Archive for August, 2007

Stefan Esser’s Blog: CORE GRASP - PHP Tainted Mode

Stefan Esser points out a new patch today - CORE GRASP - from the Core Security Technologies group that provides taint support surrounding the mysql_query function.

Their implementation adds a tainted or not flag for every byte so that it is possible on invocation of mysql_query() to determine any kind of injection.

Unfortunately, Stefan also mentions two big issues it might have from the get-go: the overhead for the memory needed can slow things down and an incorrect parsing in their query handler could lead to injection attacks.

Continue Reading · Add comment

Job Posting: AllSearch Professional Staffing Seeks PHP Developer (Lexington, MA or NYC, NY)

Company AllSearch Professional Staffing
Location Lexington, MA or New York City, NY
Title PHP Developer
Summary

**SUMMARY**

  • Key developer for growing start-up!
  • Full-time / Direct Hire position
  • Employee can work out of Lexington, MA or NYC office with part-time telecommuting available

**RESPONSIBILITIES**

  • Software development in LAMP environment for online community website
  • Display and user interface development as needed
  • Additional development in Python, VB.NET, AJAX, Perl, JavaScript, XML, and other languages as needed in a Web 2.0 environment

**REQUIREMENTS**

  • Bachelors Degree in Computer Science or related field
  • Minimum 5 years software development experience with expertise in PHP and MySQL
  • Must be fluent in LAMP implementations with specific applications in Web 2.0 and search algorithms
  • Solid understanding of scalable frameworks required
  • Previous start-up experience preferred

**COMPENSATION**

  • Competitive salary
  • Full benefits

**TO APPLY**

Please email your Word based resume, summary of qualifications, and salary requirements as soon as possible.

Email: loril [at] this domain

Link More Information

Continue Reading · Add comment

Internet Super Hero Blog: PHP: mysqli_stmt_get_result()

Frustrated with the lack of something simple (like mysql_fetch_assoc) in the new mysqli extension, this new function was created an posted about on the Internet Super Hero blog - mysqli_stmt_get_results.

By help of the new function, you can create a mysqli_result object from a statement that returns data (SELECT and other - version dependent!). Then you can use the mysqli_result object to process the returned data: fetch results, access meta data - all you can also do using a mysqli_result object returned by mysqli_query().

Included in the post are a few code examples showing the simplicity of the function and how it can still be used with the standard mysql_* functions to grab the results.

Continue Reading · Add comment

DevShed: Drawing More Complex Shapes with the GD Library in PHP

DevShed has posted part four of their series looking at the creation of graphics in PHP using the GD functionality. They take things a step further from the previous part and show how to create more complex shapes.

They show how to create things like:

Continue Reading · Add comment

Zend Developer Zone: AJAX Chat Tutorial Part 6 : Updating the User List

The Zend Developer Zone has posted part six of their tutorial creating an Ajax chat application with the help of the Zend Framework. This part of the series focuses on updating the user list for the current participants in the conversation.

Updating the user list should occur whenever the user adds a new chat message or refreshes the chat window. Since we already use the MessageAction() method on our PHP IndexController class to forward such responses to the browser, we’ll simply amend it to also return a list of currently online users.

They work through the code updates to make it happen - changes to the MessageAction in the IndexController that include the addition of a few new methods.

Continue Reading · Add comment