get XSS vulnerability reported that reads /etc/passwd on /screenshot.php but it turns out it’s reading the /etc/password of the screenshot service API Flash not us! #nomads

stop responding to test.php if no admin #nomads

disable all remaining /*.php endpoints #nomads

change /userApi.php endpoints to /user/api so random PHP XSS bots don’t find it and I can block any .php access #nomads

fix wrong images shown when you add a place because it did if(cityImageExists) then if(countryImageExists) then if(regionImageExists) but should be if then else if then else if as fallbacks #nomads profile

fix wrong hover top countries #nomads profile

order Yubikey for new dev #nomads #remoteok

fight chargeback because asshole customer #nomads

fix because we now separate dating and friend matches and swipes more strictly, if a user would swipe right/left on a user in dating then switch to friend it would perpetually loop if it showed the same user because alreadyLikedOrDislikedUserIds didn’t make a distinction between friend and dating #nomads

deploy fix for NSFW word S&M in username #nomads

fix bug wrong date on meetup slack post because it used $meetup[‘date’] but should be $meetup[‘epoch_start’] #nomads

sort matches first by match time if in last 7 days, and otherwise sort by distance #nomads

talk to new dev #nomads #remoteok about how we gonna do it

fix some words replaced as — due to errors in emoji lookup table #nomads

fix cachebuster images wasn’t properly set as user_id was empty in SQL query for instant messenger popup #nomads

fix rain in API sourcer from DarkSky was saving it wrong as cm rainfall, but should be mm rainfall, now fixed #nomads

delete rain data because it was daily but the key was monthly so it needs to be re-sourced with summing values not medianing them #nomads

add text that people should delete their data on Slack or Discord separately #nomads

cancel HotJar #nomads

fix JS would change Hong Kong, Hong Kong to Hong Kong, China #nomads