PUBLIC MARKS with tags type:article & web-dev

Le logiciel, dénommé SecuBat Framework, agit comme le ferait un pirate informatique: il attaque les sites web dynamiques afin d'identifier les forces et faiblesses de leurs systèmes de sécurité. Il les sollicite par des attaques croisées XSS (Cross-Site Scripting Attacks) ou par des injections SQL, c'est-à-dire en insérant des scripts Javascript ou des fragments de code SQL dans leurs formulaires, pour interroger leurs bases de données ou modifier leurs pages.

This article looks at five common Web application attacks, primarily for PHP applications, and then presents a case study of a vulnerable Website that was found through Google and easily exploited. Each of the attacks we'll cover are part of a wide field of study, and readers are advised to follow the references listed in each section for further reading. It is important for Web developers and administrators to have a thorough knowledge of these attacks. It should also be noted that that Web applications can be subjected to many more attacks than just those listed here.

JavaScript’s increasing popularity throughout the web makes it more important than ever to make sure our client side code is implemented with a nice mix of stability, speed, and reusability. One of the best ways for accomplishing this is to use a simple library and syntax to use as a foundation for every project. Thankfully, Sam Stephenson created an amazing library of functions that we can rely on called Prototype.js to ease our JavaScript development practices.

Can CSS be used for serious print jobs? To find out, we decided to take the ultimate challenge: to produce the next edition of our book directly from HTML and CSS files.

Les trackbacks ont été créés par Benjamin et Mena Trott en Août 2002. Suite à cela, une spécification a été écrite et est disponible sur le site de movabletype. Ce système correspond à du peer-to-peer entre sites web puisque des informations sont échangées sous le protocole HTTP (en méthode POST). Il y aura donc deux serveurs (ou deux sites) qui entreront en communication et qui échangeront des données.

Les trackbacks ont été créés par Benjamin et Mena Trott en Août 2002. Suite à cela, une spécification a été écrite et est disponible sur le site de movabletype. Ce système correspond à du peer-to-peer entre sites web puisque des informations sont échangées sous le protocole HTTP (en méthode POST). Il y aura donc deux serveurs (ou deux sites) qui entreront en communication et qui échangeront des données.

PHP est un langage de programmation interprété, c'est à dire que le fichier texte contenant le code PHP est analysé puis traité directement (pas de code compilé). Nous allons voir comment optimiser PHP pour tirer le maximum de performances.

Premier document contractuel d'un projet Web, le cahier des charges vise à formaliser les besoins et les exigences de l'entreprise. Considéré comme un passage obligé, c'est en réalité le premier pas vers un projet maîtrisé.

we will explore different techniques for democratizing our design through the use of style sheet switching. By applying a different CSS file to a markup document, we can drastically change any or all aspects of its design—the layout, typography, or color palette. This technique may hold incredible appeal to designers because it exponentially decreases the amount of overhead required to redesign a site. But, as you’ll see, this technique can wield incredible benefits to our site’s users, allowing them fine-grained control over a page’s presentation and, in turn, better access to the content therein.

This article deals with the display of tree-structures that are driven by a database. There are actually a few approaches to transform a 2-dimensional structure into a tree, and it seems odd that most are unknown to many developers.

MVC implementation in PHP

In information management, persistence and availability are in constant tension. This tension has led to separate technologies for Uniform Resource Names (URNs) and Uniform Resource Locators (URLs). Meanwhile, Uniform Resource Identifiers (URIs) are designed to serve as both persistent names and available locations. This article explains how to use the current URI standards with XML technologies, gives a history of URNs and URLs, and provides a perspective on the tension between persistence and availability.

Representational State Transfer (REST) is a collection of principles for managing information over a computer network like the world wide web. While REST originally referred to a collection of architectural principles (described below), people now often use the term in a looser sense to describe any simple web-based interface that uses XML and HTTP without the extra abstractions of RPC-based approaches like the web services SOAP protocol.