http://userscripts.org/scripts/show/162656

It’s a robust script run inside GreaseMonkey (for Firefox) or TamperMonkey (for Chrome), which are basically environments to run hack scripts for different websites. The script does not work on non-recent browsers and on Internet Explorer. I suggest using fresh Google Chrome, as the script is CPU intensive and Google Chrome is the best for rapid Javascript evaluation.

After installing the script in your grease environment, and enabling it (you should disable it after you’re done, as it messes with facebook dialogs), head to your friends edit page (https://facebook.com/friends/edit), and you should see Fast Remove buttons next to every active friend’s picture. The edit friends page of facebook only displays a handfull of friends, but scrolling to the bottom adds another handfull to the page. You can put some adequately heavy object on your Page Down keyboard button, and leave it be until all friends are listed.

Now the first thing to do, is delete all your inactive friends (people who have disabled their facebook accounts). 90% of them never get back to facebook, and those who do, can go ahead and add you again. From the TamperMonkey (or equivalent) menu, click on FacebookDeleteX – Remove Inactive  submenu. A confirmation box will appear, saying how many inactive friends found, and if you’re sure to delete them all. After clicking yes, all deletions are queued and another dialog gives you some information.

At this step, you should wait (or you can start doing the fast removal – next step). Because each removal requires 4 steps (requests to be made by the script), each one of them takes some time to accomplish. Closing the page will cancel them. If you’re removing 1000 inactive friends, you should wait at least 1000×3 seconds (or an hour). You can always check your number of friends before starting this, and check it again in another window and see when it reaches the desired amount (total_number – inactive_number), then close this window.

The final step, is manual fast-removal of your friends. In this step, you have to click on each Fast Remove button, next to people who you don’t want anymore. Don’t spend too much time deciding if something belongs or not, just press Fast Remove. Later you can add them again easily.

Every time you press Fast Remove, it takes a second or so for the requests to be handled and for the button to disappear (if you’ve a lot of requests queued from previous step, it can take a lot. Just click them once and proceed to the next one, or open another window and do this there) . Right after that, a dialog box pops up informing you that the friend was removed. This script will automatically close these dialogs once every second.

If anything seemed not to work with the script, don’t hesitate to contact me for a fix. Happy facebooking.

P.S this script takes 60% CPU on a MacBook Pro Retina (which is equivalent of 4 regular PCs).

First of all, Happy Nowruz! Tomorrow is officially the new Jalali year‘s start. Best of wishes to everyone.

I’ve been working on an elegant design for a new PHP Widget library for some time now. It is intended to provide a Pull MVC feature for jframework. As you know, MVC provides a separation of concerns, allowing different expertise people to work separately on their designated part of the application. The model part (which is the business logic of the application, plus some of the solution domain) is usually very re-usable and employs object oriented to great extent. The controller part, is mostly lightweight and consists of code usually not re-usable.

The problem resides in the view part of the MVC. Views are mostly HTML/CSS that dump some variables and arrays. Sometimes templates are employed in views, to reduce repeated code, but still most of the views are repeated code. Imagine two different areas of a web application, both providing tabular data of different origin. 70% of their code is the same but due to difference of data nature, usually no re-using is done.

I’m not gonna talk about benefits of code re-use here, but you get the picture.

Pull MVC, in contrast to Push MVC, is a system in which the view asks for content to render themselves by pulling them in, instead of pushing the content directly on the screen. It is usually provided by widget systems, and is much more object oriented. The problem with Pull systems is that view is usually designed and not developed, by a graphical designer who is adept in HTML and CSS.

The first thing I wanted to do, was to preserve maximum simplicity. You can not expect a library to require redundancy to provide code re-use. I do not like libraries that take control of everything and don’t let developers to change their mechanics. So I wanted to replace this practice:

$form1 = new jForm();
$form1->setName("form1");
$form1->setMethod("post");
$button1 = new jFormButton("form1");
$button1->setName("button1");
$button1->setLabel("Push Me!");

To a single liner elegant approach:

$form1 = new jForm(jForm::Method_Post);
$button1 = new jFormButton($form1, "Push Me!");

So the first thing I needed to be done, was for jForm (or any other jWidget instance) to know what variable it is assigned to – in this case $form1 – and name itself after it. The name is actually used a lot in the generated HTML code, for validation, for CSRF protection, for HTML form element names, for HTML IDs, for CSS classes and a lot more.

The Questions

wget -r ftp://user:pass@host.com/folder/file.zip

[options] verbose = 1 delete = False [retriever] type = SimpleIMAPRetriever server = sourceMailServer.com username = srcUser password = srcPass [destination] type = Maildir path = ~/imap/domain.com/srcUser/Maildir/

mutt -f imap://user@srcHost.com

PHP Serialization Pollution Lab

https://abiusx.com/lab/hacking/serialize.src.php

Challenges

How to prevent it

if (jURL::HTTPHost()==”localhost”) reg(“app/state”,”develop”); elseif (strpos(jURL::HTTPHost(),”jframework.info”)!==false) #replace this with your site reg(“app/state”,”deploy”); elseif (php_sapi_name()==”cli”) reg(“app/state”,”develop”); else trigger_error(“No running state determined.”);