581 reputation
410
bio website digitalfruition.com
location North Carolina
age 32
visits member for 3 years, 10 months
seen yesterday

Chief Technology Officer and the senior software developer for Digital Fruition, LLC. I specialize in PHP, JavaScript, CSS, Ruby, Linux, Mac OS X, VMware and more.

I am an avid Stack Exchange user and a Moderator Pro Tempore on Cognitive Sciences Stack Exchange. I try to stay in our chat room almost all the time, even if I'm not at my computer. To get my attention, just post a message in chat with @Josh in it, and I'll respond as soon as I can.

I can also be reached from my website or via email at stackexchange -at- josh -dot- gitlin -dot- name. If you have an any issues please don't hesitate to contact me.


Jun
7
comment I'm an IT consultant. Should I discourage a client from telling me his password?
Yes, and "this person is prepared to move this friendship forward" also doesn't apply. This is a client relationship, not a friendship.
Mar
20
comment Risks of a php image upload form
@MikeWeller When you did so, do you remember what the filename was? I'd be willing to bet it was something.php.jpg or even worse, something.php. A properly configured Apache server will not execute PHP code inside a file which does not have .php in the name.
Mar
19
comment Risks of a php image upload form
@lynks you probably can to some degree. But my point was it detects and returns the file and mime type of the image, and from that your code can save the file as .jpg, .png, .gif or reject it. On a properly configured Apache server, none of those file types will be executed as PHP / CGI scripts. Compare that to using the mime type from $_FILE which might be a lie, or trusting the filename sent from the client.
Mar
6
comment Is it possible to locate Tor/proxy users? Spam is getting on my nerves
Great idea @sixtyfootersdude
Mar
6
comment Is it possible to locate Tor/proxy users? Spam is getting on my nerves
It's almost certainly Tor. Because 128.117.43.92 is a Tor exit node.
Mar
6
comment Is it possible to locate Tor/proxy users? Spam is getting on my nerves
It's not a VPN, the user is using Tor. So there's nobody to contact.
Nov
1
comment Should I have a maximum password length?
@webbiedave sounds reasonable based on what the Apple-1 manual says
Feb
7
comment What is your way to create good passwords that can actually be remembered?
@nealmcb: I strongly disagree. How would the attacker know it was these two lines from this Elvis song? How would the attacker know it was all the words from these lines? Take all the popular songs out there, and take all the lines from those songs in both one and two line combinations. Now take the first and last words off each of those lines. Your dictionary would be so large it would be useless.
Feb
7
comment Does PA-DSS apply to a SaaS eCommerce system?
Thanks, that's my understanding also.