In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:
http://techcrunch.com/2007/08/11/facebook-source-code-leaked/
It became a big deal:
http://www.techmeme.com/070812/p1#a070812p1
The two files are index.php (the homepage) and search.php (the search page)
| #in your view | |
| <%= form_for @post, remote: true do |f| %> | |
| #form inputs | |
| <% end %> | |
| #then in your controller | |
| def do_something |
| //= require bootbox.min |
| body{ | |
| font-family:Helvetica,Arial; | |
| background:#f4f4f4; | |
| } | |
| h2{ | |
| font-weight:normal; | |
| } | |
| #invite{ | |
| position:relative; | |
| background:#fff; |
| <html> | |
| <head> | |
| <title> | |
| Demo Cross Domain | |
| </title> | |
| <!-- Le styles --> | |
| <link href="//netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> | |
| <style> | |
| body { |
| class ApplicationController < ActionController::Base | |
| protect_from_forgery | |
| before_filter :cors_preflight_check | |
| after_filter :cors_set_access_control_headers | |
| # For all responses in this controller, return the CORS access control headers. | |
| def cors_set_access_control_headers | |
| headers['Access-Control-Allow-Origin'] = '*' |
| class ApplicationController < ActionController::Base | |
| ... | |
| #Problem: | |
| #In rails 3.0.1+ it is no longer possible to do this anymore; | |
| # rescue_from ActionController::RoutingError, :with => :render_not_found | |
| # | |
| #The ActionController::RoutingError thrown is not caught by rescue_from. | |
| #The alternative is to to set a catch-all route to catch all unmatched routes and send them to a method which renders an error | |
| #As in http://techoctave.com/c7/posts/36-rails-3-0-rescue-from-routing-error-solution |
| =============================================================================== | |
| Help for Interactive Commands - procps version 3.2.7 | |
| Window 1:Def: Cumulative mode Off. System: Delay 3.0 secs; Secure mode Off. | |
| Z,B Global: 'Z' change color mappings; 'B' disable/enable bold | |
| l,t,m Toggle Summaries: 'l' load avg; 't' task/cpu stats; 'm' mem info | |
| 1,I Toggle SMP view: '1' single/separate states; 'I' Irix/Solaris mode | |
| f,o . Fields/Columns: 'f' add or remove; 'o' change display order | |
| F or O . Select sort field |
| require 'roo' | |
| # Spreadsheet courtesy of the A List Apart 2010 Web Design Survey: | |
| # http://www.alistapart.com/articles/survey2010 | |
| workbook = Excel.new('a-list-apart-web-design-survey-sample.xls') | |
| # Set the worksheet you want to work with as the default worksheet. You could | |
| # also iterate over all the worksheets in the workbook. | |
| workbook.default_sheet = workbook.sheets[0] |
