Some most popular front-end framework
light-weight
for mobile hybrid
Front-end framework
Leave a reply
Category Archives: programming
PHP array tips
Some tips.
1. Remove duplicates in array using array_unique
array array_unique ( array $array [, int $sort_flags = SORT_STRING ] )
2. Remove empty elements use array_filter
array array_filter ( array $array [, callable $callback [, int $flag = 0 ]] )
3. value is in the array use in_array
bool in_array ( mixed $needle , array $haystack [, bool $strict = FALSE ] )
4. key exist in array use array_key_exist
bool array_key_exists ( mixed $key , array $array )
Web application security
Below are some security checklist for a web application.
- Login screen
- to avoid brute force attack, display captcha after 3-5 attempts from same IP
- enforce longer password more than 8
- Registration (or open form)
- display captcha for all form to submit
- SSL is a must. free or paid
- displaying primary id for table in URL must be avoided, use other ID instead. E.g. a secure id consisting of unique 10 randomized alphanumeric
UI tools and framework
Some tools or framework for UI
Notes on Python
quick intro on how to code – variable, operation, integer, string, list (array)
some controls – if else, for, functions
click on “next” at the bottom to go through the rest of the doc for more advanced functions.
MySQL int type reference
Force https for page
Add these lines to .htaccess to force https
RewriteCond %{HTTPS} !=on
RewriteRule ^.*$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
PHP API request without cURL
Use the following library to easily talk to any API services. Without having to deal with cURL
http://requests.ryanmccue.info/
http://docs.guzzlephp.org/en/stable/
Use postman to simulate the REST API call
Ways to filter bots
- Most popular is recaptcha by google
- Honeypot technique – include a hidden field, if it is filled, then it is a robot
- A simple random questions. E.g. is fire hot or cold , five – 3 is ___
- http://nomorecaptchas.com/ (with price)
- https://visualcaptcha.net/ (no longer developed but they claim it still work)
- Algorithm
- after 5 failed attempt, lockout IP for 15 minutes
- if 5 times lockout, lockout IP for 24 hours
- if 3 times lockout, blacklist IP permanently (option for sys admin to clear)
- More alternatives
Cronjob timer
This is a useful generator for crontab command line
You can set for every minute/hour, set by time range etc.
crontab.guru