152 reputation
8
bio website mattalxndr.me
location Chicago, IL
age 32
visits member for 4 years, 3 months
seen Oct 10 at 15:33

Web developer living in the U.S.

Creator of Alexander Site Design.


Aug
4
awarded  Critic
May
28
awarded  Autobiographer
Oct
5
awarded  Revival
Aug
2
awarded  Teacher
Feb
13
answered Get access to a command prompt via browser
Feb
3
accepted Only 192.168.0.3 can request most files, but anyone can request /public/file.html
Feb
1
answered Only 192.168.0.3 can request most files, but anyone can request /public/file.html
Jan
31
asked Only 192.168.0.3 can request most files, but anyone can request /public/file.html
Jan
7
comment Apache config that uses two document roots based on whether the requested resource exists in the first
Why would a 301 be necessary if the URL isn't changing?
Jan
7
asked Apache config that uses two document roots based on whether the requested resource exists in the first
Nov
5
awarded  Editor
Nov
5
revised Database is hacked over and over again; already cleaned the site for SQL injection
Removed links to apparently valid sites
Sep
20
awarded  Scholar
Sep
20
awarded  Supporter
Sep
20
accepted Database is hacked over and over again; already cleaned the site for SQL injection
Sep
15
comment Database is hacked over and over again; already cleaned the site for SQL injection
@danlfree, What steps did you take to get to opendns.com?
Sep
15
comment Database is hacked over and over again; already cleaned the site for SQL injection
Unfortunately, the site uses direct calls to mysql_query() all over the place, but I think this sounds like a great direction to head in. It's not really a big deal to write a wrapper for mysql_query() and point everything towards it.
Sep
15
comment Database is hacked over and over again; already cleaned the site for SQL injection
@gravyface, No they are on separate machines. Yes, Apache and MySQL.
Sep
15
comment Database is hacked over and over again; already cleaned the site for SQL injection
@John Gardeniers Yes, I did that. Grepped the whole site and didn't come up with anything. Even searched for fractions of the strings involved and raked through a bunch of stuff..
Sep
15
comment Database is hacked over and over again; already cleaned the site for SQL injection
I've set up a timestamp field in the database that told me when that record was edited. When it was again, I cross-referenced it with the Apache logs and didn't find anything that looked weird.