Archive for March 29th, 2007

Zend Developer Zone: PHP Security Tip #19 (Securing Your Connection)

The Zend Developer Zone has posted their latest security tip today - this time dealing with the actual connection your application sits on (from Chris Hartjes).

The most secure application is one with no connection to the outside world.

As we’ve covered, you can’t really disconnect the network from your web server if you are building web applications. You can however, carefully consider which servers need to be connected to the outside world and which can be inside your firewall. Beyond that, you can also evaluate how those servers that have to remain outside your firewall communicate with the ones inside.

No, his suggestion is not to take your application “off the grip” but more to limit access to things like database servers to help protect the data that lives inside it.

Continue Reading · Add comment

Working with Themes and Templates

Most experienced programmers understand the advantages of separating the look and feel of an application from the application s logic. Oracle uses HTML DB to accomplish this. This article introduces you to the themes and templates that HTML DB provides. It is excerpted from chapter 6 of the em Oracle HTML DB Handbook em written by Lawrence Linnemeyer and Bradley Brown McGraw-Hill 2 6 ISBN 72257687 ….

Search Site Optimized for Developers and IT Pros Fast and relevant. Find technical documents, podcasts, whitepapers, research and blog posts.

Continue Reading · Add comment

Pádraic Brady’s Blog: Progress update on Zend_Service_Yadis

In a new post to his blog, Pádraic Brady gives an update on the status of his proposal for the Zend_Service_Yadis package:

Back in late February, I submitted a proposal to the Zend Framework wiki to see if Zend_Service_Yadis could be added as part of an overall objective to natively support OpenID (and related technologies) within the framework. Yadis is a suitable standalone service since it’s not OpenID specific and is therefore useful for a number of other purposes. That proposal has seen a few revisions since the initial draft so I’m hoping that by the time Zend Framework 1.0 is released it’s in good enough shape to allow for a comprehensive review and critique.

As far at the current status, he mentions the revisions it’s gone through so far and how it’s progressing towards “completion” (an Alpha state). He also points out that the component will not support using Internationalised Resource Indicators (IRIs), however “support for XRIs will be supported, but may not initially be concrete”.

Continue Reading · Add comment

Paul van Iterson’s Blog: Why you want Object Oriented Programming in PHP

In a new post to his “Quaint Tech” blog, Paul van Iterson talks about why you want (to use) object-oriented programming in your PHP applications versus the more procedural methods.

Most modern programming languages are based on an OO approach and don’t even allow for procedural coding anymore (for instance in languages as Java, C++, C#, Python, and Ruby). Explaining OOP goes beyond the scope of this article, so for understanding OOP in PHP I’d like to point you in this direction. For now let’s just say that OOP is about creating relatively small objects with specific functions that interact with each other to form a complete application.

Right off, he lists two advantages to using OOP methods (reusability and better structure) and a disadvantage (can be more time consuming to write). He does still recommend it though to any “serious PHP developer taking on serious projects”. He illustrates the point with some of his own experience - an application for a real estate firm.

Continue Reading · Add comment

Community News: phpPgAdmin 4.1.1 Released

Robert Treat has an announcement posted to his blog about the release of the latest version of the phpPgAdmin package - version 4.1.1.

The phpPgAdmin Team is proud to announce a new minor release of
phpPgAdmin. Version 4.1.1 fixes several bugs reported to use from
our users since the 4.1 release. Everyone is encouraged to upgrade.

Feature of phpPgAdmin include:

  • the ability to administer multiple servers
  • Support for PostgreSQL 7.0.x, 7.1.x, 7.2.x, 7.3.x, 7.4.x, 8.0.x, 8.1.x, and 8.2.x
  • Easy data manipulation (browse, execute, select/insert/update/delete)
  • Dump table data in a variety of formats: SQL, COPY, XML, XHTML, CSV, Tabbed, pg_dump
  • Excellent language support - available in 27 languages

Continue Reading · Add comment