News for hackers. Stuff that matters.

joubee

it depends on how you frame it. I just want to know the problem(s) that you find infuriating or lacking in your day to day that could be solved with a web based app.

It's different for everyone of course. I have just finished a contract and am looking for something fun to make while I take a few months off - so I'm interested in anything and everything :)

Re:Ask HN: Can we make money from this? on Friday July 20, 2012 @06:09AM (#4270137)
Is advertising the only way to make money online?

If we can come up with a model to make money we want to relaunch the website but.... as what?

thanks for input guys

Ask HN: Can we make money from this?

Hi AllWe have a facebook page http://facebook.com/nzblokesWe get around 15-20k people talking about us each day and reach about 500k people per week. It's run by two guys as a hobby but recently we've started to get more people coming to the page. We love doing it but wondered if there is any way we can make any money out of this hobby.Any ideas much appreciated :)

( Read More... | 3 comments | 2 points | on HN )
Re:Ask HN: What do you do to avoid SQL injection attacks? on Thursday April 05, 2012 @08:34PM (#3805400)
codinghorror.com: Give me parameterized SQL, or give me death

http://www.codinghorror.com/blog/2005/04/give-me-parameteriz...

I have fairly strong feelings when it comes to the stored procedures versus dynamic SQL argument, but one thing is clear: you should never, ever use concatenated SQL strings in your applications. Give me parameterized SQL, or give me death. There are two good reasons you should never do this.

[I need to spend some time looking at this - tyvm benologist]

Ask HN: What do you do to avoid SQL injection attacks?

I've been looking at SQL injection recently and was interested to know what other developers do to prevent these attacks.Does anyone have anything to add? 1. Use dynamic SQL if and only if there is no other alternative2. Escape user input always3. Always assume magic quotes is off4. Install security updates and patches regularly5. Remove all the dead SQL's or other codes that you don't use6....

( Read More... | 6 comments | 6 points | on HN )
As the topic of SQL injection has come up... what are your thoughts on:

MySQL vs MySQLi vs PDO MySQL

Also I grabbed this checklist online. Does anyone have anything to add?

1. Use dynamic SQL if and only if there is no other alternative

2. Escape user input always

3. Always assume magic quotes is off

4. Install security updates and patches regularly

5. Remove all the dead SQL's or other codes that you don't use

6. Never display the system defined error message for SQL errors

7. Store database credentials in a separate file

8. Use the principle of least privilege

9. Disable shells

10. Use SQL injection Hack tools to check vulnerabilities

tyvm for feedback. What country are you writing from? Is court action common place when a site is compromised in your country?

I'm guessing you are from the US?

I'm not the host. Just the developer. The host is shrugging it off as 'just one of those things', which it may well be and have billed for restoring dbs etc..

I think you're right - I not sure how to broach the subject with the client though. tyvm for your $0.02 :)

Yes I should have included what happens when a site is compromised in the terms. As the developer, not host this just didn't occur to me. I provide a 90 warranty but generally this only requires a small amount of hours as major problems are usually picked up in testing.

tyvm - great comments

Ask HN: Do you charge to fix a clients site when it gets hacked

Hi everyoneI'm a web developer. Two of my clients, that I made sites for, got hacked this week. I spent two days fixing the intrusion and doing support to the clients.If this has happened to you in the past do you charge clients for this service?The clients know this isn't my fault and are grateful to me fixing the problem but I could have been doing other work during this time but don't know...

( Read More... | 8 comments | 9 points | on HN )
Re:Ask HN: Can I help you be more awesome today? (No strings.) on Sunday February 12, 2012 @04:00PM (#3582990)
Thank you so much for the reply. I should be more concise.

1-I am a developer.

2-I have tested shopify as a concept as it would be a good fit for small retailors to dip their toe in the water

3-I have done sccessful ad campaigns in the past for clients (one client has contributed over 750k in adword related sales for a campaign although they were a decent sized company with good market share already :) )

4-I am testing how adwords works with shopify. All adwords ads are approved and active

5-My 'test' shopify site has not generated a single adwords impression in 2 weeks

6-This is really odd.

7-I have tried to contact google and to read everything I can to see if this problem has come up for others and can't get any traction

8-I just need a fresh perspective as I'm at my wits end

Main question: Have I missed anything obvious that is causing me to be ignored by adwords. I get the horrible feeling that I've overlooked something obvious. I'm not trying to get you to generate me more traffic I just wanted you to have a quick look and say whether you can see a probelm

I've tried

-A/B testing of ads

-Using both redirect url and shopify domains in ads

-Targeted really non competitive key words and searched for them directly in Google to see if I can get adwords to acknoledge my ads

-My campaign has hundreds of keyword recommendations from the adwords keyword generator.

-Would it have been better to use Exact match domains and targeted a 'selling' word(s) for the sites name?

Occam's Razor suggests that this is a average site in a competitive market that is a hard(ish) sell to customers?

I really don't want to waste your time so sorry. I just need a fresh pair of eyes pls

tyvm

Re:Ask HN: Can I help you be more awesome today? (No strings.) on Saturday February 11, 2012 @03:55PM (#3580133)
Hi I've set up a shopify site. I decided to give shopify a go as I'm getting requests from clients for ecommerce and already do wordpress and custom carts but wanted to try and find a low cost offering for small businesses. The url for my concept test is (it's live and all setup)

http://nzsunglasses.co.nz

It redirects to

nzsunglasses.myshopify.com

It has good products but I csn't seem to get any traffic (like 5 visits in 3 weeks). Adwords hasn't delivered any impressions, posibbly because it's a very competitive category. Maybe it's the redirect but I've but I've a/b tested urls and even used.

Any suggestions much appreciated

Best approach to set up adserver for blog network

Hi I have about 5 seperate websites owned by 5 people on different domains. I wanted to set up an adserver and establish a network of blogs. Has anyone done this before? If so any advice/pitfalls... I should know about. I was thinking about using OpenX and using the wordpress plugin to distribute the ads over the sites (they are all wordpress sites).tyvm :)

( Read More... | 1 comment | 3 points | on HN )
Re:I created a bookmarking service you can love. on Saturday July 17, 2010 @06:27PM (#1524790)
Hi. First of all well done in getting something up and running. I think I'm missing the point here. Whats the difference wwhen compared to delicious? I'm not being rude I'm really interested
Re:The City that Ended Hunger on Saturday July 17, 2010 @05:56PM (#1524723)
Sorry davidw it's off Topic but I thought it was something that was worth talking about and others might be interested :)
Re:Kinda cool - How to Obscure Any URL (2002) on Saturday July 17, 2010 @04:52AM (#1523518)
Modern browsers automatically decode encoded URLs (ie, if you enter %20 into your address bar - it'll change it to the space that represents) IE (at least) won't let you use the auth@domain format either Using the IP almost in any form won't help - as most sites are name-bound

what do you use today to do this

Older »