I'm looking for a complete list of security guidelines for programming and deploying PHP web sites and applications on an Apache (Linux) server. Basically, a "security check list" to run through before finishing a project. I.e.,
Cross Site Scripting
Cross Site Request Forgery
Sanitize form data that goes into database
Disable register globals and error reporting in custom php.ini
Upload files below web root
...(the list goes on)
I did some searching on the internet and in this forum, but couldn't find a comprehensive, succinct, and complete list of guidelines.
Thanks in advance.
Hi,
What would be the general structure of a App/Project based in C Programming language.
libs,
includes,
header files.
etc etc.
What would be the class structure. (in OOps) need to be scalable and other features.
Something like main.cpp
main.h
does any one have any good links or images or pdf?
I'm looking at a database dump file, and I see many records in various tables with their version number set in values other than 0 (even 94 in one case). I understand it has to do with hibernate locking strategy, but my concern is that today is Sunday, and the site has almost no visitors so is: is this normal ? Or is there a known hibernate bug or even some programming malpractice producing this ?
Hi there.
Once I read an MSDN article that encouraged the following programming paradigm:
public class MyClass
{
public void Method1()
{
NewCustomException();
}
public void Method2()
{
NewCustomException();
}
void NewCustomException()
{
throw new CustomException("Exception message");
}
}
Do you think this paradigm makes sense? Wouldn't it be enough to store the exception message in a static const field and then pass it to the exception's constructor, instead of encapsulating the whole exception throw?
how powerful is Bluetooth programming on Android? is it possible to add new protocols and encryption techniques? or even change in the current protocols? does it support bluetooth 2.1+EDR?
Some programming environments like C++ builder have timer components with a callback function which executes in the same execution contexts as where the timer object is created.
I was wondering how to do something similar in plain c++ with threading.
Or are there any other ways to have a callback which is periodically called to perform some task and runs in the same execution context as the calling thread?
Hi,
Is there any way to change backlight turn off TIME using programming(Preferred c# or vb.net other c++ can be used too)? I guess, may be it is changed using registry info or API.
Manually, it is done by:
Setting Backlight (Battery Power and External Power)
Thank you
Hopefully this question is allowed over here. It does not really have to do with programming per se but with the costs associated with it.
My question is:
"How much does sending/receiving XMPP
messages cost".
I can find all the information about email etc. But I could not find information about costs sending/receiving XMPP messages.
Please give me some titles, preferably not free books.
I don't need it to be free, It would be better if published by McGraw Hill, Prenhall, springer, or any other good publisher.
not that i'm interested here in programming with c++ only.
thank you
Is it practically possible to create a triangle of stars like this as below in SQL.I know that this could be done easily in any other programming language like C,C++,Java but want to know whether it is really possible with just SQL or PL/SQL.I tried working on it with dual table in Oracle but couldn't get through it.
* *
* * * *
* * * or * * *
Can someone please shed somelight if anyone knows about it.
I'm a blind student currently in a system admin/shell programming class. Although ssh works fine for executing commands like ls, pwd, etc editors do not work well with my screen reader and an ssh session. I was wondering if it is possible to mount a Linux folder over ssh so it appears as a windows drive? This way I could edit any files I needed to with accessible software and not have to constantly use SCP to send files back and fourth.
Though it's on the edge of programming questions, I think this is still relevant here, as only those of us actually doing the coding for a site would be considering this.
I've been reading more about keyword placement, and it seems to me like a good place to do keyword placement would be in the class and id names chosen for the elements they are representing. I'm not talking about any kind of black-hat keyword stuffing thing but real legitimate use of descriptive keywords for elements.
Is this something that is actively done for SEO?
I don't want to take the time to learn Obj-C. I've spent 7+ years doing web application programming. Shouldn't there be a way to use the WebView and just write the whole app in javascript, pulling the files right from the resources of the project?
What is the most painful programming mistake you have done and what lesson you have learn after?
I guess mine was making a release to production on the development code which was not tested yet.
The lesson-learned:
Delete any projects that can trigger a
release on the live application from
CCTray. I only add them when a release
to production is necessary since then.
And once I am done, I delete them from
my project lists.
I'm on my way to programming a database application and in our course we are told to implement a library of elements using one of the Java Collections. Each of the elements has a unique ID with which it's supposed to be addressed. Now I am wondering how this can be done.
I though about using a ListArray but this won't work because the only way of addressing List elements is through the index which you can't control.
Do you have some advice for me?
Hey guys
I'm very new to the whole programming - so far I only have experience with building websites, database etc.
I currently have a website where users can share their online purchases.
I want to build a widget that other websites can integrate on their site. Users should be able to insert their purchases directly through this widget without having to come to my website.
Thats the idea but I have no idea how to go about it - can anyone point me in the right direction.
Thanks
a custom mainboard has a DVI and a DisplayPort connector on the board. Currently, everything that is connected at DVI will be named "HDMI2" in XServer. I can see that by calling the "xrandr" tool (in Ubuntu Trusty Tahr). A display connected to the DP connector will be named "DP1" or "HDMI1", if I use a DP-to-DVI adapter.
We are now testing a slightly upgraded board version, which has a newer CPU (Intel J1800, Baytrail) among other things and the position of the DVI and DP connectors are switched. Also, everything at the DVI port is called "HDMI1" and something connected to the DP port gets "DP2" or "HDMI2".
Q: What causes these numbers to be produced in this manner and where (probably in the kernel) is it happening?
I suspect the cause to be hardware related. Specifically, at which CPU pins the connector pins are routed and attached to.
Q: Would it be possible to influence this numbering scheme in order to retain the previous numbering behaviour?
For many questions, especially for C-related ones, the answer seems to be found in "the standard". However, where do we find that - online?
Googling can sometimes feel futile, again especially for the C standards, since they are drowned in the flood of discussions on programming forums ;)
To get this started, since these are the ones I am searching for right now, where are there good online resources for:
C89
C99
C++03
I have a UIWebView inside a normal UIViewController. The content of the UIWebView is programming/dynamically created in my program, and it could be very long (multiple table rows). Somehow, after loading, the page won't scroll more then one and half screen of content when swipe on the screen. Because of that I can only see the beginning few rows of data, but not the many others after them. Why is that?
Ever since I started programming this has been something I have been curious about. But seems too complicated for me to even attempt.
I'd love to see a solution.
1, 2, 3, 4, 5 // returns 6 (n + 1)
10, 20, 30, 40, 50 //returns 60 (n + 10)
10, 17, 31, 59, 115 //returns 227 ((n * 2) - 3)
When programming, I would like to split one large file(which contains main function) to many small files, so there is one common case: functions in small files can modify the var from main file, so i think extern is very useful!
for instance:
in main.c
extern int i = 100;
in small.c
extern int i;
fprintf(stdout, "var from main file: %d\n", i);
I just want to know is my understanding right?
Is there high-level language out there for describing algorithms, that's geared towards specification, rather than implementation?
The idea would be to have a machine-readable archive of standard algorithms, with machine-readable annotations on trade-offs, and variants.
I'm thinking of something like CycL / OpenCyC, but for algorithms and programming patterns.
Our domain controller died, with no hope of recovering anything. The AD backup died with it. Due to no longer having a DC, our Exchange is unable to start. I'm trying to use "Kernel for Exchange Server" to recover the mails that are in the mailbox store. I've found the .edb file, but the .stm file is nowhere on the machine.
Does Exchange 2010 still use the .edb & .stm files, or is there a new store format? If not, where will the .stm file be hiding?
I'm looking for a good example of reading and writing to the Windows Registry using VB6.
Yes, I know there are lots of mediocre examples. I spent an hour googling and testing. Some were incredibly complex, others had only some of the functions, and almost none of it had been vetted in any way (voted on).
Since Stack Overflow is intended to the canonical location for answers to programming questions, it seems reasonable to post it here.