Archive for March 8th, 2007

Configuring J2EE Application XML Files

In this fourth part of a series covering the management of OC4J and configuring J2EE applications with Oracle 1 g Application Server we take a closer look at at J2EE application deployment files and more. This article is excerpted from chapter eight of the em Oracle 1 g Application Server Exam Guide em written by Sam Alapati McGraw-Hill ISBN 7226271 ….

Rackspace: Save on Web Hosting in March! Start working with The Hosting Experts today and Save - Get Free Setup in March!

Continue Reading · Add comment

Alexey Zakhlestin’s Blog: YAML Talk (PHPThinktank)

Alexey Zakhlestin gave a talk for the PHPThinktank IRC channel recently on the topic of YAML, PHP, and some of the work that he’s done combining the two.

It happened a bit of spontaneously, so noone was invited. It was my first try, to make introduction to yaml for php prgrammers, and if there is more interest I will give another talk which will cover more details, this time with proper scheduling :)

You can check out the log of the discussion for his entire talk (covering topics like what YAML is, where to get more information on it, some of its features, and a mention of the Syck library for parsing it).

Continue Reading · Add comment

Zend Developer Zone: Two Security Tips - Naming Scheme & Input Filtering

The Zend Developer Zone has posted two more handy security tips - one concerning file/directory naming and the other about input validation.

From the first tip:

Don’t rely on obscure names to keep your application safe. You should always check permissions, test for vulnerabilities with testing tools and keep an eye on your log files for suspicious activity. When designing your applications and web sites though, don’t make it easy for bad people to do bad things. Don’t use default or common names for your files and directories.

And from the second:

It’s a sad fact of life but users are evil. Users want nothing more than to find a way to exploit your application. As soon as you let your guard down and start thinking “I’m only selling small stuffed animals so how evil can my users really be?” you’ve lost the battle.

You can catch up on these and the other previous security tips on this page on the Zend Developer Zone website.

Continue Reading · Add comment

PHP-GTK Community Site: Easily empty GtkContainer/GtkWindow

The PHP-GTK Community site has a quick new post today showing how to create/empty out a GtkContainer or GtkWindow in your code.

This function provides an easy way to empty a GtkWindow/GtkContainer. I use it when i need to refresh a part of my app by replacing some widgets with others. It can destroy or preserve the child widgets depending on your needs.

They provide both the code itself and a sample usage - a three line script that shows three ways to use it - empty out a container, empty out the container but keep its children intact, and how to use it in the event of a button click.

Continue Reading · Add comment

DevShed: Validating User Input with the Strategy Pattern

DevShed is wrapping up their look at the Strategy pattern with the last part of their series posted today - a look at validating a user’s input via the pattern.

In the next few lines I’m going to demonstrate how to use the strategy pattern in a useful case, that is validating user-supplied input. Sound like an interesting experience, right?

They start by show how to build a “validation strategy selector” that uses a switch to hand off the request to the correct validation function. Naturally, this is followed by the creation of those validation classes and an example of their use. They wrap it all up with the complete code listing to make cut and paste coding easy.

Continue Reading · Add comment