Sam’s random musings

PHPSecurity.org Launches:

PHPSecurity.org, the companion web site for my new book, Essential PHP Security, is now online. Many thanks to Amy Hoy for the excellent design!

I’ve included the table of contents, the (unfortunate) errata, some reviews, and the code repository.

Some of the examples in the code repository might raise ethical concerns, but I tried to be very careful not to provide full-featured tools that script kiddies can use. For example, the session injection script only lets you modify strings and is split into two separate examples (edit.php and inject.php), and the script to let you browse the filesystem is very basic.

Worth a look, the book, it seems likely

(Via Planet MySQL.)

10.4: Create custom Blojsom themes in Server:

I have seen many questions on various sites on ‘how do I make my own theme in the Apple install of Blojsom in 10.4 Server?’ Well, I dug around in the files for a day or two and here it is. BTW, as you can see, I’m still tweek…

Need to keep this link for later

(Via Mac OS X Hints.)

tow.com » blog » Aperture Scripting:

[He] is writing an AppleScript that transfers annotations from my iView catalogs into Aperture image versions. My file structure for my annotated RAW images has been well-documented, and it will make writing this script relatively straightforward — if anything in AppleScript can be straightforward! A tricky part was mapping iView’s annotation field names

Will be interesting to see what dirvers people use with aperture…

(Via .)

AJAX Mistakes:

A good list of mistakes one can make when developing DOM Scripting applications, in a handy editable wiki format.

Good start of tips…

(Via DOM Scripting Task Force.)

Scalability is not the only concern:

Yeah. Here’s their process:
1. Start with a handful of users. This is too much for ded box.
2. Move to dedicated server.
3. Add a few more users til they’re at 100. This is too much for one box.
4. Add more hardware. It’s obvious this isn’t enough.
5. Recode.

Erm… Hello? Should the recoding have happened after step 1? I mean, if you draw a graph of “okay if we use 10% of a CPU with 10 users, with 100,000 users we’ll need 10K CPU’s” … Something’s wrong.

Some good info and thoughts in this post about the same post

(Via dotnot.)

Aperture 1.0: the Ars review : Page 1:

Apple has cojones. Let’s not pretend otherwise. Jumping headfirst into the fully mature digital imaging market requires the shameless bravado of a one-legged man at a butt-kicking contest or any number of contestants on So You Think You Can Dance? What’s at risk is not only cold, hard cash, but more importantly, their reputation as a software innovator. With Aperture, Apple is clearly hoping to have the same success it has had with Final Cut Pro. Plus, becoming a household name in imaging can’t hurt the bottom line for hardware sales.

Check out page 8, image degradation is not a good thing in a Pro app, lots of good cold experience in here. I really can’t wait to see 1.1

(Via .)

Report: Aperture:

a positive experience using Aperture with wedding pictures plus more experiences and details about hardware compatibility and RAW files

At least one good report. Somehow it doesn’t really seem like this was ready for primetime

(Via MacInTouch.)

Adobe announces new bundles:

Following the news that Adobe completed the acquisition of Macromedia (3 December 2005), the company has now announced three new product bundles for design, video and web solutions. The Adobe Design Bundle includes Creative Suite 2 Premium with Flash Professional 8 software; the Adobe Web Bundle brings together CS 2 Premium and Studio 8; and the Adobe Video Bundle offers video solutions coupled with Flash Professional 8. The Adobe Design Bundle and Web Bundle are available now priced UKP 1381 and…

Humm if one needed to upgrade this might be the time…

(Via Digital Photography Review (dpreview.com).)