[deleted]
The verbiage is sometimes used to exaggerate the condition of being stupid. I tend to enjoy that sort of flamboyant post on occasion , but others don't have much tolerance for it. YMMV. [EDIT] Original poster took the "drug usage" vernacular a bit too literally.
How not to check the validity of an email address
21–30 of 243 posts
Re: How not to check the validity of an email address
#22I've had something similar delivered to me on a project I hired out. The most frustrating part was not the code but the developers reaction to why it was so bad. He had no idea what the big deal was and thought I was being nitpicky. Worse yet, was an initial claim that it was more efficient to do it that way. That was followed up with a claim that doing it differently wasn't possible. Needless to say, I stopped worki…
This is a classic excuse... so what if it leaks e-mail addresses (who looks at source code anyway?), makes clients wait (at least server's CPU is intact), and is just plain illegible (there is always a debugger if you want to fix a bug).
Re: How not to check the validity of an email address
#23Clearly they should have optimized this by stripping the @mail.mcgill.ca on the server side before serving the list.
Re: How not to check the validity of an email address
#24McGill seems to use a LMS branded as "myCourses", apparently the newest label Blackboard is using for it's "Learn" line.
McGill switched to 'Desire2Learn' last summer as Blackboard no longer supports 'webCT', I think (access to old courses hosted on webCT is now very limited). 'myCourses' was the branding chosen by McGill... I think now they just call it 'myCourses2', after the switch.
UPDATE: they //did// get sued, but won, and the above patent is invalid now. Way to go! http://en.wikipedia.org/wiki/Blackboard_Inc.#Legal_matters
Re: How not to check the validity of an email address
#25Clearly they should have optimized this by stripping the @mail.mcgill.ca on the server side before serving the list.
Clearly you must be joking. They should've kept the emails on the server-side the entire time. Then would be a matter of validating the request by searching the email in let's say SQLite. Would it be done? Probably not. But at least it'd be a lot stronger than sending sensitive data to clients every damn request.
Re: How not to check the validity of an email address
#26Re: How not to check the validity of an email address
#27 if (!Boolean.FALSE.equals(aBoolean)) {
// ...
}
I was pretty baffled.Re: How not to check the validity of an email address
#28[deleted]
Re: How not to check the validity of an email address
#29Earlier quoted context omitted.
Clearly you must be joking. They should've kept the emails on the server-side the entire time. Then would be a matter of validating the request by searching the email in let's say SQLite. Would it be done? Probably not. But at least it'd be a lot stronger than sending sensitive data to clients every damn request.
You're missing the sarcasm :P
Re: How not to check the validity of an email address
#30I've had something similar delivered to me on a project I hired out. The most frustrating part was not the code but the developers reaction to why it was so bad. He had no idea what the big deal was and thought I was being nitpicky. Worse yet, was an initial claim that it was more efficient to do it that way. That was followed up with a claim that doing it differently wasn't possible. Needless to say, I stopped worki…
>The most frustrating part was not the code but the developers reaction to why it was so bad. He had no idea what the big deal was and thought I was being nitpicky. This is always the worst. I've had experiences like that on many an occasion, where the person is simply like "huh? what's wrong?" You can't really fix that level of sheer incompetence, ignorance, and arrogance all wrapped into one.
Sure you can. You can tell them why it's wrong and point them at reading material to fix it. Fixes incompetence and ignorance, and if you're lucky, arrogance. All wrapped into one.
Everyone had to start somewhere.