Get real about PHP4 vs. PHP5

Posted on June 10, 2006 by Noah Dunker

I ran across this article on The PHP Grind website. It’s a little bit on the ranty side. The point of the article being that the current state of the PHP4 vs. PHP5 battle is reaching critical mass, with some major players in the software market blatantly ignoring PHP5 despite it’s proven stability and increased security features.

http://www.thephpgrind.net/2006/06/08/get-real-about-php4-vs-php5/

Now, some of us are at the mercy of our web hosts, and some of us need to test our code on PHP5 before cutting away from PHP4. [url=http://www.wampserver.com/en/]WAMP[/url]’s latest release uses PHP 5.1.4 (the latest release of PHP) for Windows, and several similar “packaged installs” of Apache/MySQL/PHP exist for other platforms. These are especially useful if you want to get a miniature install going on your desktop to help you make the change to PHP5.

I thought it was an interesting article. I wasn’t aware that so many big names in the web app industry were actually telling customers to hold off on using PHP5.

Cake PHP 1.0 Released!

Posted on May 3, 2006 by Noah Dunker

194

Some of us have been using Cake for a while now. It’s been in development for a while. They finally pushed out a 1.0 release though!

http://www.cakephp.org/

Zend Framework available for download!

Posted on March 4, 2006 by Noah Dunker

Zend Framework is a high quality and open source framework for developing Web Applications and Web Services.

Built in the true PHP spirit, the Zend Framework delivers ease-of-use and powerful functionality. It provides solutions for building modern, robust, and secure websites.

http://framework.zend.com/

My-BIC – A PHP AJAX “State of Mind”

Posted on March 4, 2006 by Noah Dunker

“State of Mind” as opposed to a “framework”

Jim Plush, the guy behind My-BIC, has come up with some intuitive sample code and tutorials for harnessing the power of AJAX with PHP.

From the Readme:
My-Bic is a very simple concept, we keep javascript and PHP seperate instead of trying to mash them together. This concept allows you to use the client side framework with whatever backend language you choose.

See the My-BIC page for more info:
http://www.litfuel.net/mybic/

Yahoo Developer Network – PHP Development Center

Posted on February 26, 2006 by Noah Dunker

235

http://developer.yahoo.net/php/

Yahoo put together a nice site chock full of helpful code samples and applications to help PHP developers understand and use the Yahoo! ™ API.

Yahoo’s API provides developers with access to quite a bit of useful information. This site makes it pretty simple to understand how to unlock the potential.

phpMyAdmin 2.5.7 vulnerable to remote attacks

Posted on July 14, 2004 by Noah Dunker

351

many of us use phpMyAdmin to help us manage our MySQL databases. If left open to public access, phpMyAdmin is open to a remote attack allowing the attacker to run arbitrary php code.

The best way to protect yourself is to simply password protect phpMyAdmin. On apache, this can usually be done with a .htaccess and .htpasswd file. Hit google for more information on password protecting parts of your website.

The official white paper on the bug is located here:

http://www.packetstormsecurity.org/0407-exploits/phpMyAdmin257.txt