programming

Xdebug wizard to detect and recommend binary selection

It can be a challenge sometimes to determine which version of the xdebug binary is required for your system's configuration. This handy xdebug binary recommendation wizard will accept and parse your phpinfo(); or php -i output. It will tell you which version is installed and recommend a newer version, if applicable. It also has a link to the appropriate binary package and instructions for installation.

eZ Components proposes adoption by Apache Software Foundation as Zeta Components

I just discovered that the core developers of eZ components have left eZ Systems, but have worked out an arrangement with eZ Systems to donate the source code to the Apache Software Foundation.

Zeta Announcement Apr 19, 2010

Tobias Schlitt's blog post

SQL Injection Avoidance

SQL Injection is a serious security concern for any application that accepts user input and executes SQL created by concatenating strings including user-provided values.

How does this present a risk? Consider the following:

s = "SELECT * " +
"FROM users " +
"WHERE username = '" + username + "';"
db.execute(s)

Now consider if the user entered the following value into the login form as their username:

'; DELETE FROM users; --