Archive for the ‘PHP’ Category

SQL Injection Attacks

Wednesday, January 5th, 2005

Steve Friedl explains SQL Injection Attacks by example.

So if you never have validated your input (especially from Internet) OR did limited validation, don’t blame anyone if your site gets hacked by SQL Injection.

JD

Breaking WordPress Plugins

Friday, December 31st, 2004

WordPress Logo

I didn’t know I will be breaking WordPress plugins by renaming the wp-admin folder.

Anyway, I installed Spam Karma plugin only to realize that it assumes the admin folder to be ‘wp-admin’.
Obviously, plugin didn’t work as expected because I have renamed wp-admin folder.

Though fixing the plugin was simple. I modified spam-karma.php file to use ‘admin_folder’ setting and plugin worked without any problems and started eating boat load of ‘poker’ spam I have been receiving! :)
So if you have used my script to rename wp-admin folder and wants a working Spam Karma plugin, you should download the modified spam-karma.php.

Btw, if you are using any other plugin which breaks upon renaming wp-admin folder, mail me at dkjariwala NO SPAM at gmail dot com. I will try my level best to fix the plugin.

JD

Script to rename wp-admin - WordPress Admin Folder

Thursday, December 30th, 2004

WordPress Logo

Whew! Yesterday, I posted about renaming my WordPress Admin Folder. Today, I completed the installation script which can help anyone rename ‘wp-admin’ folder of their WordPress installation.

I have tested the script extensively on my Windows Web Server. It will be great if someone can test it on Linux box.

Btw, idea behind renaming ‘wp-admin’ folder is to take a step towards securing your WordPress installation.

Right now, a cracker can easily identify your WordPress Admin site.
[If your WordPress blog URL is http://myblog.com, Your Admin Site URL is http://myblog.com/wp-admin/ ]
So a cracker may launch a dictionary attack to hack in to your blog.

I would like to emphasize that renaming your admin folder is not an end to securing your WordPress installation. You should use strong passwords. You should rename the default ‘admin’ account. Access Admin site over SSL, if possible.

Anyway, you can download script as a ZIP file here. [There is a README file inside which should guide you through the process.]

Here is the screenshot of the script:
Screenshot of Installer script to Rename wp-admin folder

Let me know if this script works for you. Make sure to contact me, in case you find any bugs.

Enjoy!
JD

UPDATE:
This script can be used only with WordPress v. 1.2.2.
Using it with any other version might break your WordPress installation.

Zend offering PHP Certification

Saturday, July 17th, 2004

From Coggeshall, Zend is now offering PHP Certification. I think this is really good idea as it gives more creditbility to language itself. Those corporate customers who might be complaining that they can’t find a PHP programmer, now can find good PHP programmers easily. Btw, exam cost is 200 USD, if I am here in States till year end, I will try for the certification!

JD

Accessible HTML Forms.

Friday, January 23rd, 2004

Simon has written an excellent article on accessible forms for Site Point.

I knew most of the tricks there but he certainly displayed a better way to do certain things like using ‘addEvent’ code. Great stuff!

Accessing Microsoft Access MDB file from Linux.

Monday, January 12th, 2004

Thanks to John, now We know how to read Access MDB file on Linux platform.

Don’t start dumping your windows machines, there are lots of limitations to this but still it’s workable up to some point. Btw, if you don’t have your own dedicated server, forget using this technique as it involves lot of non standards module installation.

Though, it’s a nice solution to keep in mind, may be some day you need it.

JD

CSS Tutorial, PHP Traveller and More..

Monday, December 1st, 2003

Nick points out yet another tutorial on CSS, this time on CSS Selectors from Maxdesign folks. It is as excellent as their other tutorials on CSS! A must read for everyone! Though I feel that this tutorial should have been the first CSS tutorial from Maxdesign. It could make things much more comprehensive for the average programmer like me! :)

And thanks to PHPDeveloper.org, I came to know that PHP Travellar is back! He surely knows what he is talking about! Go subscribe to his RSS in your news aggregator!

JD

PostGreSQL on Windows …… without Cygwin!!!

Sunday, November 30th, 2003

Alright,

This is rather intersting finding through Devshed Forums,

Nusphere is behind the PostGRESQL port to Windows! It’s called UltraSQL.

Find all related details on Nusphere’s Products page . (Scroll down to bottom of page to find details about UltraSQL.)

I am currently downloading it and I am excited about trying PostGRESQL on Windows! :)
JD

A place to try different PHP CMS!

Friday, November 28th, 2003

Yeah, we all know there are lots of Content Management Systems (CMS in short) written in PHP.

But how do you decide which one is best FOR YOU?? Visit every CMS website, download, install and see if it suits you?

Nah,
Welcome to Open Source CMS
They have all the popular PHP CMS installed and ready for you to try out! They will give you password to the admin functionality on the CMS and you can check all the options which you care for!

Really good work! :) JD

To follow PHP Coding standards.

Saturday, November 22nd, 2003

I came across PHP Coding standards through PHP Weblog.

I went through the entire document and it looks pretty solid to me. There are few things which they suggest to do differently then I do, but I think they have good ‘justification’ for the style they advocate. I will now do all my PHP coding following this standard. [It's not like I don't follow any standard, I do follow _some_ kind of standard which comes from my intuition and its not documented! ;) ]

I also encourage you to follow this standard or a similar one so that the person who will read your code later will be happy because it becomes easy for him/her to understand the code! :)
JD