Jebus

Image 28 is broken: http://www.cattell.net/talk/Image28.gif

More PHP envy? Get over it, PHP > all, and that's not gonna change anytime soon

I use a few RSS in my iGoogle (mostly global news, just in case the world is ending or something which I would like to know instantly), and LOTS in my Thunderbird. How else would I be notified when this or that blogger, who writes one amazing article once or twice a year does so?

Don't kill RSS, write a nice guide on how to use it for non-techies and make it viral.

What city do you live in?

The crypto course is fantastic =)

I didn't know about Derby, thanks for sharing.

I won't even try Meteor, they screwed it up with the license.

Uncompressed field names - If you store 1,000 documents with the key “foo”, then “foo” is stored 1,000 times in your data set

Oh my god. I didn't know about this. And I hate short, meaningless and anti-intuitive field names. Please fix it mongodb devs!

"Realized that my friends will forever make fun of me if I stay on PHP"

That was lame.

"Considered Cake as well, but went with CodeIgniter mainly because I had friends that had used it"

Can you see a pattern here?

GPL?! I don't even..

I still don't know why people use github instead of bitbucket.

Oh no, please not another OOP javascript tutorial without prototypes.

Would this still happen if the US didn't invade Japan?

Unlike cash and gold, Bitcoin can be divided down to 8 decimals. So it doesn't really matter how many millions of bitcoins there are. The important thing is that bitcoin can't be printed by central banks.

The thing is, you can't just 'escape XSS'. You need to know exactly where the data is going to be used, and you can't know that when you store it (in fact, you could use the same data in many different places). There are infinite ways of doing XSS, so if you don't escape properly, you are still vulnerable. The view layer should escape everything by default. Then if you need a different filter, or disable escaping (for wysiwyg for instance), do it manually.

HTMLPurifier? That thing should only be used if you are accepting html as input (eg: wysiwyg). Just escape everything in the view layer (not in the DBAL. There you only escape to avoid sql injection, not XSS!)

This! +1

I love reading HN because arguments and reason are all that matters. Spiced with some trolling here and there to make it fun. Trolls' messages end up gray anyway.

There are only two kinds of programming languages: those people always bitch about and those nobody uses.

You basically ripped off Silex

http://silex.sensiolabs.org/

Great article, thanks

You are copying the code for each instance. Use prototype instead.

If the boss asks me to work 50 hours, I work 30. True story

Just a correction: "ideas" per se cannot be protected. Only inventions (patents) and IP (copyright)

502 Bad Gateway nginx/0.7.65

I have been using PHP for 4 years, and Ruby and RoR for a month or so.

And I have noticed this pattern:

In PHP frameworks, creating an object with raw $_POST is as common as in Rails (params), because it's faster for the developer. Of course, it's a known bad practice, and is discouraged.

The difference is that when a php developer makes this mistake, people say it's because php developers are all noobs and php is crap.

Now, when a Rails developer makes the very same mistake, it gets fancy names like 'mass assignment vulnerability', and by what I read in the comments on github, they are fully convinced that no other framework has this 'vulnerability', because no other framework has this feature of 'mass asignment'.

Thanks for the news. Now I have a reason not to work until 2013. =)

This, I was gonna say the same. Who wants a .com? Not me

You are asking to see meticulous proofs in a simple blog post, which is not gonna happen. Also, any article like this will assume that you already know something about what's going on there, or at least in the rest of the world. Eg: If someone says 20-30% inflation rate is high, it's obviously comparing it to the inflation in other countries. So yes, it's damn high. About the metrics, its pretty simple: they just pick the products/services that didn't increase much their price during that period. Of course nobody can't actually live with those products, nobody buys them or even know them. And when they need something real for the index, like the Big Mac.. Well, you know what happens. Automagically its price is reduced to a half, and the product is removed from the menu.

Oh noes, the 'citation needed' meme attacks again!

Would you mind explaining the downvote? I friggin live here and I KNOW they are printing more money than ever.

Their modus operandi is basically this:

- Take money from the middle class through unconstitutional high tax rates (that never come back in the form of infrastructure, education, security, etc), so they become poor.

- Give money to the poor so they keep voting favorably

- Give money to already rich friends and the Congress members, to have more power

- Get crazy laws approved, so that middle class has no escape. Eg: We can no longer buy other currencies, not even gold, so we are forced to stick to the pesos.

- Print print print! (more pesos) This way the money flows like this: people's savings and salaries -> government

- Profit

Seriously? Not printing money? Inflation does not come from people's imagination.