Archive for the ‘PHP’ Category

Welcome to ShinePHP Forum

Monday, February 22nd, 2010

ShinePHP Forum

ShinePHP Forum

ShinePHP forum is installed. It is ready to accept new members. Registration procedure is very easy. Thanks to bbPress. Just register, get your password by email and make your posts in a minute.
You are Welcome! It doesn’t matter: have you some problem with your current Web development task, have you new idea about cool WordPress plugin, or you don’t know whom to ask to develop it. HTML, CSS, JavaScript, AJAX, PHP, MySQL, – if you have troubles with some tasks or wish to share your excellent knowledges – You Are Welcome! Become ShinePHP Forum member and (more…)

WordPress 2.8.6 Security Release Details

Saturday, November 14th, 2009

Wordpress 2.8.6 Security Release

Wordpress 2.8.6 Security Release

WordPress 2.8.6 Security Release was published. Official page at wordpress.org doesn’t say too much about it, just that:
2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended. The first problem is an XSS vulnerability in Press This. The second problem is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations.
Is it interesting for you what changes were made in terms of PHP source code? Let’s try to discover WordPress 2.8.6 Security Release details together. (more…)

NetBeans IDE for PHP development

Sunday, October 25th, 2009
NetBeans IDE

NetBeans IDE

Do you search comprehensive but free Integrated Development Environment tool for the PHP development? Take a look at the NetBeans project. I use it about two years and very satisfied how it works for me.

With NetBeans you have a dedicated PHP coding environment and complete integration with web standards. NetBeans offers a version of the IDE tailor-made for developing PHP sites. The NetBeans PHP editor is dynamically integrated with NetBeans HTML, JavaScript and CSS editing features such as syntax highlighting and the JavaScript debugger.

(more…)

PHP code to execute MySQL script

Thursday, September 10th, 2009

PHP-MySQL

PHP-MySQL


There are advanced and comfortable tools to manage your MySQL databases. For example:

But sometimes you can not use those tools and need the ability to execute some SQL script on server by your own hands, easy and fast way. What to do in such situation? Use this PHP code to execute all SQL commands from SQL script text file, one by one: (more…)

WordPress under gpc_10805 attack

Tuesday, September 8th, 2009

WordPress

WordPress


A lot of information about last attack on WordPress managed sites can be found:
http://mashable.com/2009/09/05/wordpress-attack/
http://www.netpassiveincome.com/wordpress-mysql-injection-permalink/
http://www.warriorforum.com/main-internet-marketing-discussion-forum/121131-wordpress-mysql-injection.html
http://www.andysowards.com/blog/wordpress/breaking-wordpress-mysql-injection-how-to-fix-latest-attack-evalbase64_decode_serverhttp_referer/
http://www.seanrees.com/2009/09/02/well-an-update-worth-its-salt/
But pay attention that not only WordPress sites are attacked in this manner, look at the
http://www.webdeveloper.com/forum/showthread.php?p=1032611
Sites in the HTML only are attacked by this robot too. (more…)

Your own PHP error handler

Sunday, September 6th, 2009

Your own php erorrs log

Your own php erorrs log


In case you are not able for some reasons to setup PHP error log through php.ini settings you can use this code to setup your own PHP error handler and thus write needed PHP errors/event into your own log file: (more…)

WordPress Security: Silence is golden. Part 2.

Sunday, September 6th, 2009

display_errors OFF

display_errors OFF


Some shared hosting providers don’t turn off php error showing by default. If you don’t change this default PHP configuration settings too, your blog has vulnerability issue or even security problem. Why I talk about security problem? Be cause of this can lead to exposure of the absolute path to your WordPress blog installation. Let’s check together. Put this little script into your blog root folder, for example name it phpinfo.php:

< ?php
phpinfo();
?>

Call it from the browser as http://yourBlogURL/phpinfo.php
You will see standart ‘PHP Info’ page with values of different PHP configuration parameters. Check display_errors parameter value under ‘PHP Core section’ now. (more…)