Comments for xiphux

Comment on GitPHP internationalization by Sophie Brooke

Sophie Brooke — Mon, 04 Jan 2010 23:22:16 +0000

I like this blog – oh and I like the design of this as well, what theme are you using?

Comment on GitPHP 0.0.9 by xiphux

xiphux — Wed, 11 Nov 2009 02:53:21 +0000

Thanks for reporting this. I use suhosin / hardened php on my development server so I never caught this. The new release fixes this.

Comment on GitPHP 0.0.9 by Some[One]

Some[One] — Tue, 10 Nov 2009 16:35:24 +0000

Hello …
I’m not sure of what i’ve seen in your demo (http://www.xiphux.com/gitphp/index.php?p=php/gitphp.git&a=summary), but i think that your webapp can be exploited to lead to a file injection exploitation :

Like http://www.xiphux.com/gitphp/index.php?p=put any path of your server here]&a=summary

to remove the search of path+”/description” just add %00 :
http://www.xiphux.com/gitphp/index.php?p=any path]%00&a=summary
and it will read your files directly

On your server it’s seems that’s your using ModSecurity (return Metho Not Implemented when we put some path to files like passwd but without ModSecurity it can lead to a compromission of the server that host it)

So use regular expression to clean/reject wrong url.

Sorry for reporting the bug here (I don’t wan’t to create an account in mantis ^^)

Comment on GitPHP by Running Git on WebFaction in a contained and secretive way... - [k.m.] Wallio

Running Git on WebFaction in a contained and secretive way... - [k.m.] Wallio — Sat, 03 Oct 2009 15:03:18 +0000

[...] part is optional. If you want to display the content of your repositories online in some way (via GitPHP or something), then it's better to run this under your main account (where your "webapps" and [...]

Comment on Gears of War 2 Fail by farts

farts — Tue, 04 Aug 2009 19:34:34 +0000

Gears 2 = FAAAAAAIIIIIILLLLLLL
-melee through walls(lag? or just stupid? probly a little of both)
-any weapon with shield(glitch), crabwalk, kungfu flip, and many many more glitches to gay up the game even more
***shotgun shoots at ground when your aiming right in front of you(the game just basically decides to make the shotgun 10X shittier in gears 2)
-due to the above, you almost always have to 2 piece with the shotgun to guarantee a kill with it, blind firing RARELY works
-can get stunned multiple times(if chainsaw = revd) from the same shot
-no more shooting while running, have to stop then shoot(making the shotgun even shittier)
-cant run or roll right after melee anymore
-chainsaw battles arent just decided from how much b is pressed, can also be instigated towards a player who doesnt even have the chainsaw revd, great for lag
-in matchmaking, i was lvl(?) 1 and got demoted…to lvl 1…even though i was never promoted in the first place…
-The whole host system is shit since theyre near impossible to kill, esp if they have a shotgun and like you said if the host leaves then the whole match ends and everyone gets booted, no host swap/switch
-the host can boot you for killing them once after theyve active snipered you the entire match
-so what does all this mean? it means i am thankful for all the ppl that realize all this and play gears 1. granted, some of these affect both games, theres just more of a shit pile to deal with while playing gears 2.

Comment on GitPHP by KevBurnsJr.com » Packing up my GitHub Acct.

KevBurnsJr.com » Packing up my GitHub Acct. — Thu, 04 Jun 2009 03:37:09 +0000

[...] had a paid account for the last 10 months to host my private repos. After playing around with gitphp, I’m beginning to see that there’s a lot of potential that I’ve yet to tap [...]

Comment on New GitPHP features by axold

axold — Sun, 17 May 2009 19:19:47 +0000

Hi, I just wanna to say I have modified your code, now there is a favicon, you can change the name of projects and the description. I didn’t have much time to see the whole code, but did you enabled the cache with smarty?

It would be great to have pre-created package feature because if you have a big project when you click snapshot you need to wait some secs.
In kernel/git I saw that they have the packages instantly.

If you wanna talk with me, send me an email to my address!

Bye!

Comment on shady business practices by stalemate

stalemate — Fri, 10 Oct 2008 21:16:44 +0000

z0mg WTF PWNIES!!!!!!!!!!!!11111!!one!eleven!!!

Comment on if (("$Linux" > "$Windows")) { return true; } by anonymous

anonymous — Wed, 19 May 2004 00:36:00 +0000

a somewhat random question: I though gcc was gnu c compiler, although I know they have all sorts of other gcc compilers. Was it originally that and renamed or what?

This is the best comparison i have seen so far of the two, I use linux a little, am still on the learning stage, and use windows (which needs to die) primarily. its been like 4 months and the system already needs to be reinstalled. OS rot at its worst…

You should write more, whether about this kind of stuff or about what you used to write about. You write well.

Comment on if (("$Linux" > "$Windows")) { return true; } by anonymous

anonymous — Wed, 05 May 2004 01:34:00 +0000

tnx