The PHP Grind

International PHP Magazine: Poll Question: You Did Not Know That

The International PHP Magazine has conducted a poll on its website over the past week, this time asking “You Did Not Know That…”, asking developers which of the true statements about PHP they didn’t know about.

The options this time were:

• The trailing ‘?>’ in PHP is Optional
• You can embed other programming languages in PHP
• Objects can be made to look like arrays by using Standard PHP Library
• require is faster than require_once
• Anything Less than 5.1.0 is Silly
• All

There wasn’t a whole lot of difference in the results of this poll, but the most all-inclusive of the list was the one selected the most - “All”. Following that, was that the trailing closing PHP tag is optional, then a tie for third between the “embed other languages” and “Less than PHP 5.1.0″ options.

Be sure to cast your vote in their latest poll that asks readers that they’re really looking for in their frameworks.

Continue Reading · Add comment

FrSIRT: Vivvo Article Management CMS SQL Injection and PHP File Inclusion Vulnerabilities

The FrSIRT site has posted a new advisory for users of the Vivvo Article Management CMS software about potential holes that could allow for some very large-scale damage to be done.

Multiple vulnerabilities have been identified in Vivvo Article Management CMS, which could be exploited by remote attackers to compromise a vulnerable server.

The first issue is due to an input validation error in the “pdf_version.php” script that does not validate the “id” parameter before being used in SQL statements, which could be exploited by malicious people to conduct SQL injection attacks.

The second vulnerability is due to an input validation error in the “index.php” script that do not validate the “classified_path” parameter, which may be exploited by remote attackers to include local or remote scripts with the privileges of the web server.

Versions 3.2 and higher of the software are effected, and, unfortunately, there has been no patch issued for the issue.

Continue Reading · Add comment

Zend Developer Zone: Zend Framework, JSON, and Del.icio.us

In a new tutorial from jJason Whittenburg today on the Zend Developer Zone, he demonstrates how to use the Zend Framework and a little JSON to get your application talking to Del.icio.us.

Del.icio.us is a social linking site to store web links. Some one afternoon while messing around Zend Framework I had the idea that it might be nice to add my Del.icio.us links to my homepage. This sounds easy enough as Del.icio.us makes available an RSS feed for this purpose. However, there is one problem; Zend_Feed does not seem to be able to parse this particular RSS feed.

The reason is that Del.icio.us makes use of some extended namespaces for its RSS feed. Normally this would not be a problem as we could simply write a new class to extend Zend_Feed to read this file. However, this is a quicker and simpler way. Enter JSON.

Since there’s no direct JSON support in the Zend_Feed component, they have to load up the Zend_Json component to help out. He shows how to create both the controller and the view for the setup as well as a database to help cache the data from each request.

Continue Reading · Add comment

Wolfgang Drews’ Blog: Very Last Chance: get two eZ Components Trainings for free!

Wolfgang Drews reminds (German) readers that tims is almost up for their chance to attend two eZ Components training sessions for free.

If you understand german, here is your very last chance to participate at two very, very free training-sessions about eZ Components! Session One will find place on 20th of september and will cover the essentials of eZ Components. Session two comes to you just two days after on 22th of september and will look in detail at eZ Mail and eZ Template. Tobias Schlitt will be your instructor and show all that fine stuff practically with an example-application, just written for the show!

The training is being offered by phpzertifizierung.eu and the eZ crew. You can sign up now for both session one and session two if you’d like to attend.

Continue Reading · Add comment

Finding Paths, Timestamps and More with the DirectoryIterator Class in PHP

Are you interested in having at your disposal a quick reference for working with the DirectoryIterator class that comes with PHP 5 Then this might be the article that you ve been waiting for Welcome to the second tutorial of the series A Close Look at the DirectoryIterator Class in PHP 5. Over the course of this set of installments you ll find complete coverage of the most important methods bundled with this class and learn how to take advantage of their excellent functionality….

Rackspace-Managed Servers, Fanatical Support™ Full-Scale Microsoft & Linux Solutions & 0% Network Downtime! Click here now!

Continue Reading · Add comment