It was barely a “like” and definitely not a “love” from Facebook investors as the online social network’s stock failed to live up to the hype in its trading debut Friday.

In this recent post to Reddit.com, the question of application security is asked – the poster wants recommendations on how he should keep his app safe from would-be attackers:

I can code fairly well in PHP these days, but my security isn’t so hot. Is there a tutorial or plugin you guys can recommend as to how I should be protecting my php pages/inputs? I want to avoid common attacks like XSS, inputs with NULL or DROP TABLE etc?

Responses on the post include recommendations related to:

• Using the Chorizo scanner to find common issues in your code
• Using PDO for database connections (with bound parameters)
• Not trusting “$_SERVER”
• Data sanitization

There’s also links to a few other resources with more details.

Here, we create the ability to log in using the dummy data we created in the database table. Register & Login series playlist is available at: www.youtube.com Official website phpacademy.org Support Forum http Follow us on Twitter! twitter.com

In one of the largest initial public offerings of stock ever, Facebook said Thursday that it is raising at least $16 billion for itself and its early investors in a transaction that values the world’s definitive online social network at $104 billion.

Check out the full PHP series at www.thenewboston.com Here is a link to the phpacademy YouTube Channel. Go and subscribe now! www.youtube.com And here is the phpacademy official website: phpacademy.org

Last week I presented my research about “Adding ASLR to jailbroken iPhones” at the Power of Community 2010 (POC2010) security conference in Seoul. During my talk I explained how one can use a modified ‘rebase’ utility to rebase the dynamic linker dyld on the iPhone. Rebasing dyld is important because it contains enough code gadgets that can be used to kickstart arbitrary shellcode on jailbroken iPhones. A tool called Antid0te will be released until the end of this year that allows normal users to add ASLR to their iPhones. The release of this tool was originally planned for 24th December 2010 but it had to be postponed because I got really ill and also my glasses broke.

Anyway a few days ago I demonstrated how my “rebase dyld” research that was originally done for the iPhone applies directly to the dynamic linker used by Mac OS X Snow Leopard. I released a short article describing how one can rebase his dyld binary with a patched ‘rebase’ utility which I also released. This can be used to rebase your own dyld binary to a different position. Rebasing dyld to an address other than the normal one, improves the security of your Mac because all the public articles/techniques about state of the art Mac OS X exploitation assume/require the dyld binary to be loaded at a fixed address. All attacks based on this will fail once you have rebased your dynamic linker binary.

So enjoy this little christmas present until I am fit enough to release antid0te.

Marcus Bointon has written up the process he took to get the PHP extension for Wkhtmltopdf (a conversion tool for HTML to PDF generation) up and working on a Mac OSX machine – not as easy a task as it sounds.

Wkhtmltopdf is extremely cool. I’ve used qtwebkit for generating server-side page images before using python-webkit2png, and that’s fine (unlike using Firefox running in xvfb!), but I need to produce PDFs. So, I looked around and found several neat, simple PHP wrappers for calling wkhtmltopdf, and even a PHP extension. “Great”, I thought, “I’ll just install that and spend time working on the layouts since the code looks really simple”. I spoke too soon.

He goes through each step of the process – installing the needed wkhtmltox and libwkhtmltox support, having to manually compile wkhtmltopdf and some of the small changes you’ll need to make to the Makefile to get things to cooperate. He shows where to put the resulting application files and the name of the extension to enable in your php.ini.

In this tutorial, you will learn how to encrypt passwords and other data by using the md5, sha1, and crypt functions. Be sure to SUBSCRIBE because there will be a new tutorial every week. Follow me on Twitter @RiverCityGraphx Like us on on facebook: on.fb.me Suggest tutorials at www.rivercitygraphix.com For project files, help forums, and more check out the website at http For business related inquires contact us at rivercitygraphix@yahoo.com

Already expected to be the largest-ever initial public offering for an Internet company, Facebook is making its IPO even bigger.

On PHPMaster.com today there’s a new tutorial posted, the first part of a series, looking at the use of the Standard PHP Library (SPL) in PHP. In this first part of the series, Stefan Froelich looks specifically at two of the more common uses for iterators – working with arrays and directories.

When I first came across the term iteration and saw the overwhelming list of classes related to it in the SPL, I was taken aback. It seemed maybe iteration was too complex for me to grasp. I soon realized it was just a fancy word for something we programmers do all the time. [...] In the first part of this two-part series I’ll introduce you to iteration and how you can take advantage of some of the built-in classes from the Standard PHP Library (SPL).

Included in the tutorial is example code showing how to use the ArrayIterator to work with an array and the DirectoryIterator to process the contents of a directory. He also briefly touches on a few other iterators like “FileExtensionFilter”, “RecursiveDirectoryIterator” and “RecursiveArrayIterator”.