PHP Security battle- (Found July 15, 2008 ) There are two big names in the PHP Security world. Stefan Esser, member of Hardened PHP Project. And Chris Shifflet, Member of the PHP Security Consortium. While Stefan has proven his expertise with tons of security advisories, Chris is proven to do the better marketing. Both are offering paid security consulting, and that's where their battle starts. I don't want to hold forth about deciding wether expertise or marketing is better - that's up to you, I'd just like to.http://nohn.net/blog/view/id/2 Removing the Apache "Server" Header- (Found July 15, 2008 ) Altough RFC 2616 does not require sending the Server header in HTTP responses, even says Server implementors are encouraged to make this field a configurable option, the Apache HTTP Server does not allow yo u to disable sending the this header via it's configuration. The only thing allowed is suppressing stuff like software version, additonal modules etc., so that you can strip it down to "Apache". Even mod_headers with it's Unset directive does not allow unsetting the...http://nohn.net/blog/view/id/removing_apache_server_header WTF 2.0- (Found July 15, 2008 ) Being a Web 2.0 system, the CMS used JavaScript that dynamically loaded JavaScript that dynamically loaded XML that was dynamically transformed into proprietary commands that were parsed to dynamically execute JavaScript to dynamically load content.http://nohn.net/blog/view/id/wtf_2_0 Weird Windows Notepad bug- (Found July 15, 2008 ) Look at this weird notepad bug: Start Notepad Type in "this app can break" Save the file Close Notepad Start Notepad Open the file in Notepad Behind 'How to break Windows Notepad'http://nohn.net/blog/view/id/windows_notepad_bug Don't upgrade to PHP 5.1.3- (Found July 15, 2008 ) http:bugs.php.netbug.phpid=37276http://nohn.net/blog/view/id/php_5_1_3_a_no_go Using Net_DNSBL and Nagios to check if your SMTP server is listed in a RBL- (Found July 15, 2008 ) RBLs are a great way to get rid of a lot of SPAM (if you choose the right ones). On the other hand you (and users of your mail server) get in big trouble if your SMTP server gets listed on a common RBL. Checking this manually is a job that sucks a lot, checking this automatically is an easy job with Nagios, PHP, Net_DNSBL and Console_Getopt. I assume, you have Nagios up and running and installed according to FHS. Install the required PEAR packages via pear...http://nohn.net/blog/view/id/checking_your_smtp_server_with_net_dnsbl_and_nagios GD graphics library becomes a PHP project- (Found July 15, 2008 ) Some years ago, the GD library was forked by the PHP project for easier building PHP with graphics support. Building GD library and PHP with GD support was always a hassle and this fork has made life much easier for PHP people. Unfortunately, the author of the original project, Thomas Boutell, ran out of time and so had not the time to backport improvements and fixes done by the PHP development team nor do his own improvements and fixes to the library. The consequence:..http://nohn.net/blog/view/id/libgd_php_project Continuous Builds with CruiseControl, Ant and PHPUnit- (Found July 15, 2008 ) Let me start with a quote: An important part of any software development process is getting reliable builds of the software. Despite it's importance, we are often surprised when this isn't done. We stress a fully automated and reproducible build, including testing, that runs many times a day. This allows each developer to integrate daily thus reducing integration problems. This blog posting will show you how to enable continuous builds with CruiseControl, Ant and...http://nohn.net/blog/view/id/cruisecontrol_ant_and_phpunit Playing around with the Zend Framework- (Found July 15, 2008 ) Today I found some time to play around a bit with the Zend Framework. My first experiences are that it is very easy to use and very well documented unlike most other PHP Frameworks. Adding a photo page to my site was easy to do with only 6 lines of code using the Framework: Note: Flickr is actively promoting censorship, so you should not use it anymore. Treat the following as an example of the Zend Framework. <php require_once('..includesconfig.php'); ...http://nohn.net/blog/view/id/6 Google Conference on Test Automation- (Found July 15, 2008 ) The conference is heading it's end, and it was the best conference, I've ever been too. The talks were awesome, and I met a lot of interesting people. Summaries of the talks are already available as well as Photos. Videos of the talks are available on Google Video, Slides are available at Google UK.http://nohn.net/blog/view/id/gtac_2006 |