These are my coding rules:

1. line indent 4 spaces, no tabs (relevant for SVN commits)


2. UTF-8 everywhere


3. prevent parameter manipulation via HTTP POST or GET


4. prevent SQL-Injection: before storing a value into the database: use  (int) typcasting for integer values and my_sql() function for all other values


5. prevent Cross-Site-Scripting: before outputting a variable to HTML, use the html() function


function my_sql($var) {
  return mysql_real_escape_string($var);
}
function html($var) {
  return htmlspecialchars($var, ENT_QUOTES, 'UTF_8');
}

my petition for gardeners - if farmers get subsidiaries, gardeners should get subsidiaries, too - has just been forwarded from the European Parliament to the European Committee

Somewhere sometimes someone throws his iPhone into the air. You can find the highest iPhone throws made with the Accelerated Browser now at https://twitter.com/iThrowmiPhone

As you may know, building a simple web application that displays the
content of a database table and a form to edit it, requires typing the
field names over and over again. Once you write them as a simple
comma-separated list, then they come via HTTP POST method packed in
$_POST['foobar']. For context change you have to write code to escape
and protect against SQL-Injection or Cross Site Scripting attacks. Most
of the time you must consider the type of each field even though you
defined it already in the database. After all you must type every field
name about 25 times in different formats for a basic application. The
Big Red Button Source Code Generator, being developed by Christian
Fraunholz, is designed to help you with this annoying task.

Description & Feature List

The Big Red Button Source Code Generator