Sam’s random musings

XSS Cheatsheet:

I stumbled upon an interesting resource today - the XSS Cheatsheet. This is a really wonderful collection of XSS (cross-site scripting) test cases. If you don’t know what XSS is, you might find the following resources helpful:

• Foiling Cross-Site Attacks
• XSS Prevention
• PHP Security Workbook

Christian has developed a script for filtering data specifically for XSS. He also has an example implementation where you can try it out for yourself - maybe someone with some free time can try entering all of the test cases to see if any of them expose a weakness in his script.

(Via Chris Shiflett’s Blog.)

This is a small script to backup your nnw prefs (Originally done by Mike Harris) It uses Platypus to provide a simple GUI

#!/bin/sh
echo "$HOME/Library/Application Support/NetNewsWire"
ditto -rsrc "$HOME/Library/Application Support/NetNewsWire" \
"$HOME/Documents/Backups/NetNewsWire Backup/NetNewsWire"
ditto -rsrc "$HOME/Library/Preferences/com.ranchero.NetNewsWire.plist" \
"$HOME/Documents/Backups/NetNewsWire Backup/com.ranchero.NetNewsWire.plist"
clear
echo "NetNewsWire data backed up."
echo ""
open "$HOME/Documents/Backups/NetNewsWire Backup/"

Download

creativepro.com - Photoshop How-To: Lens Blur with Alpha Channels It’s an effect every photographer appreciates from time to time: showing a sharply focused subject against a blurry, out-of-focus background. Instead of playing with aperture settings, you can achieve similar results using Photoshop CS’s Lens Blur filter.

This is a nice fast implementation of the effect, good to keep this note around

Fractured Realities: 7 Steps to Better Security:

Fractured Realities has a new post from Davey today concerning a few tips that could help keep you and your data just a bit safer in this agressive online world.

more good tips

(Via PHPDeveloper.org.)

Coggeshall.org: Phishing & Why PHP Makes it Easy:

On John Coggeshall’s weblog today, there’s a new posting that brings light to a “dark side” of one of the online uses for PHP - its use for phishing and why it makes such a good tool for the job.

Interesting read for PHP people

(Via PHPDeveloper.org.)

CSS Rounded Box Generator:

CSS Rounded Box Generator: Cool implemenation of rounded corners CSS. Thanks Arvind

very good set of tricks to keep a link to

(Via Weblog Tools Collection.)

DevArticles: Creating Javascript/CSS Pop-up Notes:

While not directly related to PHP, there’s a new article over on DevArticles today about creating Javascript/CSS pop-up notes for your site (much the way that they use them for keywords in their articles).

Neat little trick to keep a note of….

(Via PHPDeveloper.org.)

VendorNation : Home Mr. Messerotti jumped right into the Titan experience by using VistaPro Render to take the latest map images from the ESA and rendering them in full 3-D for everyone on the web. We were so impressed with his work that we wanted to post it to the Net right away and share not only the still rendering; but the full animated flights through the Titan landscape!