• Sa (unregistered)

    I like it. Simple, creative, easy to understand. And it even works most of the time.

  • (cs)

    rillant!

  • Nikolai (unregistered)

    Actually, this indicates that the developer knows what he is doing and tries to write the most efficient code possible (the kind of thing a lot of modern software engineers lack). Definitely not WTF.

  • delenit (unregistered)

    ee roblems or ther oders hen hey ry o igure ut hat s oing n n his ode...

  • diaphanein (unregistered) in reply to Nikolai
    Nikolai:
    Actually, this indicates that the developer knows what he is doing and tries to write the most efficient code possible (the kind of thing a lot of modern software engineers lack). Definitely not WTF.
    May your career die a horrible death porting code for the unix epoch fail.
  • frustrati (unregistered) in reply to Nikolai
    Nikolai:
    Actually, this indicates that the developer knows what he is doing and tries to write the most efficient code possible (the kind of thing a lot of modern software engineers lack). Definitely not WTF.
    Yes, because there is absolutely no chance that PHP has an "inarray" type function. After all, PHP hardly has any library functions...
  • Greg (unregistered) in reply to Nikolai
    Nikolai:
    Actually, this indicates that the developer knows what he is doing and tries to write the most efficient code possible (the kind of thing a lot of modern software engineers lack). Definitely not WTF.
    No, this just means the developer can't be bothered to either read the documentation or stop for one second and think. So instead of "someone must have had this problem before, let me read the manual" something entirely different went through his/her head: "Stupid C! Stupid computers! Nothing works! I hate this, why am I here" :)
  • (cs)

    Hah! I actually like his style... He managed, not only make it resiliant to differing first-letter case (googlebot or Googlebot, anyone?), but also save bunch of letters (the 'signatures' as well as the "=== false").

    As a previous commenter put it... Absolutely rillant!

  • Val (unregistered)

    And one more thing: 'pider' is kind of 'q...er' in Russian :(

  • (cs) in reply to Sa
    Sa:
    I like it. Simple, creative, easy to understand. And it even works most of the time.
    This is one of those things where the "correct" solution only takes a few seconds to fix, though.

    For that matter, the PHP online manual page for strpos() even explains why you should use === to check the return value.

  • (cs) in reply to Nikolai
    Nikolai:
    Actually, this indicates that the developer knows what he is doing and tries to write the most efficient code possible (the kind of thing a lot of modern software engineers lack). Definitely not WTF.
    In my 13 years of experience a focus on efficiency first is always the mark of a n000b. After a while most realise that correctness and maintainability are almost always more important, and only a very few places need to coded as if every cycle counts. I agree a good developer should know how to code very efficiently, I just think they should know not to do so most of the time.
  • heise (unregistered)

    He he, that's funny.

    Still, I'm not sure what surprised me more: a) The "ingenuity" of developer. b) That the function can return "0" AND "FALSE" and that's not the same. c) That "strpos" is not appropriate function for searching substrings inside string.

  • (cs) in reply to roe
    roe:
    He managed, not only make it resiliant to differing first-letter case (googlebot or Googlebot, anyone?)
    I can do that by adding one character (an i after str).
  • unting eb evelopers (unregistered) in reply to Nikolai

    You're fucking joking, right? If you truly believe this then you have no fucking idea and have no right to even compare yourself to software engineers, let alone criticize. How can you possibly put up a shitty, halfwitted string compare saving an entire one character as a paragon of efficiency when you routinely don't bat an eye at stuff that is 100% string and/or XML based, use interpreted scripting languages, javascript, reflection/runtime class interrogation and think its ok to transmit 1000000 bytes to describe a basic screen with minimal functionality.

  • (cs)

    Don't you realize that each of those spider names is a Registered Trademark. If they appeared in the source code, David's company would be obliged to pay usage fees!

    {or post a disclaimer in the comments}

  • Jonathan (unregistered) in reply to Val
    Val:
    And one more thing: 'pider' is kind of 'q...er' in Russian :(

    Quaker? Or can I buy a vowel?

  • ideo (unregistered) in reply to powerlord
    powerlord:
    Sa:
    I like it. Simple, creative, easy to understand. And it even works most of the time.
    This is one of those things where the "correct" solution only takes a few seconds to fix, though.

    For that matter, the PHP online manual page for strpos() even explains why you should use === to check the return value.

    While the code above is a WTF, a function call that either returns a boolean OR a number is a bigger WTF.

  • (cs) in reply to heise
    frustrati:
    Yes, because there is absolutely no chance that PHP has an "inarray" type function. After all, PHP hardly has any library functions...

    in_array wouldn't work unless he puts the complete UA string in there, which isn't a very good idea.

    heise:
    c) That "strpos" is not appropriate function for searching substrings inside string.

    This surprises me too, since I don't see any indication this is the case.

  • damnum (unregistered)
    Robert Donnelly:
    Dude? What is the difference between 0 and false?

    RD www.useurl.us/12m

    In a strongly typed language a nice huge about. In PHP it depends on the location of a sig in forum software that does not support sigs.

    So for you the difference is 'z', but for me it is 'awk { $1 }' as I don't have a sig line.

  • Val (unregistered) in reply to Jonathan

    Stop kidding! ('f...ggot' also suits well).

  • (cs) in reply to ideo
    ideo:
    powerlord:
    Sa:
    I like it. Simple, creative, easy to understand. And it even works most of the time.
    This is one of those things where the "correct" solution only takes a few seconds to fix, though.

    For that matter, the PHP online manual page for strpos() even explains why you should use === to check the return value.

    While the code above is a WTF, a function call that either returns a boolean OR a number is a bigger WTF.
    Unfortunately PHP is filled with functions that do that. The alternative would have been to return negative numbers for failues... or to throw an Exception.

  • (cs)

    I'm surprised he didn't just do "strpos(' '.$agent, $spider_name)" - it's what I use in a small script on my site (which I use to redirect traffic from my site's old hostname to the new one; search engines get a "301 Moved Permanently" response to make them update their index, while normal clients get a "300 Multiple Choices" to force them to read the page and either report a broken link or update their damn bookmarks), and it works nicely.

  • (cs) in reply to MET
    MET:
    I agree a good developer should know how to code very efficiently, I just think they should know not to do so most of the time.
    In your mind, a "good developer" should know that they shouldn't write efficient code most of the time?

    I'm sure glad you don't work with me. We obviously have extremely different views on what makes a "good" developer. Writing inefficient code "most of the time" is not the hallmark of a "good developer."

  • Harun (unregistered)

    everybody can fake an agent string. why not take reverse dns and use it? see: http://livebookmark.net/journal/2007/04/11/sitemaps-in-the-robotstxt-happy-harvesting/

  • Nick Johnson (unregistered)

    Actually, there's a pseudo-plausible reason to do this: strpos(blah, "pider") matches both "spider" and "Spider".

  • (cs) in reply to Nick Johnson
    Nick Johnson:
    Actually, there's a pseudo-plausible reason to do this: strpos(blah, "pider") matches both "spider" and "Spider".
    So does stripos(blah, "Spider") except that stripos also matches "sPider", "SPIDER", etc... I imagine it just uses strtolower or strtoupper on both strings first.
  • (cs) in reply to Nick Johnson
    Nick Johnson:
    Actually, there's a pseudo-plausible reason to do this: strpos(blah, "pider") matches both "spider" and "Spider".
    Yeah, sometimes I do the same trick (leave off the first character) if I don't know what case it will be in. For example, CHAT scripts. "ogin:", "assword:" Hehehe, assword. :^)
  • Gustav (unregistered)

    I agree with all of you who say that PHP is a poor language. I mean, that's why Facebook, Wikipedia, Yahoo!, Digg, Sourceforge and Flickr are built on it, right?

  • Nath (unregistered) in reply to Gustav
    Gustav:
    I agree with all of you who say that PHP is a poor language. I mean, that's why Facebook, Wikipedia, Yahoo!, Digg, Sourceforge and Flickr are built on it, right?

    What a cute comeback! It's a shame that nobody mentioned PHP was poor, but otherwise it was delightful. Well done.

  • biziclop (unregistered) in reply to Gustav
    Gustav:
    I agree with all of you who say that PHP is a poor language. I mean, that's why Facebook, Wikipedia, Yahoo!, Digg, Sourceforge and Flickr are built on it, right?

    If you feel yourself inferior because you are a PHP developer that's not our fault. :)

  • (cs)
    Robert Donnelly:
    Dude? What is the difference between 0 and false?

    RD <someURI>

    Hmm I always thought this was a bot but this time it actually said something related to the article.

    Probably it is an human smart as a bot then

  • troels (unregistered)

    Introducing: piderman baman

  • Canthros (unregistered) in reply to brodie
    brodie:
    In your mind, a "good developer" should know that they shouldn't write efficient code most of the time?
    I suspect the point was that maintainability is or should be a higher priority than efficiency in most modern code. Premature optimization and all that, plus the benefits of having code that your developers can still read six months or even six years down the road may be substantially greater than saving a clock cycle or three here and there.
  • AT (unregistered) in reply to brodie
    brodie:
    MET:
    I agree a good developer should know how to code very efficiently, I just think they should know not to do so most of the time.
    In your mind, a "good developer" should know that they shouldn't write efficient code most of the time?

    I'm sure glad you don't work with me. We obviously have extremely different views on what makes a "good" developer. Writing inefficient code "most of the time" is not the hallmark of a "good developer."

    Really? So in other words, you don't evaluate the trade-offs between clarity and efficiency (where they diverge) on a case-by-case basis and choose the solution that best your overall design goals? You just always choose efficiency without regard to the problem, technology, or environment at hand?

    I'm glad I don't work with you!

  • andy (unregistered) in reply to Gustav

    well that's like saying a million flies can't be wrong, manure must be tasty!

  • biziclop (unregistered) in reply to AT
    AT:
    brodie:
    MET:
    I agree a good developer should know how to code very efficiently, I just think they should know not to do so most of the time.
    In your mind, a "good developer" should know that they shouldn't write efficient code most of the time?

    I'm sure glad you don't work with me. We obviously have extremely different views on what makes a "good" developer. Writing inefficient code "most of the time" is not the hallmark of a "good developer."

    Really? So in other words, you don't evaluate the trade-offs between clarity and efficiency (where they diverge) on a case-by-case basis and choose the solution that best your overall design goals? You just always choose efficiency without regard to the problem, technology, or environment at hand?

    I'm glad I don't work with you!

    We're all glad we don't work with each other, after all who wants to work with people who spend all day surfing on websites?

    But what your problem is with the definition of "efficiency". The code in this article should not be considered efficient by any definition. Because only code that does the job properly should be ranked on a scale of efficiency and this doesn't. It shouldn't even be considered for efficiency.

  • biziclop (unregistered) in reply to AT
    AT:
    brodie:
    MET:
    I agree a good developer should know how to code very efficiently, I just think they should know not to do so most of the time.
    In your mind, a "good developer" should know that they shouldn't write efficient code most of the time?

    I'm sure glad you don't work with me. We obviously have extremely different views on what makes a "good" developer. Writing inefficient code "most of the time" is not the hallmark of a "good developer."

    Really? So in other words, you don't evaluate the trade-offs between clarity and efficiency (where they diverge) on a case-by-case basis and choose the solution that best your overall design goals? You just always choose efficiency without regard to the problem, technology, or environment at hand?

    I'm glad I don't work with you!

    We're all glad we don't work with each other, after all who wants to work with people who spend all day surfing on websites?

    But what your problem is with the definition of "efficiency". The code in this article should not be considered efficient by any definition. Because only code that does the job properly should be ranked on a scale of efficiency and this doesn't. It shouldn't even be considered for efficiency.

  • MG! (unregistered)

    hat's enious, hat s!

  • Waffle (unregistered) in reply to powerlord
    powerlord:
    roe:
    He managed, not only make it resiliant to differing first-letter case (googlebot or Googlebot, anyone?)
    I can do that by adding one character (an i after str).
    Maybe so, but He did it by *removing* letters... which is obviously better.
  • cookre (unregistered)

    One is reminded of Michael Jackson's (no, not THAT one) rules of code optimization:

    Rule #1 - Don't do it.

    Rule #2 (for experts only) - Don't do it yet.

  • fmobus (unregistered) in reply to Quietust
    Quietust:
    I'm surprised he didn't just do "strpos(' '.$agent, $spider_name)" - it's what I use in a small script on my site (which I use to redirect traffic from my site's old hostname to the new one; search engines get a "301 Moved Permanently" response to make them update their index, while normal clients get a "300 Multiple Choices" to force them to read the page and either report a broken link or update their damn bookmarks), and it works nicely.

    Well, your solution requires a temporary string to be spawned and could cost you some cycles. Stop being lazy and just do what TFM tells you to: if (strpos($needle,$haystack) === true) {}

    But yeah, I've got to admit the original code was clever; but it is simply wrong from a clarity standpoint.

    The Real WTF(tm) is a library function returning int or bool. It should rather behave like C's strpos, Java's indexOf, Python's find(); they all return -1 if the haystack does not contain the needle. It makes more sense that way: you're testing the position of a substring, which is a number. A boolean would be expected if you're testing if string contains substring, regardless of position.

  • benh (unregistered)

    Where is the WTF? It's not the most visually appealing, but it would clearly work and is not too roundabout.

  • (cs) in reply to brodie
    brodie:
    I'm sure glad you don't work with me. We obviously have extremely different views on what makes a "good" developer. Writing inefficient code "most of the time" is not the hallmark of a "good developer."
    Yes, it is. Because the most efficient code possible is usually unmaintainable garbage.

    In nearly all applications, nearly all of the code has absolutely no reason to be efficient because it will be executed so rarely that it does not matter at all. Yes, even in embedded systems. It needs to be correct and maintainable first. Then, and only then does efficiency enter the picture, and if it runs too slow or uses to much memory, you do some profiling to see where the code needs to be more efficient.

    Until you understand that, you're not a software engineer, you're not a developer, you're a wannabe cowboy coder.

  • (cs) in reply to Andy Goth
    Andy Goth:
    For example, CHAT scripts. "ogin:", "assword:" Hehehe, assword. :^)

    You mean buttword.

  • dmh2000 (unregistered)

    that's a poorly designed API. if a call returns an integer most of the time, why not do like nearly every other language and have it return -1 if the string is not found.

  • Dave (unregistered)

    Staggers me the amount of PHP developers who never heard of stristr(), including all commenters here, it seems.

  • W. Snapper (unregistered)

    I just did this on a recent project, to find the status of account applications. Their database had both "Approved" and "approved," "declined" and "Declined," etc.

    Why would I not simply omit the first letter? And for those who are somehow claiming clarity, is there anyone who didn't instantly understand the code?

  • califa (unregistered) in reply to powerlord

    It eludes me why they couldn't make strpos() return -1 in case the "needle" was not found.

  • Dave (unregistered) in reply to dmh2000

    It could be worse in perl you would probably pass in a hash of hashes containing any number of needles and haystacks and you get back either "FALSE", the position of the needle in the haystack, a hash containing the index of which haystack the needle was in and for some reason the name of the implentors cat or FILE_NOT_FOUND.

    And of course the behaviour would be dependant on random symbols in global scope.

  • G (unregistered) in reply to dmh2000

    because -1 is perfectly legal argument, for example, start or length of a substring (php.net/substr) therefore to prevent people from shooting their leg and not realizing it by directly using its return value as a parameter to another function, ie substr($s, 0, strpos($s, '%')) will return 'a' for 'a%b', but 'ab' for 'abc' having strpos return false will issue a warning, under normal circumstances

    do not criticize something you haven't throughoutly researched

Leave a comment on “pider Detection”

Log In or post as a guest

Replying to comment #:

Log Out

« Return to Article