I have a script that enables artists to edit their profile. One thing is proving to be a problem. I cannot how to sanitize what the user has entered. Everytime a ' is put in the data is not shown as it cuts the php short.   Here is my form for bio:  username = $_SESSION['username'];     $pass = $_SESSION['password'];     include ("../database.php");    $result = mysql_query("SELECT * FROM members WHERE username='$username' AND     password='$pass' AND artist='Y'");  while($row = mysql_fetch_array($result)){         echo '&lt;div id="artistsbio"&gt;&lt;form action="phpscripts/artistupdate.php" method="post"&gt;        &lt;textarea name="bio" rows="10" cols="80" name="bio" value="'. $row['bio']. '" class="bio"&gt;'. $row['bio']. '&lt;/textarea&gt;&lt;br&gt;        &lt;div id="probwarn"&gt;&lt;t1&gt;Everything is still in the beta stage so there are bound to be a few problems. If you spot one please &lt;a href="mailto:artists@newbornsounds.co.uk"&gt;&lt;b&gt;tell us about it.&lt;/b&gt;&lt;/a&gt;&lt;/t1&gt;&lt;/div&gt;         &lt;/div&gt;';   Here is the script that uploads to database;  $username = $_SESSION['username'];      $pass = $_SESSION['password'];       $artistname = $_POST['artistname'];      $bio = $_POST['bio'];     include ("../database.php"); mysql_query("UPDATE members SET  bio='$bio', artistname ='$artistname' WHERE username='$username' AND password='$pass'  AND artist='Y'");  $artisturl = mysql_query("SELECT * FROM members   WHERE username='$username' AND password='$pass'  AND artist='Y'");  while($row = mysql_fetch_array($artisturl)){ if (isset($_POST['submit'])) {header("location:../artists/artist.php?    artist=".$row['artistname']."");} }  } else echo'&lt;p1&gt;You must be an artist to use these features.&lt;/p1&gt;';   Yes, I am aware i need to upgrade to mysqli and I am aware I need to use prepared statements. Need to sort this out first though.
If user input is inserted without modification into an SQL query, then the application becomes vulnerable to , like in the following example:  $unsafe_variable = $_POST['user_input'];   mysql_query("INSERT INTO `table` (`column`) VALUES ('$unsafe_variable')");   That's because the user can input something like value'); DROP TABLE table;--, and the query becomes:  INSERT INTO `table` (`column`) VALUES('value'); DROP TABLE table;--')   What can be done to prevent this from happening?
How do I start Nautilus as root? I've got a problem with Nautilus in Ubuntu 12.04 LTS.  When I run the command gksu nautilus /, the password ask box appears and I type my super-user password, then the password box disappears and Nautilus is not opened.  When I try to open Nautilus as a normal user in with the command nautilus, the folder is opened.  When I try in terminal   $ sudo nautilus   I got the following error  $ sudo nautilus /  ** (nautilus:8523): WARNING **: Command line `dbus-launch --autolaunch=2c8ce9b7da2257c2609b749700000007 --binary-syntax --close-stderr' exited with non-zero exit status 1: Autolaunch error: X11 initialization failed.\n Could not parse arguments: Cannot open display:   How can I fix this error? I am looking to sell and buy a house. But with the current market being as crazy as it is (houses are selling fast for sometimes 150,000 over asking), I'm afraid if we sell first, we could be stuck without a new house. Or stuck settling on or over-paying for something and wishing we never sold at all. I'm wondering if it's possible to buy first. What is the best way to secure my next house before selling my current house without getting locked into a B-lender mortgage or risking too much?  I know there would be some risk putting an offer on a new house without knowing how much the current house will sell for, or the risk we don't sell the current house before the new house closes. I'm also afraid conditional offers will not be considered. Are there any other options?  (We do have a mortgage on the current house, but because the market has gone up so much there is also a good chunk of equity.) How to prove that the ideal $I=(x^3-y^2)$ in $k[x,y]$ is prime?    I have constructed a map from $k[x,y]$ to $k[t]$, which maps $x$ to $t^2$, and $y$ to $t^3$. Then, I want to show that the kernel is exactly $I$. But the difficulty is that how to prove the kernel is contained in $I$.  Could you help me? Thanks a lot! My professor proved that the kernel is a normal subgroup under a homomorphism f by saying. Let $h\in H$  by applying f to it  $f(ghg^{-1})=f(g)f(h)f(g)^{-1}=e $  My question is how is this a proof that the kernel is normal. What is the reason we apply f to it ? By applying f dont we just prove that $f(ghg^{-1})$ is normal ? InDesign: How do I automatically align the bottoms of different columns of text boxes to the same height as the one with the most text? In InDesign, I have some filled text boxes, sized by columns, with the one on the left being three columns wide.   The wide text box is most likely to contain the most text (it's an invoice template).  I will use the 'Fit frame to content' button on the Selection Tool toolbar for automatically vertically resize it to fit the containing text.  How do I make the other three smaller text frames automatically adjust to the same height as the big (and longer) text box? Only squares instead of letters and numbers are displayed in my calculator and other apps in Ubuntu 18.04 is there a way to get the option "Organize Desktop by Name" in Ubuntu 19.10 same as in 18.04? the option in Ubuntu 18.04 is "Organize Desktop by name"    But there is no option available in Ubuntu 19.10 I've seen lately that new question editing is stored somewhere for later use if we wander off the new question without posting it and then return back to the page. Which is a good functionality addition in it's own right.  What I'd like to also have is the Discard this draft functionality that would clear form data and forget it. Somehow we find an answer in the meantime and the question isn't valid any more.  So having a Discard saved draft or something similar would be a nice contra-functionality to auto-save to remove stored data. The way it's implemented now seems too hidden hidden and unpredictable to users.  Additional edit  When adding hidden auto functionality usually means creating the opposite as well by either giving the possibility to preference of not having automatism at all or giving the possibility to clear what's been auto saved.  Let's see how GMail doesn't work (and I think we all agree that from UX perspective it does the job as expected:   User clicks Compose message User starts writing a new email message User decides to not send the message and checks their inbox User clicks Compose message again A clean form is presented to user (old one being part of drafts)   I'm not suggesting we should have something like Saved drafts but we surely should have the possibility to clear previous question draft.  Since this new functionality was introduced I should point out that I would use the discard functionality more frequently than the saved one. I do welcome saving messages, but discarding of saved drafts is anything but a rare situation one might want to do. It wouldn't be a problem if this was a 1% against 99%. To me it's more like 50/50.  Best possible solution  When providing saved drafts there should (from the UX perspective) be the opposite functionality as well. Namely discarding of it. But first thing we should be asking ourselves is:    do users more frequently need pre-filled saved question draft or do users more frequently need empty form with the possibility to populate it with a saved draft   User testing should provide the usage frequency between the two and the one that's more likely to happen (my guess is that there would be a big difference between the two) should be implemented. So one of these:   Pre-populate question fields with saved draft on question form load, while also providing a button to clear the draft and start writing anew without the need to manually clear all the fields (which would be the optimal solution in case of a single field form) Question form should always load empty while also having a button that would pre-populate it with a saved draft.   I think this would be the best consensus related to saved question drafts and their usage. But as we've seen this issue has been swept under the rug for an indefinite time. Momentum is defined by the product of mass and velocity. Now a projectile out of a gun has to have high velocity to penetrate a human body, as its mass isn't significant. But to reach this velocity, due to inertia/the law of energy conservation, momentum on both sides is to be equal. As there is strong negative acceleration in the opposite direction of the bullet, it should result in a strong force in the opposite direction of the bullet ($F = m*a $).  Therefore I wonder why shooting a bullet with a handgun is not ripping your hand apart. My distribution is normal; Kolmogorov-Smirnov test doesn't agree I have a problem with the normality of some data I have:  I've done a Kolmogorov test which says it isn't normal with p=.0000,  I don't understand: the skewness of my distribution =-.497, and the kurtosis =-0,024  Here is the plot of my distribution which looks very much normal ...  (I have three scores, and each one of this scores isn't normal with a significant p-value for the Kolmogorov test ... I really don't understand ) My keyboard has no "media" keys; can I control media without them? My USB keyboard does not have "media" keys -- that is, dedicated keys for play, stop, next, prev, volume up/down, etcetera.    For the sake of this question, I would prefer not to install additional software if I can avoid it.  Is it possible to issue some standard key sequence on a generic USB keyboard that emulates these play, stop, etc. multimedia keys?  Like Ctrl+Alt+Shift+F12 or something obscure like that? Calculate Azimuth from polygon in GeoPandas Is there a simple way / ready-to-go function to calculate the azimuth of 2D-polygons in a GeoPandas DataFrame? My goal is to eventually compute azimuth angles of building footprints. Most of the functions I have found explicitly calculate the azimuth for a line, which is not what I am looking for. I have been thinking along the following lines to calculate the azimuth of a polygon using its normal vector (2 dimensions). Is my approach going into the right directions? I am a bit unsure how to adjust for the quadrants, also my results seem a bit odd. azimuth = 90 - math.degrees(math.atan2(normal[1], normal[0])) if azimuth &gt;= 360.0:     azimuth -= 360.0 elif azimuth &lt; 0.0:     azimuth += 360.0 html - how to remove right margin completely? error in python d not defined. What is the limit of:  $$\lim_{n\to \infty} \frac{n^1+\dots+n^n}{1^n+\dots+n^n} = ?$$  I did some computation with big numbers, I guess it is in the interval $\left(\frac{1}{2},1\right)$. How to make a process invisible to other users? How could you launch a process and make it invisible to the top command? The process is started by a normal user (not root), and should not be visible to other normal users. I play on the DivineJourney modpack with a friend, but he wants to constantly spawn things in. Is there any way to allow him to be able to use the teleport command, but not be able to spawn in items?  I've already locked the NEI mode to Recipe.  I've looked around for a mod for plug-ins for Forge (as thats what the server is on) but I couldn't find anything thats up to date. I found Sponge, but thats for 1.8+, and I need 1.7.10. Contradiction between law of conservation of energy and law of conservation of momentum? Yesterday, while studying a simple question, a rather strange doubt hit my mind:     Consider a ball of mass $m$ moving with velocity $v$ that collides with a wall in a perfectly elastic collision and rebounds back with the same velocity. Taking the direction of initial motion of the ball as positive, the change in momentum of the ball is $-2mv$ and the wall is clearly at rest.   So, in order to obey the law of conservation of momentum, the wall must gain a momentum of $2mv$.  Now, this itself confused me a lot. I then applied the law of conservation of kinetic energy to this situation, and clearly the magnitudes of the initial and final velocities of the ball are equal, so kinetic energy of the ball is conserved and hence the final kinetic energy of the wall must be zero in order to conserve energy.  Now, this contradicts with the law of conservation of momentum, which says that the wall must gain momentum of $2mv$.  One more point: If we are talking about a wall then it is an important fact, which must be considered, that the wall is fixed on earth and so the mass of the wall is equivalent to that of earth, say $M$. If the law of conservation of momentum is applied now then we get velocity of the wall, say $V=2mv/M$ which is no doubt an extremely small value. But, the law of conservation of energy strictly says that the velocity of the wall must be exactly zero, not even the smallest value is allowed (theoretically speaking).   Please clarify this and correct me anywhere if I'm wrong. I have tried my best to make it clear what I want to ask :). Isomorphisms preserving integral domains and fields Let $R \simeq S$ be isomorphic commutative rings with unity. Prove the following:  a). If $R$ is an integral domain then $S$ is an integral domain.  For this, I said that If I let $f: R \to S$ be an isomorphism and $(R, + , \circ), (S, \oplus, \ast)$, then let $x, y\in R$,  such that $x \circ y = 0_R$, because $f$ is an isomorphism, $f(x \circ y) = f(x) \ast f(y) = f(0_R)$. If I let $R$ be an integral domain then, as per the definition $R$ is commutative, has unity, and no zero divisors.   So $f(x \circ y) = f(x) \ast f(y) = f(0_R)$ where we have either $f(x \circ y) = f(0_R) \ast f(y) = f(0_R)$ or $f(x \circ y) = f(x) \ast f(0_R) = f(0_R)$.   Since $f$ is an isomomorphism, let $s = f(x), t = f(y)| s,t \in S$. Then $s \ast t = f(0_R)$. By definition, $S$ also has unity so $0_S$ exists. If we map $0_R \to 0_S$. Then either $s = 0_S$ or $t = 0_S$.   So then, since $S$ has unity, is commutative, and has a no zero divisors as we showed above, it is also an Integral domain.  I'm not sure I have this correctly.  b). If $R$ is a field then $S$ is a field. I don't really understand how to do this one. Since $S$ is an integral domain, it has a $0_S$. So I need to show that $S$ distributes $\ast$ over $\oplus$.  Any help with these is appreciated How to support different screen size in android