Comodo resolves site validation glitch
1787
Trust restored Digital certificate firm Comodo has restored services to normal after websites displaying Comodo's Trust Logo were reduced to a crawl on Friday.â¦
502248
The project supports domain names from different languages and alphabets, such as Arabic and Chinese, that can't be rendered in the ASCII character set.
388232
Chris Hartjes has followed up on a previous post about user authentication in CakePHP with a few more comments in part two.   I got a question in the comments about my previous post on simple user registration about how to do some of the necessary validation for registration in the model. I thought I'd show some code I did to do exactly that.   He includes the code for his example with the key, he explains, being the use of a second field (the confirm password field) to do the validation.
609649
Developed by the Web Technology Group at Appalachian State University, phpWebSite provides a complete web site content management system. All client output is XHTML 1.0 and meets the W3C's Web Accessibility Initiative requirements. Version 0.9.3-4 contains mostly bug fixes which were found in the 0.9.3-3 release, but there are some new features/enhancements.   Form Generator + ability to send emails as text/plain instead of text/html + ability to view, delete exports and archives  Notes + send notes to groups of users or to all users on the site  Control Panel + modules now list by label in alphabetical order  Other: + improved output all around for XML/XHTML compliance + spell checker added to the wysiwyg for those with the pspell extentsion loaded + files written to the system in most modules have better permissions set for easier access  Enjoy!
620214
On Paul Jones' weblog today, there's a posting covering one of the banes of PHP life - form processing/handling.
663829
The FrSIRT site has posted a new advisory for users of the Vivvo Article Management CMS software about potential holes that could allow for some very large-scale damage to be done.    Multiple vulnerabilities have been identified in Vivvo Article Management CMS, which could be exploited by remote attackers to compromise a vulnerable server.   The first issue is due to an input validation error in the "pdf_version.php" script that does not validate the "id" parameter before being used in SQL statements, which could be exploited by malicious people to conduct SQL injection attacks.   The second vulnerability is due to an input validation error in the "index.php" script that do not validate the "classified_path" parameter, which may be exploited by remote attackers to include local or remote scripts with the privileges of the web server.    Versions 3.2 and higher of the software are effected, and, unfortunately, there has been no patch issued for the issue.
371019
(Source: VeriSign)  Legitimize trust in e-business with new Extended Validation SSL Certificates. Extended Validation SSL triggers a green address bar in Microsoft&trade; IE7, which helps prove site identity. Get the green bar and higher sales by reading the technical white paper.
740094
In his travels as a PHP developer, Jamie Wong has gathered some helpful debugging tips that are shared in this latest post to his blog.   Here are some bugfixing rules and tips Iâve learned working all these years with PHP. I emphasize mostly on fixing bugs than preventing them, which is another subject worth of its own article. Iâve moved to Rails, but I wanted to finish this post as a farewell and thanks to every article and documentation that was useful to me. Hope this is useful to you too.   Topics covered include:  Assume nothing Turn Error Reporting to show all errors Read the error message Understand the bug "Scooby-Bug, where are you?" Get as much information as possible  Each has some explanation below it and, in some places, a bit of code to clarify the point.
387184
Ziff Davis - Security researchers have uncovered a spoofing flaw in Internet Explorer that could allow a scammer to display a fake Web site with all the attributes of a genuine, secure site.
550626
Company patches one search engine security flaw and is notified of another.
20411
New rule creates potential security flaw for domain name transfers.
403071
Here's a screen shot of the HTML source.  Looks like it's trying to serve some kind of ActiveX control. Happy to be using a Mac.  PS: Scoble just showed up and TM works on his cell phone so there's something weird going on.
184845
The WordPress.com blog-hosting service suffered a DoS (denial-of-service) attack that began Saturday and was still preventing users from logging in or posting to their blogs on Tuesday.Matt Mullenweg, spokesman for Automattic, confirmed that the service experienced a DoS attack with spikes of up to 6 gigabits of incoming traffic, which was making some blogs inaccessible for about five to 15 minutes on Tuesday. Though service had mostly been restored, Automattic, which maintains WordPress.com, was still working on returning service to normal levels on Tuesday afternoon, he said.&quot;Obviously that [is not good] and is pretty unusual for our service,&quot; he said. &quot;All our people who can are working on the issue.&quot;However, an employee at a New York-based company that has blogs hosted by WordPress.com suggested that some users were experiencing outages for longer than 15 minutes. The source, who asked not to be identified, said on Tuesday afternoon that users there were unable to log in to their blogs and post comments for &quot;most of the day.&quot; However, the blogs were still able to be viewed publicly.&quot;It&#39;s starting to come back to life now, slowly,&quot; said the source on Tuesday afternoon.WordPress.com users were notified via e-mail about the DoS attack. In the e-mail, the service provider said that the attack was affecting user log-in and causing some forums to be offline.Mullenweg said that the main Wordpress.com page was down longer than some blogs because &quot;we sacrificed it in order to keep blogs and our users up.&quot; However, the site&#39;s home page and Web site were up and running on Tuesday.He also provided a link to a graph that shows the traffic spikes to WordPress.com on the graph, where the service&#39;s traffic is displayed in a brown line.A DoS attack is an attempt to make a Web site or service unavailable to intended users by flooding the service or site with incoming data requests, such as e-mails. Motives for DoS attacks vary, but perpetrators mostly target companies with high-profile, highly trafficked Web sites.Joris Evers, a spokesman for security research and software company McAfee, said DoS attacks are still fairly common, although they have tapered off in recent years because technology has been developed that can head off such attacks before they affect service.Though he had not heard specifically of the WordPress attack, Evers said that it&#39;s possible the attack was mounted by someone &quot;who was upset about something that was written on a WordPress blog, and they decided to take action against that.&quot;
567864
As you spring forward this year, brace yourself for a software glitch that could affect computers, digital watches and clocks. By the Associated Press.
703645
In a new post to the PHP Security Blog, Stefan Esser points out a recent commit to the PHP core as a fix to the session handling in PHP:   I just came back home and saw a very recent commit to PHP's session management. It is another attempt to fix the session cookie attribute injection that the PHP developers already tried to fix in PHP 5.2.3 without giving any credits. [...] their new fix that consists of blacklisting a bunch of legal characters from the session id, will most probably result in hundreds or thousands of broken sites.   Stefan points out that the fix blocks several valid characters that sites could potentially use in their session IDs, and that with this new code in place, it could drastically effect those site's functionality.   As of the time of this post, however, it seems that the issue has been recognized and corrected so as not to cause the above mentioned issue in future updates.
66982
This week, Microsoft is repeating statements made over the past seven years that Office's Reduced Functionality Mode is nothing other than a mechanism to prevent users who won't let the company verify the product's authenticity from doing more than testing how it works. What's the cause of recent confusion over RFM and product validation?
767747
Jikes is a great compiler but they could really benefit from better project management.  This bug  has been open for greater than 3 years now with no resolution.  One of the developers sent me a *private* email (without commenting or closing the bug) this this could be fixed by avoiding the use of symlinks but wasn't sure. Of course this email was sent more than 2 years ago so I have no decent way of finding it.  Adding insult to injury is the fact that IBM won't let me comment on the bug without an account.  The only problem is that my account won't activate.  In a nutshell if you want to use incremental compile with jikes you need to specify relative paths not full paths.  For example if y ...