Validating data from database php
The relevant web page for the Date Time function is as follows: https:// the other supported date formats can be validated as follow: The number of seconds since 01/01/1970 Unix dates can be validated simply by using the date "as is", i.e.
there is no need to apply a delta The SQL query is: Date Time(numeric_time, 'unixepoch') AS Converted, This is the number of micro second intervals since 01/01/1601 The Delta (difference) between 01/01/1601 and 01/01/1970 is 11644473600 seconds, so first convert the Chrome date from micro seconds to seconds by dviding by 1,000,000 then just take away the delta (we take it away because the chrome epoch date [01/01/1601] is older than the unix epoch) The SQL query is: Date Time((numeric_time / 1000000) - 11644473600, 'unixepoch') AS Converted This is very similar to the Chrome date except the interval is the number of 100 nano seconds since 01/01/1601.
So how can we validate the conversion done by the Forensic Browser?
The process is simply - right click the required column and choose "View column as..." Select the date format that you believe the column is saved as, in this case I recognise this as an IOS NSDate format: And it's that simple...
The beauty of this method is that you do not need to leave the Browser but you are directly calling a function (Date Time) from the SQLite3and thus bypassing the Browser for an independant date validation. The Browser takes the numeric value from the ZTIMESTAMP column adds 978307200 to it and then tells SQLite to convert it to a human readable string and treating the new number as a unixepoch date. ZTIMESTAMP + 978307200, 'unixepoch') The NSDate format records the number of seconds since 1/1/2001 and the unix date format records the number of seconds since 1/1/1970.
978307200 is the number of seconds between the two dates (often referred to as the Delta), this figure is added to adjust the NSDate value to a unix value.
I have set the mask to 9,999.00 but the user input looks like this 0,0__.__ instead of this $___._12.00.
Then we need to know how many seconds there are in 42439 days, this is just 42439 * 86400 (the seconds in a day). To get the fraction part of the number we can simply take the integral part that we previously calculated from our starting value, so 42439.766146 - cast(42439.766146, int) = 0.766146 Then add these two values together and subtract the number of seconds between 30/12/1899 and 01/01/1970 which will give the number of seconds since 01/01/1970 i.e.