Learn from the experts in the PHP community!
Ibuildings is proud to organize the fourth Dutch PHP Conference on June 11 and 12. Plus a pre-conference tutorial day on June 10. Both programs will be completely in English so the only Dutch thing about it is the location.

Keywords for these days: Know-how, Technology, Best Practices, Networking, Tips & Tricks.

See the schedule.
Register here…
Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 10/03/2009 -- PHP 5.2.9 Released! (0)
• 12/02/2010 -- PHP UK Conference 2010 (0)
• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 04/01/2010 -- Panorama - Switzerland (0)

Added horizontal menu (Track My Weather, Invite Friends, Fan Box).
Fixed a height issue with some browsers.

Track My Weather is a Facebook Application with which you can find weather forecasts for cities all over the world.
Data are provided by AccuWeather.

Our goal is to create an application that is easy to use and no need for facebook users to worry about their privacy!

So, Track My Weather will be under development for some time…

You can add the application…
http://apps.facebook.com/track-my-weather/

Become a Fan…
http://www.facebook.com/apps/application.php?id=111035455558

We can use all the feedback we can get!

read also...

• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 10/03/2009 -- PHP 5.2.9 Released! (0)
• 12/02/2010 -- PHP UK Conference 2010 (0)
• 22/10/2009 -- Microsoft Tech-Ed Europe 2009 | 9-13 November 2009, Berlin, Germany (0)
• 09/05/2009 -- Do you know where to find me? (0)

PHP UK Conference 2010 is PHP London’s fifth annual conference.

When: Friday 26th February 2010
Where: Business Design Centre, London
Talks about:

- AntiPHPatterns

- Best practices for web service design- Database optimisation

- Hidden features - from core to PECL

- ‘In search of…’  integrating local search systems

- Living with legacy code

- PHP 5.3 in practice

- PHP code audits

- PHP on the D-BUS

- RDBMS in the social networks age

- Regex-fu

- The lost art of simplicity

- Would you like docs with that?

Attending: ?!?!

read also...

• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 09/05/2009 -- Do you know where to find me? (0)
• 06/05/2009 -- Joomla/Mambo - PDF Indexer Module (1)
• 10/03/2009 -- PHP 5.2.9 Released! (0)

Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 04/01/2010 -- Panorama - Switzerland (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 27/08/2009 -- Ayubowan - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 21/05/2009 -- Masai Mara - Hippopotamus fighting (0)
• 19/05/2009 -- Masai Mara - Giraffe trying to give birth (1)
• 24/03/2009 -- Around the world (1)

read also...

• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 05/09/2009 -- Panorama - Sri Lanka (0)
• 27/08/2009 -- Ayubowan - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 21/05/2009 -- Masai Mara - Hippopotamus fighting (0)
• 19/05/2009 -- Masai Mara - Giraffe trying to give birth (1)

1. Display custom errors pages.

2. Remove unwanted files and folders.

3. Remove backup, unused or obsolete files (.bak, .inc, .old etc). For include files, carefully choose the suffix to prevent information disclosure.

4. Remove default document files (default.aspx, index.php, index.asp, main.jsp etc).

5. Validate properly all parameters against expected data length, data type, data format (dd-mm-yyyy etc) and data range (10-79 etc).

6. Use SANITIZE functions (custom made).

7. Disable directory browsing. If this is required, make sure the listed files does not induce risks.

8. Remove the private IP address from the HTTP response body. For comments, use jsp/asp comment instead of HTML/javascript comment which can be seen by client browsers.

9. For secure content, put session ID in cookie ,use a combination of cookie and URL rewrite, bind the Session ID to the IP address of the client who owns the session and put timeout mechanisms for the Session IDs against Replay Attacks.

10. Turn off AUTOCOMPLETE attribute in form or individual input elements containing password by using AUTOCOMPLETE=’OFF’.

11. Secure page can be cached in browser. Cache control is not set in HTTP header nor HTML header. Sensitive content can be recovered from browser storage. The best way is to set HTTP header with: ‘Pragma: No-cache’ and ‘Cache-control: No-cache’. Alternatively, this can be set in the HTML header but some browsers may have problem using this method.

12. Do not trust client side input and enforce tight check in the server side. Disable server side include. Use least privilege to run your web server or application server. For Apache, disable the following:

Options Indexes FollowSymLinks Includes
AddType application/x-httpd-cgi .cgi
AddType text/x-server-parsed-html .html

13. Do not trust client side input even if there is client side validation. In general,

• If the input string is numeric, type check it.
• If the application used JDBC, use Prepared Statement or Callable Statement with parameters passed by ?
• If the application used ASP, use ADO Command Objects with strong type checking and parameterized query.
• If stored procedure or bind variables can be used, use it for parameter passing into query. Do not just concatenate string into query in the stored procedure!
• Do not create dynamic SQL query by simple string concatenation.
• Use minimum database user privilege for the application. This does not eliminate SQL injection but minimize its damage. E.g. if the application requires reading one table only, grant such access to the application. Avoid using sa or db-owner or root.

14. Do not try to work with invalid data. Display custom error page when data does not pass validation.

15. Use white list validation wherever possible!

Looking forward for your comments…

read also...

• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 22/10/2009 -- Microsoft Tech-Ed Europe 2009 | 9-13 November 2009, Berlin, Germany (0)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 06/05/2009 -- Joomla/Mambo - PDF Indexer Module (1)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 01/05/2009 -- Hotlinking, Bandwidth Theft and mod_rewrite (0)
• 10/03/2009 -- PHP 5.2.9 Released! (0)

P.S
I had a great time…

read also...

• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 06/05/2009 -- Joomla/Mambo - PDF Indexer Module (1)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 01/05/2009 -- Hotlinking, Bandwidth Theft and mod_rewrite (0)
• 10/03/2009 -- PHP 5.2.9 Released! (0)
• 12/02/2010 -- PHP UK Conference 2010 (0)

Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 04/01/2010 -- Panorama - Switzerland (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 24/03/2009 -- Around the world (1)
• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 05/09/2009 -- Panorama - Sri Lanka (0)
• 27/08/2009 -- Ayubowan - Sri Lanka (0)
• 21/05/2009 -- Masai Mara - Hippopotamus fighting (0)
• 19/05/2009 -- Masai Mara - Giraffe trying to give birth (1)

Read more here!

P.S
When can I get my wave please?!

read also...

• 22/10/2009 -- Microsoft Tech-Ed Europe 2009 | 9-13 November 2009, Berlin, Germany (0)
• 06/08/2009 -- Fixed in Firefox 3.5.2 (security issues) (0)
• 14/03/2009 -- Will that be our… Sixth Sense? (2)

Microsoft Tech-Ed Europe 2009 | 9-13 November 2009, Berlin, Germany

Here are the top 3 reasons you should join Tech·Ed Europe 2009.

More networking, more knowledge - Tech·Ed Europe 2009 an intensive learning experience and a great opportunity to expand our network of IT contacts.

Practical skills - Together, we can cover more ground by going to more sessions and more labs. Then we can start applying our new skills right away to build, deploy, secure, mobilise and manage solutions.

Competitive Advantage - Tech·Ed Europe 2009 can give us all the chance to experience emerging technologies and share ideas. That’s the perfect way for all of us to get a competitive edge in the future.

Sound good? Let’s do it! To learn all about Tech·Ed  Europe 2009, just click here.

read also...

• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 07/03/2009 -- SQL Injection Cheat Sheet by ferruh mavituna (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 23/10/2009 -- Google Wave Developer Preview presentation (0)
• 06/08/2009 -- Fixed in Firefox 3.5.2 (security issues) (0)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)

read also...

• 26/08/2009 -- Stelios Kazantzidis sings for the Greek Television (ERT) in 1975 (0)
• 05/07/2009 -- Henry Mancini - Pink Panther Theme (0)
• 24/05/2009 -- Giorgos Zabetas (0)
• 12/04/2009 -- Paco de Lucia (0)

Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 27/08/2009 -- Ayubowan - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 05/09/2009 -- Panorama - Sri Lanka (0)
• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 04/01/2010 -- Panorama - Switzerland (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 25/08/2009 -- How to feed a monitor lizard - Sri Lanka (0)
• 21/05/2009 -- Masai Mara - Hippopotamus fighting (0)

Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 27/08/2009 -- Ayubowan - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 04/01/2010 -- Panorama - Switzerland (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 25/08/2009 -- How to feed a monitor lizard - Sri Lanka (0)

Here is the second set of photos from Sri Lanka! Enjoy it…

read also...

• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 05/09/2009 -- Panorama - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 04/01/2010 -- Panorama - Switzerland (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 25/08/2009 -- How to feed a monitor lizard - Sri Lanka (0)
• 21/05/2009 -- Masai Mara - Hippopotamus fighting (0)
• 19/05/2009 -- Masai Mara - Giraffe trying to give birth (1)
• 24/03/2009 -- Around the world (1)

read also...

• 24/05/2009 -- Giorgos Zabetas (0)
• 17/10/2009 -- Metallica - The Unforgiven (1)
• 05/07/2009 -- Henry Mancini - Pink Panther Theme (0)
• 12/04/2009 -- Paco de Lucia (0)