<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Fri, 04 Jul 2008 15:00:16 -0500</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[SaniSoft Blog: Code sniffs for CakePHP and then some more]]></title>
      <guid>http://www.phpdeveloper.org/news/10546</guid>
      <link>http://www.phpdeveloper.org/news/10546</link>
      <description><![CDATA[<p>
On the SaniSoft blog <i>Tarique Sani</i> has <a href="http://www.sanisoft.com/blog/2008/07/04/code-sniffs-for-cakephp-and-then-some-more/">posted about</a> (and made available for download) some code sniffs for the CakePHP framework. Some problems arose with some of the naming that the framework uses, but with some "tinkering around"...
</p>
<blockquote>
[It became] apparent that I had to have my own set of Cake sniffs to manage this but a separate standard just for this seemed an over kill and the simplicity of code made it kind of fun to add more standards which I liked but were in different set of sniffs.
</blockquote>
<p>
You can grab the whole list of sniffs from <a href="http://www.sanisoft.com/downloads/cakephp_sniffs/">their downloads</a>. They implemented them as a pre-commit hook on their SVN server even so that developers could not violate the coding standards when they submit their code.
</p>]]></description>
      <pubDate>Fri, 04 Jul 2008 09:32:00 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[PHP.net Wiki: Mentor Listing Added for TestFest 2008]]></title>
      <guid>http://www.phpdeveloper.org/news/9940</guid>
      <link>http://www.phpdeveloper.org/news/9940</link>
      <description><![CDATA[<p>
The mentor list for this year's <a href="http://wiki.php.net/qa/testfest">TestFest 2008</a> has been started (as mentioned by <a href="http://www.khankennels.com/blog/index.php/archives/2008/04/09/testfest-some-updates/">Ligaya Turmelle</a> on her blog). The list so far includes people from the community like:
</p>
<ul>
<li><i>Elizabeth Smith</i> (near Chicago)
<li><i>Pierre Joye</i> (Munich)
<li><i>Sebastian Bergmann</i> (Cologne)
<li><i>David Coallier</i> (Ireland & various others)
</ul>
<p>
Local organizers are still being assigned. Those considered must already committers at PHP.net and will be available to answer questions for their given areas. Ultimately, they will do the final commits of the resulting tests.
</p>]]></description>
      <pubDate>Wed, 09 Apr 2008 12:12:02 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[Community News: TestFest 2008]]></title>
      <guid>http://www.phpdeveloper.org/news/9791</guid>
      <link>http://www.phpdeveloper.org/news/9791</link>
      <description><![CDATA[<p>
Resulting from a conversation among developers at this year's PHP Quebec 2008 conference, a new event has been created to help test PHP against as many different configurations as it can be - <a href="http://wiki.php.net/qa/testfest">TestFest</a>.
</p>
<blockquote>
The TestFest is an event that aims at improving the code coverage of the test suite for the PHP language itself. As part of this event local UG are invited to join the TestFest. All it takes is a local organizer to spear head the event and to get others involved in <a href="http://qa.php.net/write-test.php">writing phpt tests</a>. The submissions will then be reviewed by members of php.net before getting included in the official test suite.
</blockquote>
<p>
The even will be announced sometime in March and its hope is to get as many people in the community involved to improve the language. There'll also be a raffle to give away 10 of the <a href="http://flickr.com/groups/elephpants/pool/">stuffed elePHPants</a> as well as, for the ones who are "test worthy" and seem able to write up good tests on their own - commit CVS access to php.net as well as an official php.net account.
</p>
<p>
For more details on the event, check out <a href="http://wiki.php.net/qa/testfest">this page</a> on the (new) PHP.net wiki.
</p>]]></description>
      <pubDate>Thu, 13 Mar 2008 11:15:43 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[Stefan Esser's Blog: What site do you want to break today?]]></title>
      <guid>http://www.phpdeveloper.org/news/8063</guid>
      <link>http://www.phpdeveloper.org/news/8063</link>
      <description><![CDATA[<p>
In a <a href="http://blog.php-security.org/archives/87-What-site-do-you-want-to-break-today.html">new post</a> to the PHP Security Blog, <i>Stefan Esser</i> points out <a href="http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.35&r2=1.417.2.8.2.36">a recent commit</a> to the PHP core as a fix to the session handling in PHP:
</p>
<blockquote>
I just came back home and saw a very recent commit to PHP's session management. It is another attempt to fix the session cookie attribute injection that the PHP developers already tried to fix in PHP 5.2.3 without giving any credits. [...] their new fix that consists of blacklisting a bunch of legal characters from the session id, will most probably result in hundreds or thousands of broken sites.
</blockquote>
<p>
<i>Stefan</i> points out that the fix blocks several valid characters that sites could potentially use in their session IDs, and that with this new code in place, it could drastically effect those site's functionality.
</p>
<p>
As of the time of this post, however, it seems that the issue has been <a href="http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.36&r2=1.417.2.8.2.37">recognized and corrected</a> so as not to cause the above mentioned issue in future updates.
</p>]]></description>
      <pubDate>Mon, 18 Jun 2007 08:48:00 -0500</pubDate>
    </item>
  </channel>
</rss>
