From the bottom up
   You have to start some where

Archive for the 'Web Development' Category

show what color a hex color code is

Thursday, October 23rd, 2008

This is a simple tool that takes a hex color code (#FFFFFF) or color name (white) and uses javascript to display what that color is on the page. Built to quickly debug a style sheet, since #80b5d0 might as well be french.

Some Good Tips

Wednesday, October 15th, 2008

Today i found some good tips

OWASP - PHP Top 5 Security Vulnerabilities

Wednesday, September 24th, 2008

http://www.owasp.org/index.php/PHP_Top_5

That site has tips on security vulnerabilities, here is a quick list of pointers from that article.

  • Remote Code Execution
    • Don’t Use user input in Include, Require or Eval
  • Cross-site scripting
    • Don’t use register_globals
    • If outputting User Submitted Values, sanitize first using htmlentities
    • Avoid $_REQUEST use $_GET or $_POST
    • Validate Values ie use is_numeric or check string length
    • use urlencode when adding variables to a query string
  • SQL Injection
    • Validate Data prior to use in SQL Statements - ie is_numeric
    • When possible use PDO or another Database Abstraction Layer combined with prepared statements at the very least use escape strings ( Avoid addslashes() as it isn’t adequate )
  •  File system attacks
    • Ensure that all variables are properly initialized prior to first use
    • Ensure that the users can only affect file operations to the degree you had in mind
    • Try to move secrets and logs out of the web root if at all possible – see the references on “Shared Hosting” by Chris Shiflett

A Bushel of Javascript Goodness

Friday, September 12th, 2008

Here is a link for a Smashing Magazine Post with 75 Different Javascript Tips/Techniques

http://www.smashingmagazine.com/2008/09/11/75-really-useful-javascript-techniques/

Here are ones that i found might be handy at a later date: