL that seems to be a partnership with Rooftop Comedy

Oh, and Revision3’s video embed pane is great!

One of the weirdest situations I’ve been in happened about 9 months ago. A friend of mine, Jeremy “Saint” Jackson, and I scraped some change together and went to a nearby gas station to gas up. The plan was to somehow find some weed and just kill some time. We had just finished pumping gas when a clearly drunk man covered in mud approached us. He was holding a towel against a cut on his arm, which was bleeding fairly profusely.

The man asked us for a ride to Broomfield, a town about 10 miles away. We were only able to put $3 worth of gas in the tank, so we said “no”, and started getting in the car. Jeremy opened the passenger door, and to our surprise, the drunk guy brushed past him and got in. He pulled out his wallet, and said he’d give us $40 for a ride. He pulled out a wad of damp, muddy, and slightly bloody cash, set it on the dashboard, and announced that he was going inside to put $20 of gas in the tank too.

After gassing up, he got back in the car (bloodying up the seat in the process). We turned on the radio and started driving.

About halfway through the drive, he started acting very erratically. He grabbed my leg and started massaging it. I shoved his arm away, and pulled over to the side of the highway and warned him “You keep this shit up and we’ll leave you right here”. I heard Jeremy open his switchblade in the back seat. He apologized, and we continued on our trip.

We arrived in Broomfield and suddenly he yelled “Right here. Pull into the gas station”. I complied, and he got out of the car. I looked at the seat, which was trashed. There was mud all over the dashboard, seat, door, and floorboard. My pant leg had a muddy handprint as well. Out of the corner of my eye, I saw the man running at my drivers door, yelling something we couldn’t understand. As he took his hand out of his jacket pocket, we gunned it and tore through the gas station parking lot.

Once we were a safe distance away, Jeremy moved back up to the passenger seat and grabbed the money off the dashboard. To our amazement, he left $180 of damp cash - completely worth the drive.

If you liked this post: Subscribe to eNaresh by email in the sidebar. I’ll be posting some of the weird and crazy things that happened in the past year periodically.

I’ve become completely addicted to an application called GrabUp. This amazing piece of software allows you to easily take screenshots, uploads them, and puts a link to the image in your clipboard - ready for pasting. Since installing GrabUp, I’ve found myself taking screenshots, when just copying and pasting text would be sufficient.

I had first heard about GrabUp when I used Windows exclusively. I was desperately awaiting the Windows version, which was released on April 30th.

Be sure to give GrabUp a try! If you like it, consider thanking the developer (twitter.com/grabup) for their labors with a @tweetgift. Just tweet the following: @TweetGift @GrabUp Heart

Back in January when a buddy of mine, Shaun, told me he was starting up a podcast, I was incredibly underwhelmed. “Oh brother”, I thought. “He’s going to expect me to listen to this piece of shit”.

Despite being Australian, Jay Nelson and Shaun Beale somehow manage to be slightly entertaining.

Dreading the monotone voices, horrible audio, old news topics, and boring personalities, I’ve managed to let over 4 months pass without listening to the show, which is hosted by Shaun Beale and Jay Nelson.

Whenever Shaun has mentioned WFWT on MSN Messenger, I’ve uttered a generic response (usually either “nice”, “cool”, “sweet”, or “lol”) and quickly changed the topic. Several times I’ve even logged out of MSN to avoid a conversation about the podcast.

About an hour ago, I accidentally clicked a link to his podcast. For some reason I was compelled to click the “Download” link. After hearing the intro, which states that the podcast is incredibly offensive, I decided to give it a listen. Offensive content is an easy way to get my attention (as Tony Cannon learned yesterday when he linked me to a photo of his…erm…rump)

Surprisingly, the podcast wasn’t horrible. In fact, it was pretty damn good. The audio quality wasn’t at all what I expected, and it isn’t a technology talk show (as I was lead to believe). In fact, the show has absolutely no format, is full of vulgar language, and is completely and utterly offensive. With rape and incest jokes scattered throughout, I can’t in good conscious recommend it. Good thing my conscious isn’t clean anyway - Give this show a listen.

Here’s their latest episode, for your listening displeasure:

Last night, @trusttec, @mattmc, and myself relaunched TweetGift.com, a twitter application that allows you to give gifts to your “tweeps”. You can see all the gifts given on the website or on it’s twitter account, @tweetgift.

Here’s how it works:

just reply to tweetgift and use our syntax to send gifts to your friends. every gift starts with @tweetgift, then a friend’s username, and the gift with an optional message.

example: @tweetgift @trusttec song for a job well done.

Thanks to the rest of the TweetGift team for all their work:

• Matthew McInerney - Graphics Artist, Podcaster, Blogger, Clothing Designer (Damn, Matt, you’re a busy guy).
• Barry - Blogger, SiteRose Co-Founder, and Tutorial Artist

Hey Guys,

I was going to do a video last night saying that I was quitting cigarettes, but that video didn’t quite work out. After 2 failed attempts at the video (muted audio, stuff falling over) I said “to hell with the video”.

I’m quitting cigarettes though. My patches finally arrived in the mail, thanks to the Quit Line (1800-QUIT-NOW) and I haven’t had a cigarette yet today. If anyone has any advice for quitting, please post in the comments.

Oh, and here’s why I ended up not making that video. The damn cigarette packs kept falling over. The video below was my 4th attempt at stacking them. I had them stacked perfectly once and made it through an entire video, but the audio didn’t record.

Each donation is greatly appreciated. Donors who send more than $10 get a post of at least 150 words dedicated to how awesome they are, plugging whatever the hell they want me to. They also get a premium SiteRose membership and an ad rotated on eNaresh & SiteRose.

I quit my job to work on SiteRose - make it worth it?

Be a part of #TutorialTuesday! Write your own tutorials (they don’t have to be tech related) and tweet them with #TutorialTuesday in the tweet. All #TutorialTuesday submissions will be linked to.

TutorialTuesday is brought to you by Eleven2.com. Use coupon code “SiteRose” and save 30% on your order. I’ve been with Eleven2 for 2 years, and am loving every minute of their world class web hosting.

To kick things off, I have a very simple tutorial for you, but it’s an important one. I’ve been reviewing some code I was sent by a reader to help find a bug, and realized how insecure a lot of PHP I see is. It’s not just smaller developers either, IPB ran into issues with form securing recently as well.

This tutorial was requested by my new roommate, Caleb Harrord, of Evans Colorado. Caleb is my business partner for an exciting new project that you’ll be hearing more about soon.

Next week I’ll have part two of the forum tutorial up. The following week? More forum tutorials. In other words, I read your emails and know that you want me to finish the damn forum. Chill. It’s here.

What Is SQL Injection?

SQL injection is a fairly common malicious technique that allows people to manipulate your database in ways they shouldn’t normally be alowed to. Here’s a common example:

Let’s say you have a login form. To confirm that the user has provided correct login details, you need to perform a query like the following:

<?
	$query = mysql_query("SELECT * FROM `users` where `username` = '$_POST[username]' AND `password` = '$_POST[password]'");
?>

This query just checks to make sure there’s a registered user with that username and password. But what happens if someone fills out the form with data like:

‘ OR ”=’

instead of a password?

A simple query can then turn horribly wrong. Instead of checking the username and password, it can completely bypass it by saying The username and password can be valid, or NULL=NULL (which it is), and can therefore bypass your login script, or other database powered application completely.

How Do I Prevent SQL Injection?

I’m glad you asked. It’s actually extremely simple. I personally clean my variables a bit more than I’m showing in this tutorial (just because I generally don’t want HTML or weird characters in my stored data), but this is good practice and should always be used before performing any queries with user submitted data. Remember: This applies to $_GET/$_REQUEST data as well as $_POST (A lot of people seem to only clean their $_POST data)

<?
	$username = mysql_real_escape_string($_POST['username']);
	$password = mysql_real_escape_string($_POST['password']);
	$query = mysql_query("SELECT * FROM `users` where `username` = '$username' AND `password` = '$password'");
?>

The above example uses the mysql_real_escape_string function to clean the variable before placing it inside a query. That way there’s no confusion in the MySQL query - it’s only checking to make sure the username and password are valid, and can’t be bypassed.

Here’s another example that uses $_GET or $_REQUEST variables.

<?
	$category = mysql_real_escape_string($_GET['category']);
	$query = mysql_query("SELECT * FROM `content` where `category` = '$category'");
?>

The above example would keep your users from putting malicious content inside your variables, like:
http://mydomain.com/content.php?category=’ OR ”=’

WrapUp

Please leave a comment below! I’m sorry for such a simple tutorial this week, it just needed to be posted after some of the bad horrible retarded fucking awful code I’ve seen lately.

Email: naresh@eNaresh.com
Twitter: twitter.com/Naresh

Oh, and read the first column of letters for a special message courtesy of Kevin Zimmerman. This poem was published in the 2008 edition of the Young American Poetry Digest.