Having authenticated with WebAuth using an SSO username and password, the PHP script is executed. As you can see, the PHP script is passed a parameter which is the URL of a login page of a Rails application. The only thing the PHP script does is to redirect to that URL passing a parameter that is a base64 encoded string: https://www.abcd.ox.ac.uk:8113/apps/contacts/login?id=base64string The id parameter is the base64 encoded version of an encryption of the username and the current date and time.
Read the rest of this entry »
As a web programming language, one of PHP’s strengths traditionally has been to make it easy to write scripts that access databases so that you can create dynamic web pages that incorporate database content. This is important when you want to provide visitors with information that is always up-to-date, without hand tweaking a lot of static HTML pages. However, although PHP is easy to use, it includes no general-purpose database access interface. Instead it has a number of specialized ones that take the form of separate sets of functions for each database system. There is one set for MySQL, another for InterBase, and another for PostgreSQL—and others as well.
Read the rest of this entry »
FileMaker is a popular and powerful desktop database application toolkit. Recently, FileMaker, Inc. released a beta version of the FileMaker API for PHP, which allows PHP to more easily talk to the FileMaker Server Advanced product. Learn how to leverage FileMaker’s strengths to deliver complex Web applications in a fraction of the time it would take using a typical SQL database.
Read the rest of this entry »
SAML, developed by the Security Services Technical Committee of the Organization for the Advancement of Structured Information Standards (OASIS), is an XML-based framework for communicating user authentication, entitlement, and attribute information. As its name suggests, SAML allows business entities to make assertions regarding the identity, attributes, and entitlements of a subject (an entity that is often a human user) to other entities, such as a partner company or another enterprise application.
Read the rest of this entry »
Online chat solutions have been very popular long before AJAX was born. There are numerous reasons for this popularity, and you’re probably familiar with them if you’ve ever used an Internet Relay Chat (IRC) client, or an Instant Messenger (IM) program, or a Java chat applet. AJAX has pushed online chat solutions forward by making it easy to implement features that are causing trouble or are harder to implement with other technologies. First of all, an AJAX chat application inherits all the typical AJAX benefits, such as integration with existing browser features, and (if written well) cross-platform compatibility.
Read the rest of this entry »
This document tells you howto develop PHP programs and also to migrate all the Windows 95 GUI applications to powerful PHP + HTML + DHTML + XML + Java applets + Javascript. The information in this document applies to all the operating sytems where PHP is ported that is ? Linux, Windows 95/NT, OS/2, all flavors of Unix like Solaris, HPUX, AIX, SCO, Sinix, BSD, etc.
Read the rest of this entry »
This document explains various possibilities for successfully deploying PDFlib as a PHP extension. The generic term PDFlib is used to designate one of the following distinct products:
> PDFlib Lite, the open-source subset of PDFlib
> The commercial PDFlib product
> PDFlib+PDI, a commercial superset of PDFlib which also contains the PDF Import Library (PDI)
> PDFlib Personalization Server (PPS), a superset of PDFlib+PDI with advanced block filling features for personalizing PDF documents.
Notes for PDFlib TET (Text Extraction Toolkit), PDFlib PLOP (Linearization, Optimization, Protection), and PDFlib pCOS (PDF Information Retrieval Tool) are included where appli- cable.
Read the rest of this entry »
07 Oct
Posted by jj as Web
Web application technologies like PHP, CGI, Javascript, and Ajax have made it much easier for people to construct and deploy services on the Internet. Unfortunately, this has opened a wide avenue for new attacks since it is as easy to unintentionally introduce new vulnerabilities into web applications as it is to intentionally introduce new functionality. Consequently, web applications have increasingly been the focus of attackers.
Read the rest of this entry »