php10.de International Blog

Christian Fraunholz Internet, Intranet and iPhone development

Friday, February 25. 2011

Coding Rules


These are my coding rules:



  1. line indent 4 spaces, no tabs (relevant for SVN commits)

  2. UTF-8 everywhere

  3. prevent parameter manipulation via HTTP POST or GET

  4. prevent SQL-Injection: before storing a value into the database: use  (int) typcasting for integer values and my_sql() function for all other values

  5. prevent Cross-Site-Scripting: before outputting a variable to HTML, use the html() function


function my_sql($var) {
  return mysql_real_escape_string($var);
}
function html($var) {
  return htmlspecialchars($var, ENT_QUOTES, 'UTF_8');
}

Posted by Christian K. Fraunholz at 12:28 | Comments (10) | Trackbacks (0)

Saturday, February 19. 2011

Petition to the European Parliament

my petition for gardeners - if farmers get subsidiaries, gardeners should get subsidiaries, too - has just been forwarded from the European Parliament to the European Committee
Posted by Christian K. Fraunholz at 23:55 | Comments (5) | Trackbacks (0)

Sunday, March 21. 2010

iThrow at Twitter

Somewhere sometimes someone throws his iPhone into the air. You can find the highest iPhone throws made with the Accelerated Browser now at https://twitter.com/iThrowmiPhone
Posted by Christian K. Fraunholz at 22:00 | Comments (0) | Trackbacks (0)

Friday, January 1. 2010

The Big Red Button

As you may know, building a simple web application that displays the
content of a database table and a form to edit it, requires typing the
field names over and over again. Once you write them as a simple
comma-separated list, then they come via HTTP POST method packed in
$_POST['foobar']. For context change you have to write code to escape
and protect against SQL-Injection or Cross Site Scripting attacks. Most
of the time you must consider the type of each field even though you
defined it already in the database. After all you must type every field
name about 25 times in different formats for a basic application. The
Big Red Button Source Code Generator, being developed by Christian
Fraunholz, is designed to help you with this annoying task.


Description & Feature List


The Big Red Button Source Code Generator

Posted by Christian K. Fraunholz at 13:28 | Comments (0) | Trackbacks (0)
(Page 1 of 1, totaling 4 entries)

Calendar

Back May '12
Mon Tue Wed Thu Fri Sat Sun
  1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30 31      

Quicksearch

Archives

Categories



    All categories

    Syndicate This Blog

    Blog Administration

    Open login screen