Files
        @ 8d55669e05c2
    
        
              Branch filter: 
        
    Location: SlatePermutate/inc/math.inc
        
            
            8d55669e05c2
            3.2 KiB
            text/x-povray
        
        
    
    Add some hacks to support pure HTTPS for WebAdvisor XSS automatic registration hack.
Instead of using a JSONP callback and PHP sessions to store the
TOKENIDX, the XSS script now just updates the URL parameter for the
WebAdvisor login page so that the TOKENIDX will be transferred to
webadvisor.php by a GET variable right when it is needed instead of
asynchronously.
A separate hack to help support HTTPS is that automatic uploading of
assets to Amazon S3 (which has HTTPS access) allows the XSS script to
be served over HTTPS. This eliminates the browser warnings about
accessing mixed secure/insecure content and, thus, hopefully supports
browsers which automatically block insecure content on secure pages.
    Instead of using a JSONP callback and PHP sessions to store the
TOKENIDX, the XSS script now just updates the URL parameter for the
WebAdvisor login page so that the TOKENIDX will be transferred to
webadvisor.php by a GET variable right when it is needed instead of
asynchronously.
A separate hack to help support HTTPS is that automatic uploading of
assets to Amazon S3 (which has HTTPS access) allows the XSS script to
be served over HTTPS. This eliminates the browser warnings about
accessing mixed secure/insecure content and, thus, hopefully supports
browsers which automatically block insecure content on secure pages.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127  | <?php /* -*- mode: php; indent-tabs-mode: nil; -*- */
/*
 * Copyright 2011 Nathan Phillip Brink <ohnobinki@ohnopublishing.net>
 *
 * This file is a part of slate_permutate.
 *
 * slate_permutate is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * slate_permutate is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with slate_permutate.  If not, see <http://www.gnu.org/licenses/>.
 */
if (!function_exists('mean'))
  {
    /**
     * \brief
     *   Calculate the mean of a set of numerical values without
     *   overflowing stuff.
     */
    function mean(array $values)
    {
      /*
       * As the influence of each element reduces with each iteration
       * in the used algorithm, shuffling the array should give a
       * better idea of what the actual mean is for larger arrays.
       */
      shuffle($values);
      $val = 0;
      $i = 0;
      foreach ($values as $value)
        {
          $val = $val * $i / ($i + 1)
            + $value / ($i + 1);
          $i ++;
        }
      return $val;
    }
  }
if (!function_exists('sum'))
  {
    /**
     * \brief
     *   Add all elements in a set together.
     *
     * \parram $S
     *   The set to sum up.
     * \return
     *   The sum of all elements in the set.
     */
    function sum($S)
    {
      $ret = 0;
      foreach ($S as $S_i)
        $ret += $S_i;
      return $ret;
    }
  }
if (!function_exists('stddev'))
  {
    function stddev(array $values)
    {
      $mean = mean($values);
      $squares = 0;
      $i = 0;
      foreach ($values as $value)
        $squares += pow($mean - $value, 2);
      return sqrt($squares / (count($values) - 1));
    }
  }
/**
 * \brief
 *   Return the four quartile points of an array of sorted values with
 *   normal integral indexes.
 */
function sp_iqr(array $values)
{
  $count = count($values);
  if (!$count)
    return array(0, 0, 0, 0);
  return array(
               $values[0],
               $values[(int)($count / 4)],
               $values[(int)($count / 2)],
               $values[(int)(3 * $count / 4)],
               $values[$count - 1],
               );
}
/**
 * \brief
 *   Remove any `outliers' from an array of values.
 *
 * An outlier is defined as any value that falls further than 1.5
 * standard deviations outside of some sort of inter-quartile range.
 */
function filter_outliers(array $values)
{
  sort($values, SORT_NUMERIC);
  $values = array_values($values);
  $stddev = stddev($values);
  list(, $iqr_min, $iqr_max, ) = sp_iqr($values);
  $min = $iqr_min - 1.5 * $stddev;
  $max = $iqr_max + 1.5 * $stddev;
  $count = count($values);
  for ($i = 0; $i < $count; $i ++)
    if ($values[$i] < $min
        || $values[$i] > $max)
      unset($values[$i]);
  return array_values($values);
}
 |