Archive for the ‘Books’ Category

Simple PHP Review

Saturday, October 10th, 2009

buy php I normally like to be charitable, but this publication really has nothing to recommend it. Don’t touch it with a bargepole.

It’s a book about secure, object orientated PHP applications by a guy who doesn’t understand security, doesn’t understand OOP and can’t write.

Despite the title “Secure PHP”, there are whole classes of security exploits which are not even mentioned. There is no comprehensive and authoritative discussion of security at any point.

The code samples are poorly laid out, riddled with errors, littered with notes to the author from the technical reviewer, and astonishingly repetitive. You will often get large chunks of code repeated many times just to show changes in a couple of lines buried somewhere in the middle.

Not that the code is worth the effort of reading. The design is often naive, the organisation unclear and the coding practices poor.

For example, he uses a naming convention for constants ($MY_CONSTANT) rather than defining proper constants as provided for by the PHP language via define().

Another example: on page 41 he exhorts his readers to use good naming standards. Yet the abstract application class that forms the core of the book is full of method names such as: name() number() currency() show_status()… I could go on. There are dozens of other equally cryptic examples.

The copy editing and proofreading is the worst I have ever seen in a technical book: it is a disgrace to the profession. There is a grammatical error in the second sentence! Here is a sample of what you can expect, from the 3rd page:

“Next, you need to consider how user interfaces will be presented and how can you allow for maximum customization that can be done without changing your core code. This is typically done by introducing external HTML templates for interface.”

Even the section headings are ungrammatical: “Using relational database” (p21)

The 16 editors and proofreaders credited in the frontmatter should hang their heads in shame. This has severly damaged my confidence in Wiley as a brand - they clearly have no concept of quality control. I will be very wary of buying their products in future. The cover strapline “Timely. Practical. Reliable.” is a sick joke…

Only 20 pages of “secure development techniques”1
When I saw this book at the local bookstore (one of only 10 PHP related books in stock), I thought, “Awesome! I’ve been looking for some more securing applications techniques.” It turned out to be a big let down.

The book is roughtly 750 pages (large print), the first 50 or so was an introduction and gave a few bad examples vs. good examples of code (which was good, and actually made me think the rest of the book was going to be good), then jumped directly into “here’s 650 pages worth of class based applications for you to use”. The last 40-50 pages of the book was a chapter called something to the effect of “Optimizing and Securing PHP”. Of the whole book, this was the most dissapointing aspect, split equally between the 2 topics. I thought the whole book was going to be about writing secure PHP, not just 20 pages.

Even the sample code they gave was in my opinion, poor. The author encouraged a strong misuse of OOP, having every single script have its own class dedicated to it. For example, one of the 50 “ready to use applications” was for handling users for their intranet. They wrote a class with methods for updating the user’s information, adding a user, selecting the user’s email address from the database, etc. The goal of OOP is to be abstract so that it can be used in more than one area, something the author didn’t bother to learn before he wrote this book.

Even the optimizing portion of the last chapter was a big let down. It felt like there was really only one example of code optimization. The rest of the pages explained how to make a particular PEAR script do a speed test on your code. How is that supposed to help me if I’m not even certain how to write it more efficiently?

I’m not interested in a book that shovels me a bunch of code the author wrote. If I wanted free code, there’s tons of sites out there for that. I want a book that’s going to teach me how to think more securely and write more securely and think about the best/most optimized way to write a particular portion of code. Sadly, this book isn’t it.

Not a good book1
I read the first Chapter of this book and that was enough to know that this book is no good. The examples are not well explained and when it comes to try the code, it doesn’t work. Don’t waste your money on this!
It?s a hacker?s dream come true: over one million Web sites are now vulnerable to attack through recently discovered flaws in the PHP scripting language. So how do you protect your site? In this book, bestselling author Mohammed Kabir provides all the tools you?ll need to close this security gap. He presents a collection of 50 secure PHP applications that you can put to use immediately to solve a variety of practical problems. And he includes expert tips and techniques that show you how to write your own secure and efficient applications for your organization.

You?ll learn how to:

* Implement the featured applications in business environments such as intranets, Internet Web sites, and system administrations
* Develop e-mail and intranet solutions using PHP
* Determine the importance of certain coding practices, coding styles, and coding security requirements
* Follow the entire process of each PHP application life cycle from requirements, design, and development to maintenance and tuning.
* Use PHP in groupware, document management, issue tracking, bug tracking, and business applications
* Mature as a PHP developer by using software practices as part of your design, development, and software life cycle decisions
* Improve the performance of PHP applications

The companion CD-ROM contains:

* 50 ready-to-use PHP applications
* Searchable e-version of the book
* The latest versions of PHP, Apache, and MySQL™
mysql book

For useful info about the topic of find cheap playstation 3 - make sure to study this web site. The times have come when concise info is truly within your reach, use this chance.

Great Entertainment

Tuesday, September 22nd, 2009

I’ve enjoyed some great reading over the past few months. Passchendaell, Divine Justice, The Good Old Boys, Night of Flames, Echo Burning and Telegraph Days.

Echo Burning by Lee Child
This is the second time I’ve read this member of the ‘Jack Reacher’ series and I enjoyed it as much this time as the first. For those who are not familiar with Reacher he was an ‘Army brat’ who grew up in US military bases all over the world, graduated from West Point and spent 15 years as an army cop. He retired as a major when the end of the cold war changed ‘his’ army in ways he didn’t like. He now travels with a tooth brush and clothes on his back exploring the country he saw little of in his professional life. Echo Burning has him in South Texas experiencing some violent weather, violent bigotry, intrigue, murder and learning a little about horses and children. Great read.

I enjoy novels that take a different look at what has become the accepted norm. For example, anyone who has read about WW II knows about the Polish being rolled over by the blitzkrieg tactics of the German Army. They would know about the Free Polish who, based in England, served with distinction in ending the occupation of their homeland. But very little is known about what happened to others who remained in Poland or escaped to other neighbouring countries during the next 6 years.
What happens to women married to rich men who mistreat them? Do they put up with it for the monetary freedom or do they simply disappear to another life?
Does anyone give a thought to how the telegraph changed everyone’s life during the mid 1800s? What were the subjects of most messages? Gossip or business?

More about the other three novels in the next post.
reviews
entertainment

Find realistic knowledge about get cheap playstation 3 - please make sure to study this page. The time has come when proper information is truly only one click of your mouse, use this opportunity.