https://helpx.adobe.com/security/products/magento/apsb23-50.html
The vulnerability with the highest CVSS score of 8.8 (CVE-2023-38218) states that it is an unauthenticated privilege escalation due to improper input validation.
If we look at the diff we see a number of security related changes. One of those changes is the following in Magento\Customer\Plugin\Webapi\Controller\Rest\ValidateCustomerData::validateInputData:
| <?php | |
| declare(strict_types=1); | |
| namespace MyNamespace\Sales\Model\Order\Pdf; | |
| use Magento\Sales\Model\Order\Pdf\AbstractPdf as MagentoAbstractPdf; | |
| /** | |
| * Drastically reduce size of PDF by changing fonts |
| <?php | |
| // Run with the URL pointing to a require-config.js as the first argument; | |
| // php identify.php http://magento2demo.firebearstudio.com/pub/static/frontend/Magento/luma/en_US/requirejs-config.js | |
| $content = file_get_contents($argv[1]); | |
| preg_match_all( | |
| '/(?P<quote>\'|")(?P<extension>[[:alnum:]]+_[[:alnum:]]+)\/js\/.+?(?P=quote)/m', | |
| $content, | |
| $matches |
| DELETE FROM core_config_data WHERE config_id IN (SELECT config_id | |
| FROM (SELECT DUPS.* | |
| FROM core_config_data ORIG | |
| LEFT JOIN core_config_data DUPS | |
| ON ORIG.path = DUPS.path AND (ORIG.value = DUPS.value OR (ORIG.value IS NULL AND DUPS.value IS NULL)) | |
| AND DUPS.scope != "default" AND DUPS.scope_id != 0 | |
| WHERE ORIG.scope = "default" | |
| AND ORIG.scope_id = 0 | |
| AND DUPS.path IS NOT NULL) as tmp) |
| <?php | |
| /* | |
| * Using a key => value pair with the yield keyword is | |
| * the cleanest method I could find to add identifiers or tags | |
| * to asynchronous concurrent requests in Guzzle, | |
| * so you can identify which response is from which request! | |
| */ | |
| $client = new GuzzleHttp\Client(['base_uri' => 'http://httpbin.org']); |
You can use tiny script m2dump it is doing the same thing as described below.
Estimate size of directories and exclude no needed.
du -sh ./* | sort -h
I have two Github accounts: oanhnn (personal) and superman (for work). I want to use both accounts on same computer (without typing password everytime, when doing git push or pull).
Use ssh keys and define host aliases in ssh config file (each alias for an account).
| System wide cpu usage: | |
| The numbers on the top left from 1 to 8 represents the number of cpu's/cores in my system with the progress bar next to them representing the load of cpu/core. As you would have noticed the progress bars can be comprised of different colors. The following list will explain what each color means. | |
| Blue: low priority processes (nice > 0) | |
| Green: normal (user) processes | |
| Red: kernel processes | |
| Yellow: IRQ time | |
| Magenta: Soft IRQ time | |
| Grey: IO Wait time |
| <?php | |
| /* | |
| OCP - Opcache Control Panel (aka Zend Optimizer+ Control Panel for PHP) | |
| Author: _ck_ (with contributions by GK, stasilok) | |
| Version: 0.1.7 | |
| Free for any kind of use or modification, I am not responsible for anything, please share your improvements | |
| * revision history | |
| 0.1.7 2015-09-01 regex fix for PHP7 phpinfo | |
| 0.1.6 2013-04-12 moved meta to footer so graphs can be higher and reduce clutter |
| <?php | |
| class HashTable { | |
| private $_array = array(); | |
| private $_size = 10000; | |
| public function __construct($size=0) { | |
| $size = (int)$size; | |
| if ($size > 0) { |
