For YOU DEEPTI ..
Times like these
Seem so hard to bare.
The pains of life
Surround us from every direction.
We seem to be consumed by it,
Caught up in it,
Until we can no longer see
How precious and dear
We are to one another.
Times like these
Are all we truly need,
To prove to ourselves
And to that cold, cruel world,
That nothing more than the unquenchable fire,
Of that Never-Ending Love
Can come between us,
And infuse our very souls
Into that Heavenly, Heavenly state of oneness;
You and I - For all Eternity
Thanks for being there ALWAYS ....LOVE YOU
Wednesday, April 14, 2010
Sunday, January 31, 2010
Sunday, December 13, 2009
~~ XSS Cross Site Scripting ~~
What is Cross Site Scripting?
when a web application gathers malicious data from a user.
If for example I was logged in as "john" and read a message by "joe" that contained malicious javascript in it, then it may be possible for "joe" to hijack my session just by reading his bulletin board post.
What are the threats of Cross Site Scripting?
Often attackers will inject JavaScript, VBScript, ActiveX, HTML, or Flash into a vulnerable application to fool a user (Read below for further details) in order to gather data from them.
No more explanation, it is enough with cross site scripting...i'm bored with
CSS vuln ;)
http://www.phpnuke.org/user.php?op=userinfo&uname=
What can I do to protect myself as a vendor?
Never trust user input and always filter metacharacters. This will eliminate the majority of XSS attacks. Converting < and > to < and > is also suggested when it comes to script output. ...URL ENCODE
http://docs.google.com/viewer?a=v&q=cache%3AoIngv17_LjoJ%3Awww.securitydocs.com%2Fpdf%2F3261.PDF+XSS+holes&hl=en&gl=us&sig=AHIEtbSgMZAYvHGxJVZ-eG5nRo539cvXpA&pli=1
when a web application gathers malicious data from a user.
If for example I was logged in as "john" and read a message by "joe" that contained malicious javascript in it, then it may be possible for "joe" to hijack my session just by reading his bulletin board post.
What are the threats of Cross Site Scripting?
Often attackers will inject JavaScript, VBScript, ActiveX, HTML, or Flash into a vulnerable application to fool a user (Read below for further details) in order to gather data from them.
No more explanation, it is enough with cross site scripting...i'm bored with
CSS vuln ;)
http://www.phpnuke.org/user.php?op=userinfo&uname=
What can I do to protect myself as a vendor?
Never trust user input and always filter metacharacters. This will eliminate the majority of XSS attacks. Converting < and > to < and > is also suggested when it comes to script output. ...URL ENCODE
http://docs.google.com/viewer?a=v&q=cache%3AoIngv17_LjoJ%3Awww.securitydocs.com%2Fpdf%2F3261.PDF+XSS+holes&hl=en&gl=us&sig=AHIEtbSgMZAYvHGxJVZ-eG5nRo539cvXpA&pli=1
Wednesday, December 9, 2009
~~ How to Enable Java inside PHP OR Vice Versa ~~
I was wondering how we can interact PHP Within JAVA OR JAVA Within the PHP.
Here i find it easy way.
1. How to Call JAVA Inside the PHP.
**Change php.ini with enabling java options.
Example: getProperty('java.version') . ''; echo 'Java vendor=' . $system-getProperty('java.vendor') . ''; echo 'OS=' . $system->getProperty('os.name') . ' ' . $system-getProperty('os.version') . ' on ' . $system->getProperty('os.arch') . ' '; // java.util.Date example $formatter = new Java('java.text.SimpleDateFormat', "EEEE, MMMM dd, yyyy 'at' h:mm:ss a zzzz"); echo $formatter->format(new Java('java.util.Date')); ?>
2. How to Call PHP Inside the JAVA
SAPI module that interfaces with the Servlet server, the latter by this Java extension.
The Java extension provides a simple and effective means for creating and invoking methods on Java objects from PHP. The JVM is created using JNI, and everything runs in-process.
Here i find it easy way.
1. How to Call JAVA Inside the PHP.
**Change php.ini with enabling java options.
Example: getProperty('java.version') . ''; echo 'Java vendor=' . $system-getProperty('java.vendor') . ''; echo 'OS=' . $system->getProperty('os.name') . ' ' . $system-getProperty('os.version') . ' on ' . $system->getProperty('os.arch') . ' '; // java.util.Date example $formatter = new Java('java.text.SimpleDateFormat', "EEEE, MMMM dd, yyyy 'at' h:mm:ss a zzzz"); echo $formatter->format(new Java('java.util.Date')); ?>
2. How to Call PHP Inside the JAVA
SAPI module that interfaces with the Servlet server, the latter by this Java extension.
The Java extension provides a simple and effective means for creating and invoking methods on Java objects from PHP. The JVM is created using JNI, and everything runs in-process.
~~ PHP ~~
What are the features and advantages of OBJECT ORIENTED PROGRAMMING[OOPS]?
Answers1. objects can easily be modified and added to a system there by reducing maintenance costs.
2. Better Modelling Techniques for real world examples than procedure.
What are the difference between abstract class and interface?
AnswersAbstract class: abstract classes are the class where one or more methods are abstract but not necessarily all method has to be abstract. Abstract methods are the methods, which are declare in its class but not define.
nterface: Interfaces are one type of class where all the methods are abstract. That means all the methods only declared but not defined. All the methods must be define by its implemented class.
What are the advantages of stored procedures, triggers, indexes?
AnswersA stored procedure is a set of SQL commands that can be compiled and stored in the server. Once this has been done, clients don't need to keep re-issuing the entire query but can refer to the stored procedure. This provides better overall performance because the query has to be parsed only once, and less information needs to be sent between the server and the client. You can also raise the conceptual level by having libraries of functions in the server. However, stored procedures of course do increase the load on the database server system, as more of the work is done on the server side and less on the client (application) side.
A trigger is effectively a type of stored procedure, one that is invoked when a particular event occurs.
Indexes are used to find rows with specific column values quickly.
Answers1. objects can easily be modified and added to a system there by reducing maintenance costs.
2. Better Modelling Techniques for real world examples than procedure.
What are the difference between abstract class and interface?
AnswersAbstract class: abstract classes are the class where one or more methods are abstract but not necessarily all method has to be abstract. Abstract methods are the methods, which are declare in its class but not define.
nterface: Interfaces are one type of class where all the methods are abstract. That means all the methods only declared but not defined. All the methods must be define by its implemented class.
What are the advantages of stored procedures, triggers, indexes?
AnswersA stored procedure is a set of SQL commands that can be compiled and stored in the server. Once this has been done, clients don't need to keep re-issuing the entire query but can refer to the stored procedure. This provides better overall performance because the query has to be parsed only once, and less information needs to be sent between the server and the client. You can also raise the conceptual level by having libraries of functions in the server. However, stored procedures of course do increase the load on the database server system, as more of the work is done on the server side and less on the client (application) side.
A trigger is effectively a type of stored procedure, one that is invoked when a particular event occurs.
Indexes are used to find rows with specific column values quickly.
Thursday, December 3, 2009
~~ Web Artitecture Stack ~~
Web artitecture stack consists of :
1.MYSQL/ATOMICS/SQL SERVERS
2.TOMCAT
3.APACHE
4.FIRST REQUEST
5.TALEND/MULE/->SOLR -> FOR ETL PROCESSES [EXTRACT TRANSFORM LOAD]
** SOLR:Solr is the popular, blazing fast open source enterprise search platform from the Apache Lucene project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, database integration, and rich document (e.g., Word, PDF) handling. Solr is highly scalable, providing distributed search and index replication, and it powers the search and navigation features of many of the world's largest internet sites.
Solr is written in Java and runs as a standalone full-text search server within a servlet container such as Tomcat. Solr uses the Lucene Java search library at its core for full-text indexing and search, and has REST-like HTTP/XML and JSON APIs that make it easy to use from virtually any programming language. Solr's powerful external configuration allows it to be tailored to almost any type of application without Java coding, and it has an extensive plugin architecture when more advanced customization is required.
1.MYSQL/ATOMICS/SQL SERVERS
2.TOMCAT
3.APACHE
4.FIRST REQUEST
5.TALEND/MULE/->SOLR -> FOR ETL PROCESSES [EXTRACT TRANSFORM LOAD]
** SOLR:Solr is the popular, blazing fast open source enterprise search platform from the Apache Lucene project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, database integration, and rich document (e.g., Word, PDF) handling. Solr is highly scalable, providing distributed search and index replication, and it powers the search and navigation features of many of the world's largest internet sites.
Solr is written in Java and runs as a standalone full-text search server within a servlet container such as Tomcat. Solr uses the Lucene Java search library at its core for full-text indexing and search, and has REST-like HTTP/XML and JSON APIs that make it easy to use from virtually any programming language. Solr's powerful external configuration allows it to be tailored to almost any type of application without Java coding, and it has an extensive plugin architecture when more advanced customization is required.
Wednesday, December 2, 2009
~~ APC vs Memcache ~~
APC: Alternative PHP Cache:Its goal is to provide a free, open, and robust framework for caching and optimizing PHP intermediate code.
To avoid the overhead of parsing and compiling the code every time pages are loaded.
** This is no distributed cache
Memcache: is a general-purpose distributed memory caching system.
It is often used to speed up dynamic database-driven websites by caching data and objects in memory to reduce the number of times an external data source.
Memcached's APIs provide a giant hash table distributed across multiple machines. When the table is full, subsequent inserts cause older data to be purged in least recently used (LRU) order.
To avoid the overhead of parsing and compiling the code every time pages are loaded.
** This is no distributed cache
Memcache: is a general-purpose distributed memory caching system.
It is often used to speed up dynamic database-driven websites by caching data and objects in memory to reduce the number of times an external data source.
Memcached's APIs provide a giant hash table distributed across multiple machines. When the table is full, subsequent inserts cause older data to be purged in least recently used (LRU) order.
Subscribe to:
Posts (Atom)