Not co-worker, but class mate. Specifically, my group mate.
Boy, I could fill an entire book with the “what the fuck” moments.

Here, the prior question of his was “why is this happening?”

Then we got this lovely snippet:

…which he later turned into this - still not knowing what is wrong with it.

And then my favourite - pièce de résistance. A button that is supposed to update an entry in the DB that does jack shit.

I’m so glad that this Friday it’s all over and 80% of the grade is an individual work. Even if it doesn’t compile due to my colleague’s code - I don’t care! :)

Lulz. Your colleague should probably not try a developer career...

You need to get somewhere that doesn't use webforms, buddy.

I mean, the login works right... sure it's not secure but that's not a thing taught or graded on so what's it matter.

I'm going to go hang your friend 🫠

@C0D4 How it's not secure ? It depends on Encrypt I guess. Personally, I'm usung BCrypt. With option of 11.

@C0D4 here.

@NoToJavaScript hold up.
I was referring to @athlon's rant screen shot, the username is the only value sent to the Db, based on what I'm seeing.

Using bctypt without a hash is one thing. Actually comparing the hash is another 😂

@NoToJavaScript well, the encrypt does not accept anything but password.

That means its not using any salt, hence not secure.

@Voxera That actually has been modified post screenshot. Now all users have an unique salt.

@C0D4 from what you actually see, he’s trying to run “CheckLogin” void (which should either be a book, or preferably a Login object btw) by putting Login object into function that accepts two strings - and then he asks what’s wrong!

Buddy, the solution is staring in your face - figure it out!

Android project?

@johnmelodyme WinForms

@athlon you don't need anything beside password. For example Bcrypt manages salt automaticlly, no need to even remember it exists. But it does come with a cost. It take around 150 ms to check if password is correct. (Afain with 11 as "dificulty", I don't remember the exact term).

I tried to bump that factor to 13, but it starts to be really long as a check ;p

Oh but. Where did you find that code ?!

Surelly there is a pipeline which compiles and will not permit to merge a PR with compilation errors ? Who the fuck can even submit that ?!

@NoToJavaScript not quite.

Bcrypt for verification uses the password and the stored value and checks internally.

If using only password you can only store it, not test since every new call creates a new salt that is stored within the encoded value.

It's so weird when people fail to grasp c-style languages' scoping logic. It's literally just "what happens in curly braces stays in curly braces". I also never understood why languages like Python or JS decided to violate this dead simple rule that effortlessly guarantees correctness.

@lbfalvy I wholeheartedly agree. I think it’s way easier to read and understand the code than it is with tabs in Python too.

😇🤬💩 😧

@lbfalvy for js its actually quite simple.

Before they introduced the let keyword, js used function scoping

And the base document can be considered a main function.

Nested functions have their own scope but can access the parent scope.

Just as c uses “{}” js uses “function(){}”

With that difference scoping then works just the same.

Saving this rant for when I get imposter syndrome