581 reputation
410
bio website digitalfruition.com
location North Carolina
age 32
visits member for 3 years, 9 months
seen 10 hours ago

Chief Technology Officer and the senior software developer for Digital Fruition, LLC. I specialize in PHP, JavaScript, CSS, Ruby, Linux, Mac OS X, VMware and more.

I am an avid Stack Exchange user and a Moderator Pro Tempore on Cognitive Sciences Stack Exchange. I try to stay in our chat room almost all the time, even if I'm not at my computer. To get my attention, just post a message in chat with @Josh in it, and I'll respond as soon as I can.

I can also be reached from my website or via email at stackexchange -at- josh -dot- gitlin -dot- name. If you have an any issues please don't hesitate to contact me.


Sep
30
awarded  Explainer
Jun
7
comment I'm an IT consultant. Should I discourage a client from telling me his password?
Yes, and "this person is prepared to move this friendship forward" also doesn't apply. This is a client relationship, not a friendship.
Apr
17
awarded  Good Answer
Mar
21
awarded  Yearling
Mar
20
comment Risks of a php image upload form
@MikeWeller When you did so, do you remember what the filename was? I'd be willing to bet it was something.php.jpg or even worse, something.php. A properly configured Apache server will not execute PHP code inside a file which does not have .php in the name.
Mar
19
awarded  Mortarboard
Mar
19
comment Risks of a php image upload form
@lynks you probably can to some degree. But my point was it detects and returns the file and mime type of the image, and from that your code can save the file as .jpg, .png, .gif or reject it. On a properly configured Apache server, none of those file types will be executed as PHP / CGI scripts. Compare that to using the mime type from $_FILE which might be a lie, or trusting the filename sent from the client.
Mar
19
awarded  Enlightened
Mar
19
awarded  Yearling
Mar
19
awarded  Nice Answer
Mar
19
answered Risks of a php image upload form
Mar
6
revised Is it possible to locate Tor/proxy users? Spam is getting on my nerves
added 1 characters in body
Mar
6
comment Is it possible to locate Tor/proxy users? Spam is getting on my nerves
Great idea @sixtyfootersdude
Mar
6
awarded  Editor
Mar
6
revised Is it possible to locate Tor/proxy users? Spam is getting on my nerves
It's not a VPN, it's a Tor user
Mar
6
awarded  Teacher
Mar
6
awarded  Scholar
Mar
6
accepted Does PA-DSS apply to a SaaS eCommerce system?
Mar
6
answered Is it possible to locate Tor/proxy users? Spam is getting on my nerves
Mar
6
suggested suggested edit on Is it possible to locate Tor/proxy users? Spam is getting on my nerves