Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      The Psychology Of Color In UX Design And Digital Products

      August 15, 2025

      This week in AI dev tools: Claude Sonnet 4’s larger context window, ChatGPT updates, and more (August 15, 2025)

      August 15, 2025

      Sentry launches MCP monitoring tool

      August 14, 2025

      10 Benefits of Hiring a React.js Development Company (2025–2026 Edition)

      August 13, 2025

      14 secret phone codes that unlock hidden features on your Android and iPhone

      August 17, 2025

      Stop using AI for these 9 work tasks – here’s why

      August 17, 2025

      A smart sensor assessed my home’s risk of electrical fires, and I was impressed

      August 17, 2025

      I brought Samsung’s rugged Galaxy tablet on a hiking trip, and it weathered everything

      August 17, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      AI’s Hidden Thirst: The Water Behind Tech

      August 16, 2025
      Recent

      AI’s Hidden Thirst: The Water Behind Tech

      August 16, 2025

      Minesweeper game in 100 lines of pure JavaScript – easy tutorial

      August 16, 2025

      Maintaining Data Consistency with Laravel Database Transactions

      August 16, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      5 Best VPN for Lenovo Laptops to Enjoy the Web Safely

      August 16, 2025
      Recent

      5 Best VPN for Lenovo Laptops to Enjoy the Web Safely

      August 16, 2025

      3 Best Antivirus and Malware Protection Software

      August 16, 2025

      11 Best Antivirus Without Ads

      August 16, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»News & Updates»CodeSOD: A Highly Paid Field

    CodeSOD: A Highly Paid Field

    June 30, 2025

    In ancient times, Rob‘s employer didn’t have its own computer; it rented time on a mid-range computer and ran all its jobs using batch processing in COBOL. And in those ancient times, these stone tools were just fine.

    But computing got more and more important, and the costs for renting time kept going up and up, so they eventually bought their own AS/400. And that meant someone needed to migrate all of their COBOL to RPG. And management knew what you do for those kinds of conversions: higher a Highly Paid Consultant.

    On one hand, the results weren’t great. On the other, the code is still in use, though has been through many updates and modernizations and migrations in that time. Still, the HPC’s effects can be felt, like this block, which hasn’t been touched since she was last here:

    // CHECK FOR VALID FIELD
    IF FIELD1 <> *BLANKS AND FIELD1 < '1' AND FIELD1 > '5';
        BadField1 = *ON;
        LEAVESR;
    ENDIF;     
    

    This is a validation check on a field (anonymized by Rob), but the key thing I want you to note is that what the field stores are numbers, but it stores those numbers as text– note the quotes. And the greater-than/less-than operators will do lexical comparisons on text, which means '21' < '5' is true.

    The goal of this comparison was to require the values to be between 1 and 5. But that’s not what it’s enforcing. The only good(?) news is that this field also isn’t used. There’s one screen where users can set the value, but no one has– it’s currently blank everywhere- and nothing else in the system references the value. Which raises the question of why it’s there at all.

    But those kinds of questions are par for the course for the HPC. When they migrated a bunch of reports and the users compared the results with the original versions, the results didn’t balance. The HPC’s explanation? “The users are changing the data to make me look bad.”

    [Advertisement]
    BuildMaster allows you to create a self-service release management platform that allows different teams to manage their applications. Explore how!

    Source: Read More 

    Facebook Twitter Reddit Email Copy Link
    Previous Articleminicom – serial communication program
    Next Article CVE-2025-6887 – Tenda AC5 Stack-Based Buffer Overflow Vulnerability

    Related Posts

    News & Updates

    14 secret phone codes that unlock hidden features on your Android and iPhone

    August 17, 2025
    News & Updates

    Stop using AI for these 9 work tasks – here’s why

    August 17, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    I’ve relied on this electric screwdriver for years, and it just got a big upgrade (plus it’s on sale)

    News & Updates

    Beginner’s Guide to Cloud Data Analytics

    Development

    CVE-2025-6414 – PHPGurukul Art Gallery Management System SQL Injection Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-6613 – PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    CVE-2025-1625 – Qi Blocks WordPress Stored Cross-Site Scripting Vulnerability

    May 19, 2025

    CVE ID : CVE-2025-1625

    Published : May 19, 2025, 6:15 a.m. | 45 minutes ago

    Description : The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    CVE-2025-7758 – TOTOLINK T6 HTTP POST Request Handler Buffer Overflow

    July 17, 2025

    CVE-2025-4344 – D-Link DIR-600L Remote Buffer Overflow in formLogin

    May 6, 2025

    WinRAR Vulnerability Let Execute Arbitrary Code Using a Malicious File

    June 24, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.