I'm attempting to setup a query through php to a MySQL database. Within the query string I have placed functions and thus have used the dot (.) operator with string closures as seen below. The issue is that my query is not going through and try as i might I can't seem to make out the error. Thanks for any help in advance. :)   $query = "INSERT INTO `foo` (`ip`, `time`, `date`, `reason`) VALUES ('".strval(getUserIpAddr())."', '".$time."', '".$date."', '".$reason."')";
If user input is inserted without modification into an SQL query, then the application becomes vulnerable to , like in the following example:  $unsafe_variable = $_POST['user_input'];   mysql_query("INSERT INTO `table` (`column`) VALUES ('$unsafe_variable')");   That's because the user can input something like value'); DROP TABLE table;--, and the query becomes:  INSERT INTO `table` (`column`) VALUES('value'); DROP TABLE table;--')   What can be done to prevent this from happening?
How can you profile a Python script? and other coding contests often have a maximum time to run or people boast of how fast their particular solution runs. With Python, sometimes the approaches are somewhat kludgey - i.e., adding timing code to __main__.  What is a good way to profile how long a Python program takes to run? What does E mean in 9.0122222900391E-5? Conservation of energy and Doppler effect? Scala final vs val for concurrency visibility use of commas with conjunction reduction I wimped out in answering , dropping the commas and going to parentheses in this sentence, because I was not sure of the placement/correctness of commas in this construction. Now I'd like to get clear on how to use commas in this sentence (without reformulating it...no moving "poems", for example), and why. I'm not even sure that conjunction reduction is what causes the awkwardness here...  Wimp version:     I like Lord Byron's (and also enjoy a number of Percy Shelley's) poems.   Now I'm asking, if you use the comma, do you use both commas? It looks mighty strange with "poems" out there by itself:     I like Lord Byron's, and also enjoy a number of Percy Shelley's, poems.   ...Or is the comma even required? I don't like this, but is it correct?     I like Lord Byron's and also enjoy a number of Percy Shelley's poems. I am currently undergoing a full Apostol Calculus I reading, and with few chapters left I've began planning what other books to read. I was thinking about finishing both Apostol Calculus l and ll, and then read Apostol mathematical analysis. I'm not pretty sure whether these are the best books or if they will provide me with a strong math basis. I've already taken calculus i, ii, iii and linear algebra. The reason I've chosen Aapostol volume 1 and 2 is that I've heard they cover almost all the topics I've seen and will see in the next semester/s. I would appreciate if somebody could give me some advice about this. I really like to have a book that really gives me hard and challenging problems. I don't know whether to read Spivak Calculus book or not. Currently using ubuntu 15.10 on azure and installed the gnome and vnc4server latest version on ubuntu. Please find log file below:  Current VNC client screen:    $ cat .vnc/myhost1\:1.log    --cut-- VNCSConnST:  Server default pixel format depth 16 (16bpp) little-endian rgb565 VNCSConnST:  Client pixel format depth 8 (8bpp) colour-map Window manager warning: Invalid WM_TRANSIENT_FOR window 0x20000c specified for    0x20000b (I        nitialization error). Error org.freedesktop.DBus.Error.NameHasNoOwner: Could not get owner of name    'org.gnome.ze        itgeist.Engine': no such name amdxdg-su: no graphical method available for invoking '/usr/bin/amdcccle' as 'root'  $ cat .vnc/xstartup unset SESSION_MANAGER  [ -x /etc/vnc/xstartup ] &amp;&amp; exec /etc/vnc/xstartup [ -r $HOME/.Xresources ] &amp;&amp; xrdb $HOME/.Xresources  vncconfig -iconic &amp;  gnome-panel &amp; gnome-settings-daemon &amp; metacity &amp; nautilus -n &amp; gnome-terminal &amp;   How to get 24bit color with wide screen (Now I getting square screen in vnc client) On a similar note: when using Gauss' Law, do you even begin with Coulomb's law, or does one take it as given that flux is the surface integral of the Electric field in the direction of the normal to the surface at a point? I am working on binary classification problem, I try to evaluate the performance of some classification algorithms (LR,Decission Tree , Random forest ...). I am using  a cross validation technique (to avoid over-fitting) with AUC ROC as scoring function to compare the performance of the algorithms, but I am getting a weird results with Random forest and AdbBoost, I have a perfect AUC_ROC score (i.e. =1) despite the fact that the recall(TPR) and FPR of this algorithms are different from 1 and 0 respectively .  def FPR(y_true, y_pred):     tn, fp, fn, tp = confusion_matrix(y_true, y_pred).ravel()     result = fp / (fp+tn)     return result def FNR(y_true, y_pred):     tn, fp, fn, tp = confusion_matrix(y_true, y_pred).ravel()     result = fn / (tp+fn)     return result FPR_scorer = make_scorer(FPR) FNR_scorer = make_scorer(FNR)     def get_CrossValResults2(model,cv_rst,bestIndx):     best=pd.DataFrame.from_dict(cv_rst).iloc[bestIndx]     roc=&quot;{:.12f}&quot;.format(best['mean_test_roc_auc'])     acc =&quot;{:.0%}&quot;.format(best['mean_test_accuracy'])     prec =&quot;{:.0%}&quot;.format(best['mean_test_precision'])     rec =&quot;{:.0%}&quot;.format( best['mean_test_recall'])     f1 =&quot;{:.0%}&quot;.format(best['mean_test_f1'])     r2=&quot;{:.2f}&quot;.format(best['mean_test_r2'])     g_mean=&quot;{:.2f}&quot;.format(best['mean_test_gmean'])     pr_auc=&quot;{:.8f}&quot;.format(best['mean_test_pr'])     fnr=&quot;{:.0%}&quot;.format(best['mean_test_fnr'])     fpr=&quot;{:.0%}&quot;.format(best['mean_test_fpr'])     rst = pd.DataFrame([[ model, acc,prec,rec,fpr,fnr,f1,roc,pr_auc,g_mean,r2]],columns = ['Model', 'Accuracy', 'Precision', 'Recall','FPR','FNR', 'F1-Score','ROC_auc','PR_auc','gmean','r2'])     return rst        cross_val_rst = pd.DataFrame(columns = ['Model', 'Accuracy', 'Precision', 'Recall','FPR','FNR', 'F1-Score','ROC_auc','PR_auc','gmean','r2'])              scoring = {'accuracy':'accuracy','recall':'recall','precision':'precision','fpr':FPR_scorer,'fnr':FNR_scorer,'f1':'f1' ,'roc_auc':'roc_auc','pr':'average_precision','gmean':Gmean_scorer,'r2':'r2'}     param_grid = {'n_estimators': [200],               'max_depth': [80,90],               'min_samples_leaf': [2,3, 4],             'min_samples_split': [2,5,12],             'criterion': [ 'gini'],              'class_weight' : [class_weights], 'n_jobs' : [-1]}  clf = GridSearchCV(RandomForestClassifier(class_weight=class_weights), param_grid, cv=kfold,scoring=scoring,refit=refit)#Fit the model bestmodel = clf.fit(X,Y)       cross_val_rst = cross_val_rst.append(get_CrossValResults2(model='Random Forrest',bestIndx=bestmodel.best_index_,cv_rst=bestmodel.cv_results_),ignore_index=True) Is indefinite integration non-linear? Could you tell me how to prove that if two series $ \sum_{n=0} ^{\infty}x_n, \sum_{n=0} ^{\infty} y_n$ are convergent, then $\sum_{n=0} ^{\infty}(\alpha \cdot x_n + \beta \cdot y_n)$ is also convergent and its sum equals $\alpha \cdot \sum_{n=0} ^{\infty} x_n + \beta \cdot \sum_{n=0} ^{\infty} y_n$? Correct plural form of a noun preceded by "zero" When using zero as a quantifier, is it correct to use the singular form on the object of the quantifier, or the plural form?  It sounds confusing when I put it that way, but what I mean is: Which is correct?   Your password expires in 0 days. Your password expires in 0 day.   Essentially I suppose I'm asking, does "singular" mean "one" or "the opposite of more than one", as zero is not "plural" in the traditional "more than one" sense?  I'm pretty sure "days" sounds correct, but I can't be sure. What's the best order to read HP Lovecraft's novels? I've always been interested in the Cthulhu mythos and I wanted to get into HP Lovecraft's books. What is the best book to start with? I know that Cthulhu was first mentioned in Lovecraft's Call of Cthulhu in 1928. Is that the best book to start with? Should I just start reading Lovecraft's books from his first publication onward? Why is the ROC curve two-dimensional instead of three-dimensional? I'm a big fan of the votes tab in the profile page, as it allows me to keep track of my usage of the moderation tools. Or at least it would, if votes cast on deleted posts didn't unceremoniously disappear.  Although I don't like it, I can live with that for (up|down|close|reopen)-votes. In fact, I didn't even notice it before gaining 10k rep on SU. But it renders the deletion and undelete subtabs pretty much useless, since it hides – by design – all successful deletion and (yet) unsuccessful undeletion votes.  @slhck suggested in an answer to  the following rationale for this behavior:     While this sounds strange, it's just a result of the … let's call it "Stack Exchange policy" of not showing lists of deleted posts to non-moderators. In my opinion this policy is a little incoherent, because your flagging record shows deleted posts [...]   Actually, the flagging record shows deleted posts to pretty much all users. So does the reputation tab of the user profile (as long as you earned/lost reputation on that post).  If that is in fact the reason, why can't a 10k user see a list of posts he voted on (and thus, already saw)? I installed the latest pgAdmin 4 (v2.1) but I found out that (), for the moment, the only way to establish a connection through an SSH tunneling is using another outside process, an  says:  I setup a tunnel as follows: ssh -f dpage(at)hostname(dot)enterprisedb(dot)com -L 5999: hostname.enterprisedb.com:5432 -N  (...) I was running on Mac, but the same procedure should work on Linux. On Windows, there's a tunnelling app in Putty iirc, but I don't know how to use it offhand.  I have found a simple . The connection is established but it seems, when I try to connect through pgAdmin it fails or is refused (using 127.0.0.1:3306 or 127.0.0.1:5432 as the tunnel's destination). Why? Let $X \sim Bin(n,p)$ show that $X/n \nsim Bin()$ Let $X \sim Bin(n,p)$   Part A.  Show that the argument      "Then $X/n \sim Bin()$ with $E[X/n]=p$and $Var[X/n]=pq/n$"    is false.   My book says we can prove this result using a moment generating function. But to me it makes no intuitive sense: We have Bin-distributed RV $X$ and if we rescale it with $1/n$ of course it will be Bin-distributed.  And we know from standard formulas that $E[aX]=aE[X]$ and $Var[aX] = a^2Var[X]$ so I think the argument is correct.   (For full disclosure, the argument we should falsify according to the book is "Let X be a binomial random variable with mean np and variance np(1−p). Show that the ratio X/n also has a binomial distribution with mean p and variance p(1−p)/n." But I think the argument is correct. )    Ok, now I get part A. Here is Part B. Prove it using the moment generating function of $X/n$.   Attempt: I get $$m_X(t)=E[\exp(tX/n)]=(m_X(t))^{1/n}$$ How to check if a shell is login/interactive/batch I think I understand the differences between an interactive, a login and a batch shell. See the following links for more help:    (from the sister site: )  (from A User's Guide to the Z-Shell)   My question is, how can I test with a command/condition if I am on an interactive, a login or a batch shell?   I am looking for a command or condition (that returns true or false) and that I could also place on an if statement. For example:  if [[ condition ]]    echo "This is a login shell" fi What would be an appropriate opposite of "exceed"? What is a "callback" in C and how are they implemented? From the reading that I have done, Core Audio relies heavily on callbacks (and C++, but that's another story).    I understand the concept (sort of) of setting up a function that is called by another function repeatedly to accomplish a task.  I just don't understand how they get set up and how they actually work.  Any examples would be appreciated.