Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

RIPS Technologies:
PHP Security Advent Calendar 2017 Wrap-Up
Jan 05, 2018 @ 11:52:08

On their blog, RIPS Technologies have shared a wrap-up of their security advent calendar shared at the end of last year. The calendar provided a daily challenge related to a PHP security issue that may or may not be commonly known.

In this years PHP Security Advent Calendar we published 24 challenges for the PHP community where security issues were hidden in code snippets for fun and training. The challenges are based on real-world security vulnerabilities that we found with the help of RIPS over the last year in popular PHP applications. In this blog post we are going to discuss the main take-aways from our advent calendar regarding PHP security.

The calendar covered several different types of challenges but they fell into a few overall categories: issues with user input, weak typing, odd behavior of built-in features and the overall diversity of possible bugs.

The root cause for the security issues presented in our challenges are not new. But the diversity and combination of these pitfalls are sheer endless that trick even skilled developers. What looks secure at first sight quickly turns into an exploitable security bug. [...] We would like to thank everyone who participated, discussed, and provided great feedback and we hope our challenges helped in sharpening your security skills in a fun way!
tagged: security advent calendar wrapup 2017 ripstech

Link: https://blog.ripstech.com/2018/php-security-advent-calendar-wrap-up/

RIPSTech:
PHP Security Advent Calendar 2017 Announcement
Dec 01, 2017 @ 12:10:38

The RIPSTech group has a post to their site with the announcement of the return of their security-related advent calendar. This year, however, it comes in the form of the PHP Security Advent Calendar with more of a "common security problems in PHP" approach than a list of vulnerabilities.

The end of the year is coming closer and the cheery advent time begins. We are looking back at a spectacular year and it is time to thank and give back to the great PHP, infosec, and RIPS community. Thank you for developing, auditing, and securing your PHP applications with us in 2017!

Similar to last years advent of PHP application vulnerabilities where we released a new application vulnerability each day, we will release a new calendar gift from December 1st to 24th this year again. This time, we will focus on nifty PHP pitfalls and release a daily code challenge for you to solve. Can you spot the daily security bug?

As today is December 1st, the first item has been posted to the calendar covering the use of whitelists versus blacklists. Keep checking back daily for new updates to the calendar and the daily code challenges.

tagged: ripstech security advent calendar common issues

Link: https://blog.ripstech.com/2017/php-security-advent-calendar/

Derick Rethans:
Contributing Advent 1: Xdebug and hidden properties
Dec 02, 2013 @ 09:16:50

As a part of his "Advent Contribution" series Derick Rethans has posted about an update to XDebug that fixes a bug reported around hidden properties.

This first contribution is for bug #987: "Hidden property names not shown". In PHP it is possible to convert an array to an object. [...] Xdebug's standard HTML var_dump() as well as the CLI, the coloured CLI and the debugger interface DBGp all suffered from the same issues that numerical properties were not showing in output.

With the committed fix the output of the var_dump now shows these special property names with curly braces around them and makes them available via the property_get method. If you're interested in the actual commit, you can check it out here.

tagged: advent contribute hidden properties xdebug vardump propertyget

Link: http://derickrethans.nl/advent01.html

Community News:
Web Advent 2012
Dec 03, 2012 @ 08:19:44

From the folks that have brought you the PHP Advent series of posts in the past (Chris Shiflett, Sean Coates and all of their great contributing authors) comes this year's more general selection of articles - webadvent.org.

Christmas is upon us once again, and it's time to have a look at what's under the Web Advent tree. Join us each day as our wonderful authors provide presents of tips, tricks, & tidbits to usher in the new year.

This years posts are (list will be updated as more are added)

You can find articles from previous years in the site's sidebar.

tagged: webadvent12 advent calendar article

Link:

Community News:
PHP Advent 2011 is Complete!
Dec 26, 2011 @ 16:20:56

This year's PHP Advent calendar has finished up and if you haven't gotten a chance to check out some of the great content in this year's edition, be sure to take a look at the full list. It incudes topics like:

  • Front-end testing with SimpleTest
  • Scalable applications
  • Cross-origin ajax
  • working with Chef
  • Error handling
  • Dates and Times

The articles are by several well-knowns both in the PHP community and outside. While you're there, be sure to check out some of the previous years too!

tagged: complete phpadvent advent calendar tutorial article

Link:


Community News:
PHP Advent 2011
Dec 02, 2011 @ 11:02:10

It's that time of year again and this year's PHP Advent has kicked off with the first article posted yesterday. Below is a list of the articles for this year's advent calendar, to be updated as each new one is released:

Check back for the growing list as this year's advent gets more great content every day!

tagged: phpadvent advent calendar community article

Link:

Yahoo Developer Network:
'Tis the season for developers' calendars
Dec 06, 2010 @ 15:36:16

On the Yahoo Developer Network a new post talks about some of the developer "advent" calendars that have popped up around the web - including the PHP Advent.

Christmas is upon us. Developers are embracing the spirit of sharing their knowledge and wisdom, while taking the opportunity to look back and recollect what 2010 brought us in terms of new technologies and ideas. A number of "advent" calendars started posting their blog-a-day-till-Dec-24th. Here are some for your reading pleasure while you kick back with a glass of wine by the fireplace.

Also on the list are: the 24 Ways (general web dev), the Perl Advent, Web Performance Calendar and the HTML5 Advent. Be sure to check out the comments for more calendars!

tagged: developer calendar advent perl performance html5

Link:

Chris Shiflett's Blog:
PHP Advent
Dec 01, 2010 @ 10:11:18

Good news for all of the fans of the PHP Advent article series that comes around this time each year - Chris Shiflett has confirmed it'll be happening again this year.

PHP Advent is our little way of showcasing some of the talented people who work with PHP in some form or fashion, and persuading them to share something they've learned during a busy month when they might otherwise keep quiet. We'll be publishing an article each day in December until Christmas.

If you're new to the PHP Advent (or advent-type article calendar things), check out last year's articles from lots of great members of the PHP community covering everything from development processes, technology tips and parenting.

tagged: phpadvent article advent calendar chrisshiflett seancoates

Link:

Symfony Blog:
Windows and symfony
Dec 25, 2009 @ 08:59:56

In this recent tutorial (a part of the Symfony project's advent series) Laurent Bonnet about getting the Symfony framework installed on a Windows 2008 server running the IIS web server.

In order to prepare for Internet deployment, the tutorial can be executed in a dedicated server environment, hosted on the Internet. Of course, it's possible to complete the tutorial on a local server, or a virtual machine at the reader's workstation.

Laurent briefly talks about some of the differences between the 64 bit and 32 bit versions of Windows, setting up the database connection (SQLite), configuring the Windows server and using the Web Platform Installer it get PHP up and running. The tutorial also covers the setup of a sandbox and production environment via the command-line symfony tool.

tagged: windows symfony tutorial advent install

Link: