DEV Community: Slothy

Security through obscurity

Slothy — Fri, 15 Sep 2023 16:10:53 +0000

Random thought of the day: denial that security through obscurity is a valid technique is itself a layer of security through obscurity 🤯

Dealing with IDE reformatting (VSCode) Vue templates breaking white space preservation

Slothy — Wed, 02 Mar 2022 14:53:38 +0000

I've been recently losing my mind with eslint and Vetur both reformatting blocks that need to not have any whitespace, and finally came up with a much better solution.

A simple re-usable single file component:

<template>
    <div class="preserve">{{ content }}</div>
</template>

<script>
export default {
    props: ["content"],
};
</script>

Simply use this component, without any worry about line length forcing it to break to a new line

Show 404s from Laravel's telescope directly from DB

Slothy — Sat, 19 Feb 2022 13:41:52 +0000

Not terribly efficient, but if you want to quickly review the recent 404s, will do in a pinch:

SELECT json_extract(content, '$.uri') AS uri, created_at 
FROM `telescope_entries` 
WHERE `content` LIKE '%404%' 
ORDER BY `sequence` DESC 
LIMIT 100

Setting up Android/Cordova on Mac in 2021

Slothy — Fri, 18 Jun 2021 12:22:44 +0000

The documentation is beyond useless, to setup the directories you'll need this in your ~/.zshrc file:

export PATH="${HOME}/Library/Android/sdk/tools:${HOME}/Library/Android/sdk/platform-tools:${PATH}"
export JAVA_HOME="/Library/Java/JavaVirtualMachines/jdk1.8.0_291.jdk/Contents/Home"

You can disregard the current documentation, it references .bash_profile which is no longer the default on Mac, and ignores its own instructions about how to setup the paths, thanks Cordova!

pt-archiver Incorrect date value: '0000-00-00' for column

Slothy — Sat, 21 Nov 2020 16:41:58 +0000

This was a weird one. I had a bug that inserted records with 0000-00-00 for a short while many years ago on an older version of MySQL.

The strange thing here, is you can't actually search for the records with 0000-00-00 since newer versions of MySQL consider this an invalid date, they reject the query.

To find the invalid records use:

SELECT * FROM table WHERE CAST(dateField AS CHAR(10)) = '0000-00-00'

Or just fix the problem in one query:

UPDATE table SET dateField = NULL WHERE CAST(dateField AS CHAR(10)) = '0000-00-00';

Randomize ElasticSearch results with PHP

Slothy — Sat, 14 Nov 2020 15:27:22 +0000

Simple example of how to re-order your original query and wrap it to randomize the results.

This is using the official PHP ES library: https://github.com/elastic/elasticsearch-php

<?php

if ($this->random) {
    $originalQuery = $this->params['body']['query'];

    $this->params['body']['query'] = [
        'function_score' => [
            'query' => $originalQuery,
            'random_score' => (new \stdClass()),
        ],
    ];
}

$searchRawResult = $this->client->search($this->params);

Authorize.net - Validate Webhook Signature

Slothy — Sun, 01 Nov 2020 12:28:01 +0000

Couldn't find any complete examples on how to do this, so here is one:

define('AUTHORIZE_SIGNATURE_KEY', 'abc123');

$body = file_get_contents('php://input');

$headers = getallheaders();

$header = $headers['X-ANET-Signature'];

parse_str($header, $output);

// need to match case since PHP will generate the hash as lowercase
$signature = strtolower($output['sha512']);

$hash = hash_hmac('sha512', $body, AUTHORIZE_SIGNATURE_KEY);

if($hash === $signature) {
    echo "signature matches";
}