vanderwal.net

Digital Web needs your help

Are you looking for a great project to volunteer your time? Digital Web Magazine is still looking for people with the following skills to help with the redesign and weekly publication:

• graphic designer (print and web / Illustrator / Photoshop)
• information architect (site flow / Visio)
• logo designer (branding / Illustrator / Photoshop)
• web designer (layout / Photoshop)
• web developer (markup / hand-coding)
• web programmer (backend / SQL / PHP)
• writers (word or text)
• curators (linkbot, webtrends)
• editors (word or text)

Write secure PHP

Write secure scripts with PHP 4.2 from WebmasterBase. [hat tip Bill]

Code PHP efficiently

Code PHP efficiently, from evolt.

PHP and MySQL for managing images on the Web

Managing Images With a Web Database Application with PHP and MySQL and nothing up the sleeves. The folks from O'Reilly Net offer this one, which is not in the Web Database Applications with PHP and MySQL. The book is one of my favorite information application development books at the moment for a variety of reasons: ease of coding principles, explaining application development, explaination, then using what is learned and implementing it.

MS security causes sad day

Life sucks when: You have to pull an e-mail account that you manage from service. Particularly when this account is for your Dad. My Dad can be reached at Tom and I will be keeping Thomas. The TJV account is closed.

Why you ask? The account was hacked with the klez virus. He cleaned his hard drive, as he had no choice it or another virus took the hard drive out. He took another hard drive and put it in that machine and started fresh. This may have also infected his new laptop. Yes, all of these machines run Windows (the swiss cheese security system). My dad is more than computer savvy and Windows is not a consumer OS, as it is nothing more than an e-mail away from destroying everything digital you own (among many other issues, which I spend hours assisting friends and relatives with their continual problems with the MS OS). Microsoft continues to lie about its focus on security and the basic problem is the OS itself, it is not secure and it seems it will never be secure. UNIX has some issues, but has many more years of development under its belt, which is why is far more secure. UNIX variants (Apple Mac OS X, Linux, BSD, etc.) all have the advantage of years of experience and advanced developers working on the OS.

Keeping a MS box secure requires somebody with a lot of experience and they are not cheap. The MS total cost of ownership being lower than UNIX is a myth and unfounded. If you have MS open to the outside world (Internet server, DSL at home, or unfiltered (through virus scanner) e-mail, etc.) you need an MS security expert focussed on ensuring the sanctity of whatever is considered valuable on the MS boxes. This person will cost as much, if not more, than a senior UNIX systems administrator (who are, by and large, veterans in UNIX security also as it comes with the territory).

Too many folks (that are near and dear to me) have had MS servers hacked or been victims of viruses in the past couple of weeks. Granted the MS boxes hacked may not have been watched over by MS security experts, but that is what it takes.

Making choices, as far as what language to develop Internet applications, should keep in mind lock in factors. A UNIX only or a Microsoft only solution that requires the application be only run on a certain type of server has never been a great idea. This becomes even more apparent now. In my opinion this has never been a good option. Fortunately, there are many more options available that run on nearly all OS platforms. These include: Perl, PHP, Java (JSP), Python, ColdFusion, etc. Each of these languages have their own plusses and minuses, but if a certain OS platform becomes an unavailable option the applications can relatively easily be moved to another OS. This is not the case with ASP, and even less so the .Net framework (as noted before. Sure ASP can use ChiliSoft, but that is a very short term solution (as you know if you have ever had to use it, it buys you time to recode everything into a portable application language) and requires double to triple the hardware resources to run it compared to ASP on MS or any other language running natively.

All of this is just the beginning of the reasons why I most likely have bought my last Windows machine. The other reasons fall into the areas of trust and pricing. This explanation may follow soon.

Need to get your hands on OS X packages. I have found this page many times and now mabye I can find it on a regular basis.

So you want to build your own weblog tool like the one here? Start with PHP and MySQL with a little Apache and a sprinkling of arrays and script code. Yes, this is basically what is under this puppy.

PHP with Java tutorial over at Dev Shed. Why not JSP? PHP is quicker to write and quicker to run.

Not that I personally need this at the end of the month, but Joao Prado Maia writes about Improving Performance by Profiling PHP Applications (benchmarking PHP) on O'Reilly Net. The article shows us how to place scripts within our scripts that allow us to capture times so to know where we could spend our time focussing on making PHP run more quickly.

PHP has a security hole that warrants a patch/upgrade ASAP. Hopefully you are running PHP on server with a recent version of Apache so that it is built in using Apache's dynamic modules. This will make the upgrade a breeze. Fortunately my Web host had upgraded this server to PHP 4.1.2 prior to the news coming out. My host? PHP Web Hosting.

The solution to the = in the link is to use  in its place. This may require a solid tweak to my home-rolled weblog application so to sniff, parse, and replace the symbol prior to inserting into the database.

Arg, running into issues in links when the link has an equal sign followed by a number or two (=22) does not look like (=22). This will take some playing around as I am using the "quoted_printable_decode" in php to print things properly.

PHP secure programming musts from the fine folks at Zend. [hat tip Bill]

Kevin Fox adds New to You functionality to his site. This is the best idea I have run across in a while. It is a great idea that beats the problems I find on sites I frequent often. It also seems to cover the territory between visited links and not providing them. [hat tip Dinah]

Matt makes observations of the state of severs and scripting deployments. I agree with nearly all of what Matt point out. Some of the reasoning behind the varying set-ups is for security reason's, others are to mirror configurations on other servers that had slightly different purposes. In all, what this needs is a solid documentation tool. PHP provides some of this with a function that prints out the build of the server that script resides on, this is usually the first task many of us perform on a machine. This however, is just the tip of the iceberg of the information we need.

This is part of the second and fourth element of the cornerstones of information application development (info apps need to be usable, maintainable, reliable, and repeatable). If a task is difficult to maintain and even harder to repeat there is some work that needs to be done to change the environment or the application.