php10.de International Blog

Coding Rules

These are my coding rules:

line indent 4 spaces, no tabs (relevant for SVN commits)

UTF-8 everywhere

prevent parameter manipulation via HTTP POST or GET

prevent SQL-Injection: before storing a value into the database: use (int) typcasting for integer values and my_sql() function for all other values

prevent Cross-Site-Scripting: before outputting a variable to HTML, use the html() function



function my_sql($var) {

  return mysql_real_escape_string($var);

}

function html($var) {

  return htmlspecialchars($var, ENT_QUOTES, 'UTF_8');

}

Petition to the European Parliament

my petition for gardeners - if farmers get subsidiaries, gardeners should get subsidiaries, too - has just been forwarded from the European Parliament to the European Committee

iThrow at Twitter

Somewhere sometimes someone throws his iPhone into the air. You can find the highest iPhone throws made with the Accelerated Browser now at https://twitter.com/iThrowmiPhone

The Big Red Button

As you may know, building a simple web application that displays the
content of a database table and a form to edit it, requires typing the
field names over and over again. Once you write them as a simple
comma-separated list, then they come via HTTP POST method packed in
$_POST['foobar']. For context change you have to write code to escape
and protect against SQL-Injection or Cross Site Scripting attacks. Most
of the time you must consider the type of each field even though you
defined it already in the database. After all you must type every field
name about 25 times in different formats for a basic application. The
Big Red Button Source Code Generator, being developed by Christian
Fraunholz, is designed to help you with this annoying task.

Description & Feature List

The Big Red Button Source Code Generator