osdc

osdc reprise

cafuego — Thu, 29 Nov 2007 17:07:28 +1100

Well, as it turns out Rasmus Lerdorfs filter made apache segfault, so I've disabled it again. XSS indeed!

On a lighter note, this work of art was created last night during the OSDC dinner: http://www.youtube.com/watch?v=NfVL_4uRLSo

a spot of php tweaking

cafuego — Wed, 28 Nov 2007 12:59:27 +1100

Well, as it turns out there is a ready-made fix to some of the horrid inser-input-filtering problems I - and probably any PHP coder - encounter.

This morning was the first time I saw Rasmus Lerdorf speak and, although his views on web security want me to give up coding in general and become a potato farmer more specifically, he did point out some tools to make it a lot harder for a macilious user to abuse any web app you write.

The pecl filter module contains ready-made data validation and input filtering functions that you can relatively easily stick on the top of any page that takes user input and impose some saniation. Additionally, you can force a default filter on all GPC vars.

A short but helpful tutorial is available at http://devzone.zend.com/node/view/id/1113

hot news

cafuego — Tue, 27 Nov 2007 13:51:49 +1100

Hot news right off the press: PHP6 will include Chuck Norris!

and so it begins

cafuego — Tue, 27 Nov 2007 10:24:25 +1100

... and here we are at OSDC. Rusty is about to start his alphabet talk.

OSDC

cafuego — Wed, 03 Oct 2007 09:25:34 +1000

Last year I properly attended my first Open Source Developers Conference, and this year's - held in Brisbane from November 26 to 29 - is coming up fast.

I'm planning to attend again this year and if you have any developers doing open source work or doing any open source work yourself, I can heartily recommend going. OSDC is a great place to pick up tick and trips and find out how to use your favourite tools and languages in unexpected new ways.

The theme for this year's conference is "Success in Development & Business".