The real answer is probably very close to this:

Back during PHP3 days, PHP itself had no session support.  

But an open-source library called PHPLIB, initially written by Boris Erdmann and Kristian Koehntopp from NetUSE AG, provided sessions via PHP3 code.  

Session lifetimes were defined in **minutes**, not seconds.  And the default lifetime was 1440 minutes, or exactly one day.  Here&#39;s that line of code from PHPLIB:

    var $gc_time  = 1440;       ## Purge all session data older than 1440 minutes.

Sascha Schumann was involved with the PHPLIB project around the period of 1998 to 2000.  There&#39;s no doubt he was familiar with the PHP3 session code.

Then PHP4 came out in the year 2000 with native session support, but now the lifetime was specified in seconds.

I&#39;ll bet someone just never bothered converting minutes to seconds.  It&#39;s probable that person was Sascha Schumann.  Once that value was coded into the Zend engine, it became the configuration (`php.ini`) default as well.

1440 is used in a time calculation turning seconds into hours/days.

 - 1 day = 24 hours ( hours * 24 = 1 day )
 - 1 day = 1440 minutes ( minutes * 60 * 24 = 1 day )
 - 1 day = 86400 seconds ( seconds * 60 * 1440 = 1 day )

Example:

&gt; 9 days [* 60] = 540 [* 1440] = 777600 seconds

The same is true in reverse:

&gt; 777600 seconds [/ 1440] = 540 [/ 60] = 9 days

I came across some best practices for asynchronous programming using c#&#39;s `async`/`await` keywords (I&#39;m new to c# 5.0).

One of the advices given was the following:



**Stability: Know your synchronization contexts**

... 
Some synchronization contexts are non-reentrant and single-threaded. This means only one unit of work can be executed in the context at a given time. An example of this is the Windows UI thread or the ASP.NET request context.
In these single-threaded synchronization contexts, it’s easy to deadlock yourself. If you spawn off a task from a single-threaded context, then wait for that task in the context, your waiting code may be blocking the background task.

    public ActionResult ActionAsync()
    {
        // DEADLOCK: this blocks on the async task
        var data = GetDataAsync().Result;
    
        return View(data);
    }

    private async Task&lt;string&gt; GetDataAsync()
    {
        // a very simple async method
        var result = await MyWebService.GetDataAsync();
        return result.ToString();
    }

If I try to dissect it myself, the main thread spawns to a new one in `MyWebService.GetDataAsync();`, but since the main thread awaits there, it waits on the result in `GetDataAsync().Result`. Meanwhile, say the data is ready. Why doesn&#39;t the main thread continue it&#39;s continuation logic and returns a string result from `GetDataAsync()` ?

Can someone please explain me why there is a deadlock in the above example?
I&#39;m completely clueless about what the problem is ...

An async/await example that causes a deadlock

How do I replace a git submodule with a different git repo?

Specifically, I have a submodule:

 - located at `./ExternalFrameworks/TestFramework` that points to a git repo `git@github.com:userA/TestFramework.git` 
 - I&#39;d like it to now point to `git@github.com:userB/TestFramework.git`.

The problem is that when I delete the submodule with the method described [here][1], then re-add it using the command     

    git submodule add git@github.com:userB/TestFramework.git

I get this error:

    A git directory for &#39;ExternalFrameworks/TestFramework&#39; is found locally with remote(s):
      origin	git@github.com:userA/TestFramework.git
    If you want to reuse this local git directory instead of cloning again from
      git@github.com:userB/TestFramework.git
    use the &#39;--force&#39; option. If the local git directory is not the correct repo
    or you are unsure what this means choose another name with the &#39;--name&#39; option.


  [1]: https://stackoverflow.com/questions/1260748/how-do-i-remove-a-git-submodule

How do I replace a git submodule with another repo?

I&#39;ve been doing some research on PHP Session Handling and came across the `session.gc_maxlifetime` value of 1440 seconds.
I&#39;ve been wondering why the standard value is 1440 and how it is calculated?
What is the basis for this calculation?

How long does it make sense to keep sessions? What min/max values for session.gc_maxlifetime would you recommend?
The higher the value, the more vulnerable the Web-App is for Session Hijacking, I&#39;d say.

Why is the standard session lifetime 24 minutes (1440 seconds)?

<p>I've been doing some research on PHP Session Handling and came across the <code>session.gc_maxlifetime</code> value of 1440 seconds.
I've been wondering why the standard value is 1440 and how it is calculated?
What is the basis for this calculation?</p>
<p>How long does it make sense to keep sessions? What min/max values for session.gc_maxlifetime would you recommend?
The higher the value, the more vulnerable the Web-App is for Session Hijacking, I'd say.</p>


I have the PTI Eclipse plugin installed.

There is a possibility to change `PDepend`, `CodeSniffer` and `UnitTest`

When I try right-clicking on any file I have a `Mess Detector` option as well but nothing happens when I click it. And after searching all configuration options, I and can&#39;t find any settings for `PHPMD`.

Does anyone know how to solve it?

PHP Mess Detector for Eclipse

I have got 2 joined tables in Eloquent namely themes and users.

**theme model:**

    public function user() {
      return $this-&gt;belongs_to(&#39;User&#39;);
    }

**user model:**

    public function themes() {
      return $this-&gt;has_many(&#39;Theme&#39;);
    }

My Eloquent api call looks as below:

    return Response::eloquent(Theme::with(&#39;user&#39;)-&gt;get());

Which returns all columns from theme (that&#39;s fine), and all columns from user (not fine). I only need the &#39;username&#39; column from the user model, how can I limit the query to that?

Laravel Eloquent: How to get only certain columns from joined tables

I am trying to make cells in first row are bold.

This is the method I have created for that purpose.

    function ExportToExcel($tittles,$excel_name)
     {
      $objPHPExcel = new PHPExcel();
      $objRichText = new PHPExcel_RichText();
      // Set properties
      $objPHPExcel-&gt;getProperties()-&gt;setCreator(&quot;SAMPLE1&quot;);
      $objPHPExcel-&gt;getProperties()-&gt;setLastModifiedBy(&quot;SAMPLE1&quot;);
      $objPHPExcel-&gt;getProperties()-&gt;setTitle(&quot;SAMPLE1&quot;);
      $objPHPExcel-&gt;getProperties()-&gt;setSubject(&quot;SAMPLE1&quot;);
      $objPHPExcel-&gt;getProperties()-&gt;setDescription(&quot;SAMPLE1&quot;);


      // Add some data
      $objPHPExcel-&gt;setActiveSheetIndex(0);

      $letters = range(&#39;A&#39;,&#39;Z&#39;);
      $count =0;
      $cell_name=&quot;&quot;;
      foreach($tittles as $tittle)
      {
       $cell_name = $letters[$count].&quot;1&quot;;
       $count++;
       $value = $tittle;
       $objPHPExcel-&gt;getActiveSheet()-&gt;SetCellValue($cell_name, $value);
       // Make bold cells
       $objPHPExcel-&gt;getActiveSheet()-&gt;getStyle($cell_name)-&gt;getFont()-&gt;setBold(true);
      }
      // Save Excel 2007 file
      $objWriter = new PHPExcel_Writer_Excel2007($objPHPExcel);
      //$objWriter-&gt;save(str_replace(&#39;.php&#39;, &#39;.xlsx&#39;, __FILE__));
      $objWriter-&gt;save($excel_name.&quot;.xlsx&quot;);
     }

The problem is in output excel file the cells are not bold.
 


PHPExcel Make first row bold

I want to create a config file for my PHP project, but I&#39;m not sure what the best way to do this is.

I have 3 ideas so far.

**1-Use Variable**

    $config[&#39;hostname&#39;] = &quot;localhost&quot;;
    $config[&#39;dbuser&#39;] = &quot;dbuser&quot;;
    $config[&#39;dbpassword&#39;] = &quot;dbpassword&quot;;
    $config[&#39;dbname&#39;] = &quot;dbname&quot;;
    $config[&#39;sitetitle&#39;] = &quot;sitetitle&quot;;

**2-Use Const**

    define(&#39;DB_NAME&#39;, &#39;test&#39;);
    define(&#39;DB_USER&#39;, &#39;root&#39;);
    define(&#39;DB_PASSWORD&#39;, &#39;&#39;);
    define(&#39;DB_HOST&#39;, &#39;localhost&#39;);
    define(&#39;TITLE&#39;, &#39;sitetitle&#39;);
**3-Use Database**

I will be using the config in classes so I&#39;m not sure which way would be the best or if there is a better way.

Creating a config file in PHP

I&#39;m using PDO to execute a statement with an `IN` clause that uses an array for its values:

    $in_array = array(1, 2, 3);
    $in_values = implode(&#39;,&#39;, $in_array);
	$my_result = $wbdb-&gt;prepare(&quot;SELECT * FROM my_table WHERE my_value IN (&quot;.$in_values.&quot;)&quot;);
	$my_result-&gt;execute();
	$my_results = $my_result-&gt;fetchAll();

&lt;br&gt;
The above code works perfectly fine, but my question is why this doesn&#39;t:

     $in_array = array(1, 2, 3);
        $in_values = implode(&#39;,&#39;, $in_array);
    	$my_result = $wbdb-&gt;prepare(&quot;SELECT * FROM my_table WHERE my_value IN (:in_values)&quot;);
    	$my_result-&gt;execute(array(&#39;:in_values&#39; =&gt; $in_values));
    	$my_results = $my_result-&gt;fetchAll();

This code will return the item whose `my_value` equals the first item in the `$in_array` (1), but not the remaining items in the array (2, and 3).

PHP - Using PDO with IN clause array

**EDIT 2**: TL;DR: **the answer was yes in 2013, but this flaw has been fixed**

By following the Getting Started instructions on vagrantup.com, I seem to end up with a virtual machine that is accepting SSH connections on port 2222 so that anyone can get root access to my VM and read my host working directory using the default credentials (username=password=vagrant or vagrant_insecure_private_key).

Is this true? If yes, why is it not considered a gaping security vulnerability? What if I had copied sensitive data to the VM?

**EDIT**: and for those who think anyone on the internet being able to read your sources and executing arbitrary code on your VM is not that bad, I recommend reading the &quot;Breaking out&quot; section in this blog post http://blog.ontoillogical.com/blog/2012/10/31/breaking-in-and-out-of-vagrant/

In a nutshell: running Vagrant &quot;as intended&quot; can also enable anyone to break into your host/development machine (e.g., by using a malicious git post-commit hook).



Vagrant insecure by default?

I&#39;m new with angularjs...

I read the docs, and completed the tutorial; i also tried something else by myself, and things start to make sense to me.

Now i wonder how to make a **safe authentication system**.

The easy part: no code, i will describe operations my code execute:

&gt; I&#39;ve a classic form: username, and password text input.
&gt; 
&gt; The user fills the form, and press ENTER. 
&gt; 
&gt; An ajax request starts, and the response is a JSON telling me
&gt; something like &quot;ok i know you&quot; or &quot;i don&#39;t know who you are&quot;.

**What i need now is to mantain the logged status of the visitor (or not logged) between the different views of my application.**

I read on the internet that, to achieve this objective, someone sets a variable ($scope.isLogged = true), someone else uses cookies; but javascript variables, and cookies can be easily edited using firebug, or similiar development tools.

... and finally the question:

So, **have you some suggestion to achieve a safe authentication system in an angularjs app?**

How to achieve a Safe (!) authentication system in an angularjs app?

I&#39;ve read tons of documentation related to this problem but I still can&#39;t get all the pieces together, so I&#39;d like to ask a couple of questions.

1. First of all I&#39;ll describe briefly the authentication procedure as I understand it, as I may be mistaken in that regard: A client starts a connection, which a server responds to with a combination of public key, some metadata and digital signature of a trusted authority. Then the client takes the decision if she trusts the server, encrypts some random session key with the public key and sends it back. This session key can be decrypted only with private key stored on the server. Server does this and then the HTTPS session begins.

2. So, if I&#39;m correct above, the question is how the man-in-the-middle attack can occur in such scenario? I mean, even if somebody intercepts the server (e.g. www.server.com) response with public key and has some means to make me think that he is www.server.com, he still wouldn&#39;t be able to decrypt my session key without the private key.

3. Speaking about the mutual authentication, is it all about the server confidence about the client identity? I mean, the client can already be sure that she is communicating with the right server, but now the server wants to find out who the client is, right?

4. And the last question is about the alternative to the mutual authentication. If I act as a client in the situation described, what if I send a login/password in the HTTP header after the SSL session is established? As I see it, this information can&#39;t be intercepted because the connection is already secured and the server can rely on it for my identification. Am I wrong? What are the downsides of such an approach compared with mutual authentication (only security issues are important, not the implementation complexity)?

SSL and man-in-the-middle misunderstanding

I am using Linux, Oracle10g.
I have created one user called test. and granted create session and select any dictionary permission to the same user.

i also granted sysdba and sysoper roles to the same users.

Now i want to display all the privileges and roles granted to the user. 
I found following query but it shows only create session and select dictionary privileges.

    select privilege 
    from dba_sys_privs 
    where grantee=&#39;SAMPLE&#39; 
    order by 1;

please help to resolve the issue.

Thanks

 

How to find the privileges and roles granted to a user in Oracle?

I have a small question.  I know that the %x format specifier can be used to read values from the stack in a format string attack.

I found the following code:

    %08x%08x%08x%08x

What does the 08 mean?  What is it doing exactly?  Thanks :)

C - The %x format specifier

I am using this to login the user in:

    def login_backend(request):
        if request.method == &#39;POST&#39;:
            username = request.POST[&#39;username&#39;]
            password = request.POST[&#39;password&#39;]
            user = authenticate(username=username, password=password)
            if user is not None:
                login(request, user)
                request.session.set_expiry(300)
                return HttpResponseRedirect(&#39;/overview/&#39;)
            else:
                return HttpResponseRedirect(&#39;/login_backend/&#39;)
        else:
            return render_to_response(&#39;login_backend.html&#39;, context_instance=RequestContext(request))

I want session to expire after 5mins thus I added `request.session.set_expiry(300)` in the view above. But the session is never expiring. What am I doing wrong?


How to expire Django session in 5minutes?

I am working a project using the AngularJS framework. I am pretty new to using this framework; in the past I have only worked with pure JavaScript and jQuery. The project is a kind of web designer application for a niche market.

As the user moves between pages while designing I want to maintain a session of all the changes they are making.

Now if the user signs in we load the session using data from the database. When the user clicks on save button we update the database with the session data. Someone told me that I can maintain session in Angular similar to backbone. Is this possible? If yes, can you please direct me to a tutorial that does not focus on directives or UI? If this is not possible are there other viable options?

Maintaining Session through Angular.js

In Rails 3, what is the difference between storing data in a cookie and storing data in a session, with the session store set to the default of CookieStore?

e.g.

    cookie[:foo] = &#39;bar&#39;

    # MyApp::Application.config.session_store :cookie_store, key: &#39;_myapp_session&#39;
    session[:foo] = &#39;bar&#39;

As far as I can tell, both end up stored in a client-side cookie.

When would you choose to use one over the other?

Thanks.

Cookies vs Sessions with CookieStore

In code-behind I set `Session` with some data.

    Session[&quot;usedData&quot;] = &quot;sample data&quot;;

And the question is how can I get the Session value(in my example; &quot;sample data&quot;) in javascript and set `Session[&quot;usedData&quot;]` with a new value?

Content Type	Original Author	Original Content on Stackoverflow
Question	Anna Völkl	View Question on Stackoverflow
Solution 1 - Php	CXJ	View Answer on Stackoverflow
Solution 2 - Php	Steve Terjeson	View Answer on Stackoverflow

Why is the standard session lifetime 24 minutes (1440 seconds)?

Php Problem Overview

Php Solutions

Solution 1 - Php

Solution 2 - Php

How do I replace a git submodule with another repo?

An async/await example that causes a deadlock

Attributions