Today, I've no much tasks to do and have most free time. That's why surfing through websites and seeking open-source dictionary web project written by PHP or JSP. Because I've an idea to build free dictionary site for none-profit. And, I don't want to create such dictionary site throughly by myself. That's why I want open-source and want to add some useful fuctions in it. At that time, I've found http://www.gotocode.com dedicated to web beginners, who want to learn ASP, JSP, PHP and so on. It has some simple applications and allow to download. If you have free spare time, go and visit it.
Life is beautiful virus hoax
Feb 26
In these days, some my friends told me that don't open one new email, subject is "Life is beautiful" in your mail box. It's virus attached with Life is beautiful.pps powerpoint file. Because, this virus will retrieve your password and all of your informations.
Big Credit : http://en.wikipedia.org/wiki/Life_is_beautiful_virus_hoax
Creating communication website, we gotta consider the security, the access and all uploaded data of our users. Now that if anyone want to upload their data into our communication websites, they must have each registered ID. So whenever they come and upload their data into our site, they need to login first and after uploading, they need to logout successfully. It's ok that no problem without doing logout after uploading if anyone upload their data at their home pc. If Peter (for example) upload their data by using public internet cafe, it's problem that they didn't logout after uploading, someone can copy, delete and upload with Peter's account into communication sites. So, we need to kill our users' session data whenever they close their browsers after using it. But we cannot do anything if they didn't logout or didn't close browser after using.
Here is some coding we need to add in application.cfm
2<cfset localCFID = Cookie.CFID>
3<cfset localCFTOKEN = Cookie.CFTOKEN>
4<cfcookie name="CFID" value="#localCFID#">
5<cfcookie name="CFTOKEN" value="#localCFTOKEN#">
6</cfif>
In these days, some people test writing HTML code, especially javascript tags, marquee tag and so on in input. Because of this case, we need to solve this problem not be inserted miscellaneous codes in our Database. I've prevented this kind of problems before time. But, it cannot be used as global function. That's why I keep searching any solutions in Google and create own coding. Eventually, I've get following coding.
2function listFix(list) {
3var delim = ",";
4var null = "NULL";
5var special_char_list = "\,+,*,?,.,[,],^,$,(,),{,},|,-,<,>";
6var esc_special_char_list = "\\,\+,\*,\?,\.,\[,\],\^,\$,\(,\),\{,\},\|,\-,&lt,&gt";
7var i = "";
8
9if(arrayLen(arguments) gt 1) delim = arguments[2];
10if(arrayLen(arguments) gt 2) null = arguments[3];
11
12if(findnocase(left(list, 1),delim)) list = null & list;
13if(findnocase(right(list,1),delim)) list = list & null;
14
15i = len(delim) - 1;
16while(i GTE 1){
17delim = mid(delim,1,i) & "_Separator_" & mid(delim,i+1,len(delim) - (i));
18i = i - 1;
19}
20
21delim = ReplaceList(delim, special_char_list, esc_special_char_list);
22delim = Replace(delim, "_Separator_", "|", "ALL");
23
24list = rereplace(list, "(" & delim & ")(" & delim & ")", "\1" & null & "\2", "ALL");
25list = rereplace(list, "(" & delim & ")(" & delim & ")", "\1" & null & "\2", "ALL");
26
27return list;
28}
29</cfscript>
It's simple though. Save following coding as ListFix.cfm file. And, include this file before saving users' data to your Database.
2
3<cfquery name="SaveDataQry" datasource="MyDSN">
4INSERT INTO MyUsers
5(tbl_User_Name)
6VALUES
7('#listFix(username)#')
8</cfquery>
To prevent SQL Injection in Coldfusion, we should use cfqueryparam tag between cfquery tag. It's good tag and it output the variable which MS.SQL like. But to get good performance of our website, we should use cachedwidthin attribute of cfquery tag. If we use cfqueryparam tag in cfquery, error occur for sure and cfquery doesn't allow cfqueryparam tag. So, how to prevent for SQL injection and how to get good performance for your site without using cfqueryparam. The answer is quite simple: we need put following coding at the top of your page.
2<cfabort showerror="Invalid Query String">
3</CFIF>
glossword.biz
Feb 12
This site is open-source dictionary project based on PHP. Glossword helps you to create and publish online multilingual dictionary, glossary, or reference. It features installation wizard, UTF-8 support, visual themes, export/import dictionaries in XML/CSV format, delayed postings.
Basic features
- Adding terms to dictionary by several people at the same time.
- UTF-8 encoding. More than 400 languages can be used in a one dictionary at the same time.
- Special mode for SEF links and other SEO enhancements.
- Fast search engine can search cross words typed in any language, including Chinese.
- Indexing and searching through millions of definitions.
- Advanced search capabilities, stop words, query language.
- Query words highlighting in the search results.
- Support for a true transcription (e.g. 'dik?(?)nri, IPA standard). No self-made emulations needed.
- Defining accents for words (e.g. fa´brika).
- Printer-friendly version for a term.
- Architecture is optimized for creating multiple dictionaries with one installation.
- Multifunctional feedback form with CAPTCHA.
- The ultimate guarantee of displaying webpages in any browser due to certified W3C XHTML 1.1 code and CSS 2.1 compliance.
- Glossword is free of charge and distributed under GPL license.
For authors and editors
- Installation wizard. Installs, updates and even uninstalls the software.
- The history of editing for terms.
- Delayed postings.
- Virtual keyboards.
- Customizable alphabetic sorting.
- Customizable visual themes with HTML-templates, CSS style sheets and additional multicolumn rendering mode for the list of terms.
- Automatically generated alphabetical index for dictionary.
- Export/Import dictionaries in XML and CSV format.
For administrators
- Configurable 2-level cache engine improves productivity for an HTML-output.
- Invisible links to e-mails against mail robots.
- Internal logging system.
- Built-in maintenance tasks.
- Every comprehensive task such as recounting the number of added terms per user, runs separately and it helps to balance server load.
Block IP in ColdFusion
Feb 11
Since my website has prevented SQL Injection, they keep on attacking on and on. For these case, my sql server reach over-loaded and crushed often. That's why I need to block the IP of these people before doing anything. So, I'll create following coding in my cfm file.
2<cfset fpath = "#GetDirectoryFromPath(GetCurrentTemplatePath())#">
3
4<cfset blacklist = "" />
5<cffile action="read" file="#fpath##fName#" variable="blacklist" charset="utf-8" />
6
7<cfif ListFind(blacklist,cgi.remote_addr,Chr(13)&Chr(10))>
8<cflocation addtoken="false" url="/blacklist.cfm" />
9</cfif>
10
11<cfif FindNoCase("DECLARE",cgi.query_string)
12 and FindNoCase("CAST",cgi.query_string)
13 and FindNoCase("EXEC",cgi.query_string)>
14 <cfif not ListFind(blacklist,cgi.remote_addr,Chr(13)&Chr(10))>
15 <cfset blacklist = ListAppend(blacklist,cgi.remote_addr,Chr(13)&Chr(10)) />
16 <cftry>
17 <cffile action="write" file="#fpath##fName#" output="#blacklist#" charset="utf-8" />
18 <cfcatch>
19 </cfcatch>
20 </cftry>
21 <cflocation addtoken="false" url="/blacklist.cfm" />
22 </cfif>
23</cfif>
Today, our .NET programmers face this problem, redirect to login page when session timeout in asp.net. Because we store some users' information in session variables. And, check also users' permission (can access only reports of his/her department) with such session variables. The problem is when session is timeout, the one can access all reports of all departments. Thus, our clients complaint these errors on and on. Today, I know how to solve this bug now. Here is, coding I put in all of master page.
2Response.Redirect("Login.aspx");
In these days, using SSL layer at website is the most popular. Because, it's save, reliable and cannot be attacked by virus easily. Ok, I'll describe how to configure SSL in IIS 6. Create certificate First of all, open your Internet Service Manager (ISM) or Internet Information Services (IIS) Manager.
Double click on your sever, and expand all websites configured in your Server.
Open one website and click properties on it. And click on Directory Security tab, then click on Server Certificate.
At that time, Web Server Certificate Wizard box will appear, and then click Next. Then, choose Create a new certificate. Then, click next. And, give your certificate name in textbox, and then click next again.
And, type your organization name and unit. Then, type the common name for your site. And, choose Country, State and City.
And, choose the directory where you want to save your certificate file. Then, click next, and click on finish button. Install the certificate and set up an SSL Web site Open the IIS, and expand websites configured at your server. Click on the website, you want to install certificate.
Click the Directory Security tab. Under Secure Communications, click Server Certificate. This starts the Certificate Installation Wizard. Click Next to continue.
Select Process the pending request and install the certificate and click Next.
Type the location of the certificate that you downloaded in the "Issue and download a certificate" section, then click Next. The Wizard displays the Certificate Summary. Verify that the information is correct, then click Next to continue.
Click Finish to complete the process.
Configure and test On the Website, type 443 on SSL Port.
On the Directory Security tab, under Secure Communications, note that there are now three available options. To set the Web site to require secure connections, click Edit. The Secure Communications dialog box appears.
Select Require Secure Channel (SSL) and click OK.
Click Apply and then OK to close the property sheet. Surf your site Access the site through HTTP by typing http://localhost/yoursite/ in the browser. You receive an error message that resembles the following:
HTTP 403.4 - Forbidden: SSL required.
Try to browse to the same Web page using a secured connection (HTTPS) by typing https://localhost/yoursite in the browser. You may receive a security alert that states that the certificate is not from a trusted root CA. Click Yes to continue to the Web page. If the page appears, you have successfully installed your certificate.
Try it.
Big Credit : http://support.microsoft.com/kb/299875
Google gonna release new open-source browser known as Chrome to fight with Internet Explorer 8.0 and Firefox 3.0. They include new features such as isolated tags design and powerful javascript engine.
Here is the speech of Pichai and Upson :
"When a tab is closed in Google Chrome, you're ending the whole process," according to the comic. "You can look under the hood with Google Chrome's task mananger to see what sites are using the most memory, downloading the most bytes and abusing your CPU" so you can place "blame where blame belongs."
Google also promised "improved speed and responsiveness across the board."
"We also built a more powerful JavaScript engine, V8, to power the next generation of web applications that aren't even possible in today's browsers," Pichai and Upson wrote.
Like OpenSocial and Android, Chrome will be an open source initiative.
"We owe a great debt to many open source projects, and we're committed to continuing on their path," they wrote. "We've used components from Apple's WebKit and Mozilla's Firefox, among others -- and in that spirit, we are making all of our code open source as well. We hope to collaborate with the entire community to help drive the web forward."

Android
Top of Page