Everything you ever wanted to know about XSS

Note from the author: XSS is Cross Site Scripting. If you don't know how XSS (Cross Site Scripting) works, this page probably won't help you. This page is for people who already understand the basics of XSS attacks but want a deep understanding of the nuances regarding filter evasion. This page will also not show you how to mitigate XSS vectors or how to write the actual cookie/credential stealing/replay/session riding portion of the attack. It will simply show the underlying methodology and you can infer the rest.

PHP Database ORM

Propel allows you, the web application developer, to work with databases in the same way you work with other classes and objects in PHP. * You don't have to worry about database connections or writing SQL -- unless you want to. * You never have to worry about escaping data or type-casting results.

Transmitting data between Flex and PHP using JSON

In almost every RIA data needs to be transmitted from a server to the client. Now there are many ways to accomplish this task—web services, HTTP requests, remote objects, etc. But one sticks out as a simplistic and useful solution to this problem, this is using HTTP requests. Using a simple HTTP request, you can send data to a server and receive data back from the server.

The Principles of OOP

One thing that really annoys me about articles and tutorials on OOP that I have found on the web and in books - they all talk about creating a class called 'shape' with various subclasses for 'square', 'circle', 'triangle' etc. This is of absolutely no use when I want to build a system to deal with real-world objects such as 'customer', 'product' and 'invoice' which have corresponding database tables. This has often led me to believe that OOP is therefore unsuitable for building common-or-garden business systems as it appears to have been designed for nothing but graphical applications.

model/view/controller responsibilities

You may be familiar with MVC, but during actual implementation the borders between the model, view, and controller can easily become fuzzy. This article gives a very clear description from the incoming request to the updated view, and then goes on to include numerous examples.

PHP goes to the enterprise level

Vulcan Logic's Script Running Machine, SRM, was first conceived in the autumn of 2000. It is designed to solve some of the problems often encountered within web scripting languages (i.e. PHP) that are a result of the stateless nature of the HTTP protocol.

Seven ways to toggle an element with JavaScript

There are litterally an unlimitted number of ways to toggle an element’s display with JavaScript. Some, more useful than others. Dating back to the late nineties, toggling is perhaps the oldest trick in the book within JavaScript development. However, to this day, it still proves itself useful as hiding/showing elements can improve user interaction (when done tastefully). Anyway, here are seven ways toward achieving just that.

PHP Logging Class

Very Cool class that logs different actions users make in your web application.

Divs instead of tables

One of the complicated things when we are doing a design is to doing it only using divs and not tables. Some of us always use tables. And why? because it’s simple? Maybe using div’s is not so dificult after all.

PHP6, Unicode and TextIterator features

I’ve just install the last version of PHP6 dev and I’ve decided to test the famous new feature, the PHP Unicode Support. I will not explain new things about PHP6 or Unicode or TextIterator, it’s just my discoveries test on this features.