An effective strategy to detect SQL injection attempts is to rigorously validate the parameters received by the application. Each parameter should be checked according to rules specific to the application's domain.
For example, parameters representing identifiers (such as those starting with id, e.g., idUser, idOrder) can be validated using a regular expression that allows only integer numbers.
Similarly, other types of parameters should be validated based on their intended use. Es. Boolean parameters (true/false or 0/1).
Alphanumeric codes with a predefined length or mask.
Strings restricted to allowed characters to prevent malicious input.
To systematically enforce this validation, a function could be included in every page to validate all (present and future) parameters according to this rule. This ensures a consistent security policy across the entire application.
I think your mother-in-law network runs a DNS server on the router which does the resolving for you. So it's DNS, not mDNS. This is confirmed by failure to resolve the hostname when your phone uses private DNS.
Your router, on another hand, doesn't resolve . local domain as belonging to local network.
When the devices obtain the IP address via DHCP from the router, the latter can specify the DNS servers to use. Yours may specify the provider's servers while mother-in-law's specifies its own.
There's a mobile application called Cosmo that integrates with Postman pretty well. Used it a couple times in a pinch when I didn't have my computer on me and needed to run some collections.
I could do the publish+start+attach only from VSCode.
However, it's not such a big pain, normal coding can be done in VS. VSCode is open next to it and if I need to debug on RPI, I switch to VScode and start the debug session.
This is my launch.json config in VSCode:
{
"name": "RPI 192.168.0.xx",
"type": "coreclr",
"request": "launch",
"preLaunchTask": "publish", <--- this contains the pscp copy part
"program": "~/.dotnet/dotnet",
"args": [
"/testapp/app.dll"
],
"cwd": "/testapp/",
"stopAtEntry": true,
"console": "internalConsole",
"pipeTransport": {
"pipeCwd": "${workspaceFolder}",
"pipeProgram": "c:\\Program Files\\PuTTY\\plink.exe",
"pipeArgs": [
"-pw",
"<your_password>", <--- for local tests ok
"[email protected]"
],
"debuggerPath": "~/vsdbg/vsdbg"
}
Sorry to tell you: this is not supported by all browsers.
As the documentation on MDN shows: Firefox and Safari don't support this feature.
Firefox would need a PWA Extension (who installs this?).
iOS does not support this kind of installation - the user must do this manually - you could show some instructions to the users, as it is described here
This seems to be valid independent of the browser in iOS - see this article
What causes that error in your project is that you specify a custom size for the image. At first, I tried to fix it from the style side, but since you specify a custom size for the image, it does not prioritize the style codes.
I have corrected your code a little bit with my own perspective :) Here you go
You can use preventDefault function of the onKeyDown event of input element if you know a character is not in english. How do you know it's not english? You can use my trick without using regular expressions:
in such events, event variable is of type KeyboardEventHandler. (event: KeyboardEvent<HTMLInputElement>) => { if(event.code.toLowerCase().includes(event.key.toLowerCase())) return null event.preventDefault() /* prevent event from typing the character in input field as it is not an english character*/ }
this block of code checks if the pressed key character ("s") is included within the key code ("keyS") which is in english just be careful to check the lowercase values as it may run into some exceptions without checking that.
Well thank you to everybody who answered! In the end I came up with a dirty but efficient solution. The whole problem is that during build time the environment variables are not accessible (unless you use the ARG and ENV parameters in your Dockerfile file, but I don't like to bloat it), therefore all the database initialization, for example Stripe initialization or whatever other services that you may have that require those environmental variables, are gonna fail in build time. The idea is, try to adapt the code so instead of throwing an error, it accepts and manages situations where those env variables are null or not defined.
For example in the database(postgres) initialization file (db/index.ts):
import { drizzle } from 'drizzle-orm/postgres-js';
import postgres from 'postgres';
import * as users from '$lib/server/db/schemas/users'
import * as normalized from '$lib/server/db/schemas/normalized'
import * as availability from '$lib/server/db/schemas/availability';
import * as lessons from '$lib/server/db/schemas/lessons';
import * as bookings from '$lib/server/db/schemas/bookings';
import { env } from 'process';
function createDb() {
const databaseUrl = env.DATABASE_URL;
console.log('DATABASEURL: ', databaseUrl)
if (!databaseUrl) throw new Error('DATABASE_URL is not set');
// Skip DB connection during build
if (process.env.NODE_ENV === 'build') {
console.log('Build mode - skipping database connection');
return null;
}
if (process.env.NODE_ENV === 'production') {
console.log('Production mode - skipping database connection');
}
const client = postgres(databaseUrl);
return drizzle(client, {
schema: { ...users, ...normalized, ...availability, ...lessons, ...bookings }
});
}
export const db = createDb();
Adn then wherever this db needs to be used, just handle the scenario where it might not be initialized properly:
import { eq } from "drizzle-orm";
import { db } from ".";
import { ageGroups, countries, currencies, languages, pricingModes, resorts, skillLevels, sports, timeUnits } from "./schemas/normalized";
export async function getAllSkiResorts() {
if (!db){
console.error('Database Not Initialized')
return [];
}
return await db.select().from(resorts);
}
export async function getSkiResortsByCountry(countryId: number) {
if (!db){
console.error('Database Not Initialized')
return [];
}
return await db.select().from(resorts).where(eq(countries.id, countryId))
}
export async function getAllCountries() {
if (!db){
console.error('Database Not Initialized')
return [];
}
return await db.select().from(countries);
}
Also in the Dockerfile, you could set the "build" environment var just to perform cleaner logic:
# Build stage
FROM node:22-alpine AS builder
RUN corepack enable && corepack prepare pnpm@latest --activate
WORKDIR /app
COPY package.json pnpm-lock.yaml ./
RUN pnpm install
COPY . .
# Set build environment
ENV NODE_ENV=build
RUN pnpm build
# Production stage
FROM node:22-alpine
RUN corepack enable && corepack prepare pnpm@latest --activate
WORKDIR /app
COPY package.json pnpm-lock.yaml ./
RUN pnpm install --production
COPY --from=builder /app/build ./build
# Set production environment
ENV NODE_ENV=production
CMD ["node", "build/index.js"]
EXPOSE 3000
you just need to test and try to see where in your app, there is code that might create conflict during build and then adapt the logic to handle non existing values during buildtime.
I hope this does the trick for someone in the same situation that I was!!
I post my answer, beacuse a I think that a lot of people are not aware that from Next.js v15 params attribute is considered as DYNAMIC API which can only be known during request - response lifecycle. That means, params needs to satisfy Promise type and to get params request for a page resource have to be made.
There are multiple ways to setup it up, it appears, which makes it confusing. While other answers are not wrong, also try opening settings (File > Preferences > Settings), type "formatter" into the search and find "Editor: Default Formatter" setting. Is it set to use Prettier?
I am currently working on a native non blocking HTTP client library over at https://github.com/sfenzke/http-client.nvim. It doesn't have a response parser yet and the API ist still a little rough around the edges but I think this could be helpful for you in the future.
Is there any data skew (where some files are much larger than others)
If you're doing some processing on input files, and the input files are all 200Mb but the transformations create new data, those transforms might create skew in final output but idk
Are you sure they're all on-demand and not being dropped as spot instances?
Lastly are you using long term connections throughout? Like do you have the following below:
Now it's 2025 and VS 17.12.4, but I still get this error.
After hours I've seen that VS loses the setting "Xcode path" in
Tools > Options > Xamarin > iOS Settings
on VS application close.
This must be set to
/Applications/Xcode.app
Then tried to pair again. This time the error
"The Xcode license status couldn't be verified because Xcode has not been found on the default location of the connected Mac..." does not happen and the connection was successful.
So the Xcode path must be entered each time VS is started.
Maybe this helps someone.
Reasons:
RegEx Blacklisted phrase (1): I still get this error
Earlier repo's Remote URL without .git suffix, like https://github.com/username/reponame, was constantly redirected to https://github.com/username/reponame.git with warning in SmartGit Output window. So it was convenient to add this suffix to Remote URL manually. But now .git suffix is out of date and breaks authorization.
If anyone here facing same issue, isRewardedVideoAvailable always being false. I was initializing like this: LevelPlay.Init("appKey");
Changing initialization to this solved my problem:
index(B39:B58, MATCH(MAX(A39:A58), A39:A58, 0)) to tell me how the name in range B39:B58 with the highest value in range A39:A58. However, since this won't return values that are equal, who would I add a COUNTIF formula to this to return multiple names of they have the same value?
I had this problem just now, and the issue was that I was referring to non-existent modules from an old pyproject.toml file that I had copied over to this new package in the [project.optional-dependencies]. So if you just get the dist-info folder created upon installation but not the actual package folder, check the pyproject.toml folder for errors, and specifically check to make sure that [project.optional-dependencies] does not list any modules that do not exist in your package.
Your lines of code helped me to solve a similar problem I had.
I extended your code a little cuz there was a small detail missing I needed.
Now it makes sure lowest unused number will never be "0".
let k = [1,3,4];
function getLowestFreeNumber(){
let lowestUnusedNumber = -1;
if (k.length === 0) {
lowestUnusedNumber = 1;
return lowestUnusedNumber;
}
k.sort((a, b) => a - b);
for (let i = 0; i < k.length; ++i) {
if (k[i] > 0 && k[i] != i + 1) {
lowestUnusedNumber = i + 1;
break;
}
}
if (lowestUnusedNumber == -1) {
lowestUnusedNumber = k[k.length - 1] + 1;
}
return lowestUnusedNumber;
}
console.log(getLowestFreeNumber())
I hope this few lines of code will help someone...
ADB WIFI plugin is more stable than the built in one. For the first time, you must connect with the built in wifi debugger so as to get your phone in ADB WIFI list. After that, connect the device by pressing connect button on the ADB WIFI list.
idk if this will help anyone, but I had this error on Stability Matrix on linux. The fix was to install opencv-python through the Stability Matrix interface. On the packages screen, you click the three dot menu for the package having the problem, then click python packages. From there you can install missing packages. i don't really know much about how python/conda/etc environments work on linux, because i did a whole lot of steps mentioned above and elsewhere in terminal, but it never did anything. I'm just posting this because no one has posted the fix to my problem anywhere, probably it's too obvious... anyway, just in case this might help someone down the road. Anyone that knows what they're doing, feel free to elaborate..
Pt.Br: Programando para web, o ft.FilePicker retorna a propriedade path=None, como faço para obter o conteúdo de um arquivo ou o path que o usuário selecionou através do FilePicker?
En:
Programming for the web, ft.FilePicker returns the property path=None, how do I get the content of a file or path of file that the user has selected through FilePicker?
для удаления приложения для всех пользователей
нужно передать полное название программы
полученное из параметра PackageName команды Get-AppxProvisionedPackage -online
полные названия приложения отличаются в зависимости от используемой вами команды
Get-AppxPackage хранит полное название приложения в параметре с названием - PackageFullName (используя его мы получаем ошибку)
Get-AppxProvisionedPackage -online хранит полное название приложения в параметре с названием - PackageName (надо использовать это название)
для одного приложения я использую подобную конструкцию
In my case my Tailwind config was named tailwind.config.js. Autocompletion started working when I renamed the file to tailwind.config.cjs and restarted NeoVim.
The code works fine. I didn't realize that the nextPageToken for each successive call is the same as the last call ie. when you loop through the fetching of data, nextPageToken stays the same; it only becomes nil on the last fetch.
I tried to publish another app, initially with "Google Account logged in" can access the web app (not Anyone can access). When I published with this permission, the generated deployment URL was in different structure, like this (https://scripts.google.com/a/macros/{script_id}/exec), then I changed the permission to "Anyone" can access... and I tried to execute embed the web app with this new URL structure and it worked.
So What I understood, if anyone face this issue, must use different url structure to get the url with /a/macros/... instead of /macros/s/
extension manager (dpkg) on checking installed extensions I have two extension(i.e dash to dock & Ubuntu dock) of dock enabled which causes this bug. On disabling one of the extension issue is solved.
Unfortunately, it doesn't work that way. It is true that the fourth parameter always contains the last status of the EditText and the second is always zero, but the first parameter is irregular, and so are the others (mostly).
I discovered this by doing some debugging experiments. Looks like Google really screwed this one up.
I'm going to try my luck with a TextWatcher instead. While it is true that InputFilter.filter really is supposed to give the text/leftover of the first three parameters that is to be inserted between the fifth and sixth parameter into the fourth, there is simply no way of knowing what values Google assigns to most of the parameters.
EDIT: Actually, the first parameter does seem to be some sort of potpourri of the input, so possibly there is a way to reconstruct the desired output. But this is probably highly case and version dependent.
When you draw the y_curve, rotate it in a different direction using the cosine of theta instead of the sine. Also, since you want to connect the lines, elevate the centre of the semicircle to be in between the two adjacent ones: (i + 0.5). Here's the line that shows the right y coordinates for me:
width = 10
spacing = 1
length = 10
for i in range(int(width // spacing)):
theta = np.linspace(0, np.pi, 100)
x_curve = length + (spacing / 2) * np.cos(theta)
y_curve = (i + 0.5) * spacing + (spacing / 2) * np.cos(theta) # this is the line in qquestion
print(f"X: {x_curve}\nY: {y_curve}")
Although I'm new to Next.js, from the Next.js 13+ while scaffolding a new project, you'll have to decide between App Router vs Pages Router. With App Router you'll be given React.js server & client component - and this affects how you configure the routes for you App. While Pages Router leaves you with the old way of doing things in Next.js. For an in-depth explanation of this watch this video. Thanks.
Large applications that can have their own memory management(malloc/free) and placement new can extract very good performance compared to those that use plain old new(). This is still needed today in systems which creates and destroys a few hundred thousand objects a minute. A similar example is of skbuff in the linux network stack.
STL containers, embedded systems are tiny examples where this is useful.
This is an example repository for C++ project based on Bazel and google test. And it also introduced how to code and test across platforms. I think it can match your needs.
Same problem here, I've added €75,- in funds to get to tier 3 just for o3-mini, but I get the same message. I guess it's phased out, hopefully later today.
"Am I imagining stuff and this is the correct behaviour?"
Yes, it is, both on Windows and Linux. Thanks to phd's comment I remembered why I thought it should ignore such folders: I created a virtual environment with python -m venv .v and git ignored it, so I thought that it ignored it because the name started with a period. I didn't take into account that venv itself created a gitignore file with a * which ignored the whole directory, hence it wasn't showing on git status. So yes, I am imagining stuff.
In the end, instead of doing my SQL request when someone goes on the page, I made it when the :hover (css) of a div is trigger.
Not the body, but something close to be that big.
Body won't work, but the div did.
I finally found issue. I was literally 5 minutes before wiping my phone which would have bin a pain because of my banking apps and stuff. But I found a working solution!
Got to Developer Settings, and disable multi path networking.
If anyone is looking for a module that simplifies the process of multi-window (React) apps;
Needed something similar that scales well. I just published a module that simplifies the process of opening and closing electron windows. Currently only supports React but it could easily be used as base for anything else.
