Noutati

On the PHPFreaks.com website there's a new article looking at one way to help protect your website from those evil doers out there looking to cause you and your data harm - PHP-IDS.

PHPIDS (PHP-Intrusion Detection System) is a simple to use,well structured, fast and state-of-the-art security layerfor your PHP based web application. The IDS neither strips,sanitizes nor filters any malicious input, it simplyrecognizes when an attacker tries to break your site andreacts in exactly the way you want it to. [...] In a nutshell PHPIDS is an advanced intrusion detection system written with performance on a large scale in mind. The basic installation and configuration is pretty straight forward.

On the PHPFreaks.com website there's a new article looking at one way to help protect your website from those evil doers out there looking to cause you and your data harm - PHP-IDS.

PHPIDS (PHP-Intrusion Detection System) is a simple to use,well structured, fast and state-of-the-art security layerfor your PHP based web application. The IDS neither strips,sanitizes nor filters any malicious input, it simplyrecognizes when an attacker tries to break your site andreacts in exactly the way you want it to. [...] In a nutshell PHPIDS is an advanced intrusion detection system written with performance on a large scale in mind. The basic installation and configuration is pretty straight forward.

• Payment_DTA 1.3.0a1
• PHP_CodeSniffer 1.2.0a1
• Services_Facebook 0.1.8
• File_CSV_DataSource 1.0.0RC1
• PHP_CompatInfo 1.9.0b2
• File_CSV_DataSource 0.2.3alpha
• Services_GeoNames 0.2.2
• Net_Whois 1.0.1
• Net_SMTP 1.3.2

• Payment_DTA 1.3.0a1
• PHP_CodeSniffer 1.2.0a1
• Services_Facebook 0.1.8
• File_CSV_DataSource 1.0.0RC1
• PHP_CompatInfo 1.9.0b2
• File_CSV_DataSource 0.2.3alpha
• Services_GeoNames 0.2.2
• Net_Whois 1.0.1
• Net_SMTP 1.3.2

Matt Stone has written a tutorialon how to use the Zend_Acl componentwithin a CodeIgniter application. His tutorial, which contains the code and database tables needed to build a simple access control system, provides a good example of how Zend Framework's loose couplingallows it to be easily integrated with other applications. However, there's always more than one way to skin a cat, so if this is interesting to you, also look at another recent blog post on the same topic.

Introduction

PHPIDS (PHP-Intrusion Detection System) is a simple to use,well structured, fast and state-of-the-art security layerfor your PHP based web application. The IDS neither strips,sanitizes nor filters any malicious input, it simplyrecognizes when an attacker tries to break your site andreacts in exactly the way you want it to. Based on a set ofapproved and heavily tested filter rules any attack is givena numerical impact rating which makes it easy to decide whatkind of action should follow the hacking attempt. This couldrange from simple logging to sending out an emergency mailto the development team, displaying a warning message forthe attacker or even ending the user's session

Chris Hope has a brief blog postexplaining how to use method chaining in Zend Framework. He provides a basic example of how method chaining works using the Zend_Mail component, and offers the following simple rule to help readers understand the concept: "If you then had foo(), bar(), baz(), and bat() methods you could then do this:$myobject->foo()->bar()->baz()->bat();

The AFUP (L'Association Francaise des Utilisateurs de PHP)recently organized the Forum PHP 2008conference in Paris on Dec 7-8 2008. By all accounts, the event was a great success, with a keynote address by Zak Greantand sessions by Lukas Smith, Zeev Suraski, David Sklarand others. Zak Greant has posted a brief summary(and slides of his keynote) on his blog, and you'll also find links to other presentationson the MagicalTux blog.

Gabi Solomon has put together a brief tutorialdiscussing how to use the language component in Zend Framework. His approach makes use of a controller pluginthat allows easy generation of language-specific URLs. He says: "We need to make the url to allow us to change the language. And to do that i added a new rule in the bootstrap file [...] This rule will produce urls with the language in the url". If handling multiple languages in your ZF application is keeping you up at night, Gabi's post might help you some up with some new ideas. Take a look!

Douglas Brown has discussed the advantages of using a PHP frameworkin his blog. If you're new to the world of PHP frameworks, his post provides a concise list of the benefits you will gain. One of the key benefits he finds is: "MVC or Model- View- Controller is a well-known design pattern that demarcates the database and business logic from the presentation layer. This results in simple, clean and understandable code". Of course, not everyone agrees! A spirited discussion is currently under way in the comments section of his post. Take a look, and put in your $0.02!

Alvaro has put together a post that lays out some of the design patterns that the Symfony framework uses to get the job done:

Much has been said this days about how modern web frameworks interpret the MVC architectural pattern. I'm my case those articles made me rethink how I use a framework, specially Symfony. This lead me to start a study on which patterns come into play while we develop a Symfony application. So while adding new features or refactoring existing ones I will know which class is in charge off doing the job.

Alvaro has put together a post that lays out some of the design patterns that the Symfony framework uses to get the job done:

Much has been said this days about how modern web frameworks interpret the MVC architectural pattern. I'm my case those articles made me rethink how I use a framework, specially Symfony. This lead me to start a study on which patterns come into play while we develop a Symfony application. So while adding new features or refactoring existing ones I will know which class is in charge off doing the job.

In a recent post to his blog Sankho Mallik has posted a quick tutorial on using the Zend_Captcha component of the Zend Framework in your forms.

Zend Framework has a set of great classes included to take away a lot of the headaches involved with setting up a CAPTCHA system. The one I use is Zend_Captcha_Image, which creates an image for you and sets up a Session so you will be able to validate all information appropriately. Problem is, there's little documentation out there on this. [...] I'll show you everything you need to know to use Zend_Captcha_Image WITHOUT Zend_Form! If you'd like to learn the implementation using Zend_Form, please visit Robert Basic's Blog.