<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Enavigo &#187; Web Development</title>
	<atom:link href="http://www.enavigo.com/tag/web-development/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.enavigo.com</link>
	<description>Take lemons, make lemonade or Jill and Yuval's Musings</description>
	<lastBuildDate>Fri, 20 Aug 2010 02:56:44 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>What browsers do when we ../ too much</title>
		<link>http://www.enavigo.com/2008/08/31/what-browsers-do-when-we-too-much/</link>
		<comments>http://www.enavigo.com/2008/08/31/what-browsers-do-when-we-too-much/#comments</comments>
		<pubDate>Mon, 01 Sep 2008 03:33:40 +0000</pubDate>
		<dc:creator>yuval</dc:creator>
				<category><![CDATA[Web Development]]></category>
		<category><![CDATA[../]]></category>
		<category><![CDATA[directory traversal]]></category>
		<category><![CDATA[web browsers]]></category>

		<guid isPermaLink="false">http://www.enavigo.com/?p=209</guid>
		<description><![CDATA[Part of my thesis work touches on the way web browsers behave and how they process the code that the almighty developers throw at them. Most browsers do not scoff at crappy code, they do try to make sense of it and try to put lipstick on a pig. While testing my code on my [...]]]></description>
			<content:encoded><![CDATA[<p>Part of my thesis work touches on the way web browsers behave and how they process the code that the almighty developers throw at them. Most browsers do not scoff at crappy code, they do try to make sense of it and try to put lipstick on a pig. While testing my code on my own family website, I noticed an interesting behavior: the PHP header file I was including in all pages, had a reference to an image</p>

<div class="wp_syntax"><div class="code"><pre class="html" style="font-family:monospace;">&lt;img src=&quot;../images/imageName.jpg&quot; /&gt;</pre></div></div>

<p><span id="more-209"></span><br />
This should work in any subdirectory &#8211; where ../ means everywhere except the home page: the &#8220;../&#8221; in the beginning of the <code>src</code> reference tells the browser to go one directory up and then go down to the images directory where the image is stored. On the home page, this should not work, as there is *no directory above* the root directory, where the home page resides. </p>
<p>Still, browsers DO display that image, despite the moronic code (mine!). In other words, when a browser reaches the root directory and a reference is made to a directory above, it will ignore that reference and try to descend to subdirectories under it. I tested this with multiple ../ referencing directories above the root and still, the browsers prevailed. </p>
<p>Therefore, appreciate thy browser (just a bit)&#8230; Thank you browser!</p>
<p><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.enavigo.com/wp-content/plugins/add-to-any/share_save_120_16.gif" width="120" height="16" alt="Share/Bookmark"/></a> </p>]]></content:encoded>
			<wfw:commentRss>http://www.enavigo.com/2008/08/31/what-browsers-do-when-we-too-much/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Newest member of club moron: Bank of America</title>
		<link>http://www.enavigo.com/2008/08/22/newest-member-of-club-moron-bank-of-america/</link>
		<comments>http://www.enavigo.com/2008/08/22/newest-member-of-club-moron-bank-of-america/#comments</comments>
		<pubDate>Sat, 23 Aug 2008 01:25:29 +0000</pubDate>
		<dc:creator>yuval</dc:creator>
				<category><![CDATA[Shopping]]></category>
		<category><![CDATA[Web Development]]></category>
		<category><![CDATA[bank]]></category>
		<category><![CDATA[Bank of America]]></category>
		<category><![CDATA[BofA]]></category>
		<category><![CDATA[consumerism]]></category>
		<category><![CDATA[credit union]]></category>
		<category><![CDATA[dumb dumb dumb]]></category>
		<category><![CDATA[Elite Rewards]]></category>
		<category><![CDATA[MBNA]]></category>

		<guid isPermaLink="false">http://www.enavigo.com/2008/08/22/newest-member-of-club-moron-bank-of-america/</guid>
		<description><![CDATA[I am not a fan of Bank of America by any stretch of the imagination. Any establishment gouging its clients with fees, more fees and then some fees again; where the whole profit notion is based on those fees &#8211; that&#8217;s motivation enough for me to seek refuge. The end to my relationship with BofA&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<p>I am not a fan of Bank of America by any stretch of the imagination. Any establishment gouging its clients with fees, more fees and then some fees again; where the whole profit notion is based on those fees &#8211; that&#8217;s motivation enough for me to seek refuge. </p>
<p>The end to my relationship with BofA&#8217;s predecessor in Massachusetts, Fleet, came when I had to pay $35 for them to process an incoming funds transfer. They make money off of holding the money, but for just keeping the computer on, I got to pay them for the service. I feel bad for the masses who hate the bank and stay with it for laziness. I am digressing&#8230;</p>
<p>I originally had a TWA frequent flyer card issued by MBNA, which after the airline folded became an &#8216;Elite Rewards&#8217; card. Elite Rewards is a mediocre, but free, program where you earn a point per dollar and then eventually redeem them for gifts and coupons, all at rather silly ratios. Still, it is free and that&#8217;s nice. The card also has what I feel is the best feature ever for a credit card: Shopsafe. Shopsafe&nbsp; is a service through which your credit card gets a one-use, limited duration, limited funds credit card number, linked to your real number. This is so brilliant because even if the virtual number is stolen, the damage is limited. In a world experiencing lax security at TJ Maxx where companies still insist on storing your card number for later use (don&#8217;t trust them!) &#8211; I would rather use a one-time number that will turn invalid immediately. Store that.</p>
<p>MBNA was taken over by Bank of America. Bummer but I would even stick with the devil to keep Shopsafe available. </p>
<p>Even Bank of America saw the utter genius of Shopsafe so they kept it alive, but never cared to drum up the marketing around this unique feature. Moronic. Then, I go to Elite Rewards&#8217; website tonight and find out that despite the fact that I ordered gift cards from them while it was still MBNA at my current address, the only address they have for me is the one from 2000. Elite Rewards is owned by Bank of America. I am a Bank of America customer. They send me bills at the correct address. Better yet, I even get my Elite Rewards statements at my home address. Yet when it comes to giving back to me my rewards, the effort is nil. </p>
<p>I would not mind that if the hideous website would allow you to update your address. Wrong again. You can update your profile. What is profile? Your <em>travel</em> profile. The word profile that you and I use on websites, well, that word does not apply. You just have to call them. Moronic again because call centers are expensive. Oh yeah, they pay for that with the FEES that their customers pay. Right&#8230;&nbsp; Even the &#8216;contact us&#8217; submission is moronic: if you do not have a complaint to report, you cannot submit your request. Oh, and guess what &#8211; if you DO have an issue with the delivery of the reward, THAT is where you get to enter your current address.</p>
<p>As the founding member and head moron, I welcome Bank of America&#8217;s Elite Rewards to Club Moron.</p>
<p><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.enavigo.com/wp-content/plugins/add-to-any/share_save_120_16.gif" width="120" height="16" alt="Share/Bookmark"/></a> </p>]]></content:encoded>
			<wfw:commentRss>http://www.enavigo.com/2008/08/22/newest-member-of-club-moron-bank-of-america/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
