Tech Kaizen

passion + usefulness = success .. change is the only constant in life

Search this Blog:

HTML

HTML is a much simpler language.

HTML is very easy to learn, especially for someone familiar with the Web. In addition, the Web is overflowing with resources to help with the learning as well as great references. The World Wide Web Consortium (W3C) offers a good HTML introduction as well as many more lessons. TechRepublic provides numerous downloads about HTML, including an HTML reference guide and a CSS Reference Table.

You can find reference material from SitePoint with sites devoted to HTML and CSS.

There are tons of books available about HTML. Ian Lloyd's recently released The Ultimate HTML Reference, is a great resource in a surprisingly hard bound book. It provides a thorough discussion of each HTML element, along with example code and browser compatibility information.

Another good offering is HTML Dog: The Best-Practice Guide to XHTML and CSS.

Links:
http://blogs.techrepublic.com.com/programming-and-development/?p=707&tag=nl.e055

Labels: WEB PROGRAMMING

System & Network Monitoring Tools

System & Network Monitoring Tools:

1. Nagios

2. munin

3. monit

4. zabbix

5. cacti

6. mongrel


About Munin - http://munin.projects.linpro.no/

Munin the monitoring tool surveys all your computers and remembers what it saw. It presents all the information in graphs through a web interface. Its emphasis is on plug and play capabilities. After completing a installation a high number of monitoring plugins will be playing with no more effort.

Using Munin you can easily monitor the performance of your computers, networks, SANs, applications, weather measurements and whatever comes to mind. It makes it easy to determine "what's different today" when a performance problem crops up. It makes it easy to see how you're doing capacity-wise on any resources.

Munin uses the excellent RRDTool (written by Tobi Oetiker) and the framework is written in Perl, while plugins may be written in any language. Munin has a master/node architecture in which the master connects to all the nodes at regular intervals and asks them for data. It then stores the data in RRD files, and (if needed) updates the graphs. One of the main goals has been ease of creating new plugins (graphs).

Labels: SYSTEM and NETWORK ADMINISTRATION

PHP

PHP => Hyper Text PreProcessor

PHP is a server-side, HTML-embedded, cross-platform scripting language--quite a mouthful. In simpler terms, PHP provides a way for you to put instructions in your HTML files to create dynamic content. These instructions are read and parsed by the web server; they never actually make it to the browser that is displaying the page. The web server replaces your PHP code with the content that the code was written to produce.

PHP can be configured to run either as a server module or as a standalone CGI script. At the time of this writing, the server-module version is only production-ready for the Apache web server on Unix systems. The CGI version runs with all web servers on both Unix and Windows 95/98/NT. On the Windows platform (as of PHP Version 4), the server module is being developed to work with ISAPI, NSAPI, and WSAPI, which means the server module will eventually work with Microsoft's IIS, Netscape's Enterprise Server, and O'Reilly's WebSite. See http://www.php.net/ for availability details.

The PHP language itself borrows concepts from other common languages, such as C and Perl. If you have some experience with one of these languages, you should feel right at home with PHP. In addition to the core language, PHP provides a wide variety of functions that support everything from array manipulation to regular expression support.

Database connectivity is one popular use for PHP. PHP supports a large number of databases natively and many others are accessible through PHP's ODBC functions. Through this database connectivity, it is possible, for example, to take a company's database of products and write a web interface to it using PHP.

PHP Frameworks:

1. Akelos

2. Symfony

3. PHPDevShell

4. CodeIgniter

5. Prado

6. CakePHP

7. ZooP

8. Zend

9. QPHP

PHP Resources Learn:

PHP.net is an excellent resource for PHP developers.

For a series of developerWorks tutorials on learning to program with PHP, see the "Learning PHP" series.

Visit IBM developerWorks' PHP project resources to learn more about PHP.

Stay current with developerWorks technical events and webcasts.

Check out upcoming conferences, trade shows, webcasts, and other Events around the world that are of interest to IBM open source developers.

Visit the developerWorks Open source zone for extensive how-to information, tools, and project updates to help you develop with open source technologies and use them with IBM's products.

To listen to interesting interviews and discussions for software developers, be sure to check out developerWorks podcasts.

Komodo IDE is available from ActiveState.

PHPDesigner is a product of MPSOFTWARE.

PHPEclipse, the free Eclipse plug-in for PHP, is available at PHPEclipse.net.

NuSphere is the maker of PhpED.

PHPEdit is available from WaterProof Software.

The PHP IDE Project, a free Eclipse plug-in for PHP, is available at Eclipse.org.

Zend Studio, along with other helpful PHP products, is available at Zend.com.
Innovate your next open source development project with IBM trial software, available for download or on DVD.

Free Programming Resources - http://www.freeprogrammingresources.com/

PHP IDE:

http://www.freeprogrammingresources.com/phpide.html

PHPeclipse PHP, SQL, HTML - parser, debugger, code formatter, outline view, templates. Built on top of the powerful Eclipse development platform (http://www.eclipse.org/).

Maguma Open Studio A PHP IDE that includes features for class browsing, ftp support, snippets, debugging and project management. The Open Source version of Maguma Studio.

PHP Designer 2005 The development environment in PHP Designer 2005 combines many powerful features such as customizable syntax schemes for PHP, HTML, XHTML, CSS, Perl, C#, JavaScript, VB, Java and SQL (Ingres, Interbase, MSSQL, MySQL, Oracle, Sybase and Standard SQL), a class/include browser, test and debug your scripts with the PHP interpreter, integration of the PHP manual, parameter hint, auto indent of brackets, automatic close brackets, access to common code/script libraries all combined in this one unique program.

tsWebEditor tsWebEditor is a powerful php editor and html editor which you can also use as a simple text editor. It displays the source code colored (syntax highlight), parameter hint for functions, code completion (php, javascript, asp, html), code browser, php syntax and error check, help, css assistant, html tag editor, html syntax checker, etc.

KPHPDevelop KPHPDevelop is a PHP IDE for KDE. See the website for more detailes.

Dev-PHP IDE Dev-PHP is a full-featured Windows Integrated Development Environment for PHP. It has many cool features, like Function browsing and full integration with the PHP parser and the PHP-GTK library.

PHP Coder PHP Coder is an IDE (Integrated Development Environment) especially developped for PHP programmers.

TemplateTamer TemplateTamer is a tool for creating and maintaining a template based dynamic PHP web applications, with clearly and completely separated code from the html design. Free edition can be used as long as there is a link to the TemplateTamer web on every page

Arisesoft Winsyntax Arisesoft Winsyntax is a free PHP-code editor with a fast syntax highlighting engine and the context PHP-help for professional scripting for Windows.

Labels: SCRIPTING LANGUAGES

VBScript


VBScript (short for Visual Basic Scripting Edition) is an Active Scripting language developed by Microsoft. The language's syntax reflects its history as a limited variation of Microsoft's Visual Basic programming language.

VBScript is installed by default in every desktop release of the Windows Operating System (OS) since Windows 98[1] and may or may not be included with Windows CE depending on the configuration and purpose of the device it is running on. It initially gained support from Windows administrators seeking an automation tool more powerful than the batch language first developed in the late 1970s.

A VBScript script must be executed within a host environment, of which there are several provided on a standard install of Microsoft Windows (Windows Script Host, Windows Internet Explorer). Additionally, The VBScript hosting environment is embeddable in other programs, through technologies such as the Microsoft Script control (msscript.ocx).

Links:

PrimalScript VB IDE(from Sapient) -
http://www.primalscript.com/Download_Trial/downloadtrial.asp

Microsoft Script Debugger Download -
http://www.microsoft.com/downloads/details.aspx?FamilyId=2F465BE0-94FD-4569-B3C4-DFFDF19CCD99&displaylang=en

VBScript Debugging Scripts - http://wsh2.uw.hu/ch02e.html

How to use the Microsoft Script Debugger to debug VBScripts: http://wsh2.uw.hu/ch02e.html

VBScript Sample Code - http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/filesfolders/folders/

SplineTech VBS Debugger 6.22 -
http://www.sharewareconnection.com/download-splinetech-vbs-debugger-from-sharecon.html

VBScript2Exe (exe) - VBScript2Exe is a program that quickly converts Visual Basic scripts to executable files (.exe), protecting contents of .vbs files from being changed by other users accidentally or intentionally. VBScript2Exe has the following unique features, converts Visual Basic scripts into executable files EXE format. Protects contents of .vbs from modification by...
Link -
http://search.techrepublic.com.com/search/microsoft+development+tools+and+microsoft+vbscript+and+microsoft+visual+basic.html

Download Script Editor 2.0 -
http://www.sharewareconnection.com/download-script-editor-from-sharecon.html

http://www.visualbasicscript.com/m_57462/tm.htm

http://www.motobit.com/tips/detpg_replfile/

Labels: SCRIPTING LANGUAGES

Toos for Analyzing Web Server Logs

Log files are not fun to look at. They are ugly, contain too much information, and often lead to massive headaches. Fortunately, these beasts can be tamed for more capacities than just debugging; they can used to generate wonderful reports that make sense.

Tools:
1. AWStats

2. Analog

3. WebTrends

4. Summary

5. Webalizer

Links:
WebServer LogAnalysis Tools Overview - http://www.serverwatch.com/tutorials/article.php/3518061

Analyzing Web Logs with AWStats -
http://www.onlamp.com/pub/a/onlamp/2005/12/01/awstats.html

Web Server Log Rotation and Analysis -
http://www.keithjbrown.co.uk/vworks/unix/logs.php

Labels: SYSTEM and NETWORK ADMINISTRATION

Regular Expressions

A regular expression (or RE) specifies a set of strings that matches it; the functions in this module let you check if a particular string matches a given regular expression (or if a given regular expression matches a particular string, which comes down to the same thing).

Regular expressions can be concatenated to form new regular expressions; if A and B are both regular expressions, then AB is also a regular expression. In general, if a string p matches A and another string q matches B, the string pq will match AB. This holds unless A or B contain low precedence operations; boundary conditions between A and B; or have numbered group references. Thus, complex expressions can easily be constructed from simpler primitive expressions like the ones described here. For details of the theory and implementation of regular expressions, consult the Friedl book referenced above, or almost any textbook about compiler construction.

A brief explanation of the format of regular expressions follows. For further information and a gentler presentation, consult the Regular Expression HOWTO, accessible from
http://www.python.org/doc/howto/.

Regular Expressions :

^ matches the beginning of a string.

$ matches the end of a string.

\b matches a word boundary.

\d matches any numeric digit.

\D matches any non-numeric character.

x? matches an optional x character (in other words, it matches an x zero or one times).

x* matches x zero or more times.

x+ matches x one or more times.

x{n,m} matches an x character at least n times, but not more than m times.

(abc) matches either a or b or c.

(x) in general is a remembered group. You can get the value of what matched by using the
groups() method of the object returned by re.search.

Links:

Regular Expressions - http://www.regular-expressions.info/

Regular Expressions - http://www.regular-expressions.info/reference.html

"Regular Expression Pocket Reference: Pocket Reference" By Tony Stubblebine, Nathan Torkington Book -
http://books.google.com/books?hl=en&id=yWiAPqBKuqYC&dq=regular+expressions&printsec=frontcover&source=web&ots=ml6KiIf7MQ&sig=iNm7kbvt_WLeofmkf9mdNyHLlWg&sa=X&oi=book_result&resnum=10&ct=result


"Mastering Regular Expressions" By Jeffrey Friedl Book -
http://books.google.com/books?id=ucwR4KIvExMC&dq=%22Mastering+Regular+Expressions%22+By+Jeffrey+Friedl+Book&pg=PP1&ots=QLuEp_8WLi&sig=o5HmLuhkYgrnRCw6t88-4qe6uu4&hl=en&sa=X&oi=book_result&resnum=4&ct=result

Regular Expression Engines:

PCRE - Perl Compatible Regular Expressions

The PCRE library is a set of functions that implement regular expression pattern matching using the same syntax and semantics as Perl 5. PCRE has its own native API, as well as a set of wrapper functions that correspond to the POSIX regular expression API. The PCRE library is free, even for building commercial software.

C++ Regular Expression Engines - PCRE, BOOST REGEXJAVA Regular Expression Engines - Apache Regexp

Links:

Regular Expression Engines - http://en.wikipedia.org/wiki/Comparison_of_regular_expression_engines

PCRE - http://www.pcre.org/

BOOST Regex - http://www.boost.org/doc/libs/1_35_0/libs/regex/doc/html/index.html

Regular Expressions in C++ with Boost.Regex - http://www.onlamp.com/pub/a/onlamp/2006/04/06/boostregex.html

Apache Regexp - http://projects.apache.org/projects/regexp.html

Regular Expressions in C++ - http://www.ddj.com/184404797

Labels: SCRIPTING LANGUAGES

Python

Python is an dynamic object-oriented programming language that can be compared with Java and Microsoft's .NET-based languages as a general-purpose substrate for many kinds of software development. It offers strong support for integrating with other technologies, higher programmer productivity throughout the development life cycle, and is particularly well suited for large or complex projects with changing requirements.

Python's key strengths include:

1. Prototyping in Python is quick and easy, and often results in development of the final system in Python. The agile nature of the language, and the ease of refactoring code makes for rapid development directly from the initial prototype.

2. Application scripting is a snap with Python's tight integration with C/C++ and Java. Python was designed from the ground up to be embeddable and serves as an excellent choice as a scripting language for customization or extension of larger applications.

3. Software Testing benefits from Python's strong integration and text processing capabilities, and Python comes with its own unit testing framework.

4. Web development from simple CGI scripting to high-end web application development with mega-frameworks such as Django and Turbogears, the Zope application server, Plone content management system, Quixote web application framework, or a even a home-grown solution based on Python's extensive and easy to use standard libraries. Python provides interfaces to most databases, powerful text processing and document processing facilities, and plays well with other web technologies.

5. Numeric and scientific applications make use of the Python Imaging Library, VTK and MayaVi 3D Visualization Toolkits, Numeric Python, ScientificPython and many other tools available for numeric and scientific applications. Many of these are supported by the Enthought Python Distribution.

6. Desktop development using wxPython, PyQt, or PyGtk for high-quality GUI applications. Protect your investment by basing on open technologies, with deployment to most operating systems. Support for other GUI frameworks, such as MFC, Carbon, Delphi, X11, Motif, and Tk, is also available.

Popular Python IDEs:


  • Eclipse with PyDev
  • Eric
  • IDLE
  • Komodo IDE
  • PyCharm
  • Wing IDE





Python Popular Full-Stack Web Frameworks
Link : http://wiki.python.org/moin/WebFrameworks

A web application may use a combination of a base HTTP application server, a storage mechanism such as a database, a template engine, a request dispatcher, an authentication module and an AJAX toolkit. These can be individual components or be provided together in a high-level framework.

These are the most popular high-level frameworks. Many of them include components listed on the WebComponents page.

1. Django (0.96.1 Released 2007-10-26) a high-level Python Web framework that encourages rapid development and clean, pragmatic design

2. Pylons (0.9.6.2 Released 2008-05-28) a lightweight Web framework emphasizing flexibility and rapid development. It combines the very best ideas from the worlds of Ruby, Python and Perl, providing a structured but extremely flexible Python Web framework. It's also one of the first projects to leverage the emerging WSGI standard, which allows extensive re-use and flexibility but only if you need it. Out of the box, Pylons aims to make Web development fast, flexible and easy. Pylons is built on top of Paste (see below).

3. TurboGears (1.0.4.4 Released 2008-03-07) the rapid Web development megaframework you've been looking for. Combines CherryPy, Kid, SQLObject and MochiKit. After reviewing the website check out: QuickStart Manual

4. web2py (currently version 1.37) Everything in one package with no dependencies. Development, deployment, debugging, testing, database administration and maintenance of applications can be done via the provided web interface. web2py has no configuration files, requires no installation, can run off a USB drive. web2py uses Python for the Model, the Views and the Controllers, has a built-in ticketing system to manage errors, an internationalization engine, works with MySQL, PostgreSQL, SQLite , Oracle, MSSQL and the Google App Engine via an ORM abstraction layer. web2py includes libraries to handle HTML/XML, RSS, ATOM, CSV, RTF, JSON, AJAX, XMLRPC, WIKI markup. Production ready, capable of upload/download of very large files, and always backward compatible.

5. Grok (0.13 Released 2008-06-23) is built on the existing Zope 3 libraries, but aims to provide an easier learning curve and a more agile development experience. It does this by placing an emphasis on convention over configuration and DRY (Don't Repeat Yourself).

6. Zope (2.10.4 Released 2007-07-04, 3.3.1 Released 2007-01-14, Zope 3.4.0c1 Released 2008-01-31) Being the grandaddy of Python web frameworks, Zope has grown into a family of frameworks over the years. Zope 1 was released in 1999. Zope 2 is both a web framework and a general purpose application server, today it is primarily used by ContentManagementSystems. Zope 3 is both a standalone framework and a collection of related libraries, which are also included with newer releases of Zope 2. All of the Zope frameworks include the ZODB, an object database for Python.


Links:

Python Tutorial - http://www.penzilla.net/tutorials/python/index.shtml

Python Links - http://remus.rutgers.edu/cs314/f2007/ryder/lectures/Python2-19.pdf

Python Articles - http://www.devshed.com/c/b/Python/

The Python Regular Expression Debugger (Kodos) - http://sourceforge.net/project/showfiles.php?group_id=43860

Python for Java Programmers : http://www.cs.wlu.edu/~necaise/python/Main/TableOfContents

Python Regular Expressions - http://www.amk.ca/python/howto/regex/

Python HOWTOs - http://docs.python.org/dev/howto/index.html

Python for C++ guys - http://www.ibiblio.org/g2swap/byteofpython/read/

Thinking in Python Book - http://www.mindview.net/Books/TIPython

Dive Into Python Book - http://diveintopython.org/toc/index.html

Perl & Python Books - http://www.techbooksforfree.com/perlpython.shtml


Python resources - http://www.bogotobogo.com/python/pytut.php



Videos:

Python overview - 

  • https://www.youtube.com/watch?v=N4mEzFDjqtA
  • https://www.youtube.com/watch?v=rkx5_MRAV3A
  • https://www.youtube.com/watch?v=jlzePDUgL_8
  • https://www.youtube.com/watch?v=RrPZza_vZ3w
  • https://www.youtube.com/watch?v=nWoSEXHVl7c
Python object oriented programming -
  • https://www.youtube.com/watch?v=FfWE9pvAnT0
  • https://www.youtube.com/watch?v=X0mZXVkiaOo&index=2&list=PL9ooVrP1hQOHY-BeYrKHDrHKphsJOyRyu
  • https://www.youtube.com/watch?v=pPHmtAGG3mc
Python: Zero to Hero - 
  • https://www.youtube.com/watch?v=9uq3w6JJS00
  • https://drive.google.com/folderview?id=0B5BO97vHUkN2fjR2NjFqNDZvSldBWTRoNXdYU01uRV9iLWtxeHpDbERLZ0ZndHRMWnRHdTA&usp=sharing_eid

Labels: PYTHON PROGRAMMING, SCRIPTING LANGUAGES

Best of Java

Links:

Five Java articles you should share with your team - http://articles.techrepublic.com.com/5100-10878_11-1046131.html?tag=rbxccnbtr1

How to Write Doc Comments for the Javadoc Tool - http://java.sun.com/j2se/javadoc/writingdoccomments/index.html

Ten tips for creating killer Java docs - http://articles.techrepublic.com.com/5100-10878_11-1045800.html?tag=rbxccnbtr1

Doxygen way of Commenting the code - http://www.stack.nl/~dimitri/doxygen/docblocks.html

Commonly used architectural patterns in Java applications - http://articles.techrepublic.com.com/5100-10878_11-1049864.html?tag=rbxccnbtr1

Abstract packages ensure flexibility - http://articles.techrepublic.com.com/5100-10878_11-1058943.html?tag=rbxccnbtr1

Labels: J2EE PROGRAMMING

gSoap Client through Http Proxy

HTTP Proxy Authentication with gSoap:



HTTP proxy authentication (basic) is enabled at the client-side by setting the soap.proxy_userid and soap.proxy_passwd strings to a username and password, respectively.



For example, a proxy server may request user authentication. Otherwise, access is denied by the proxy (HTTP 407 error).



Example client code fragment to set proxy server, username, and password:



struct soap soap;

soap_init(&soap);

soap.proxy_host = "xx.xx.xx.xx"; // IP or domain

soap.proxy_port = 8080;

soap.proxy_userid = "guest";

soap.proxy_passwd = "guest";

...



A client SOAP request will have the following HTTP header:



POST /XXX HTTP/1.0

Host: YYY User-Agent: gSOAP/2.2 Content-Type: text/xml;

charset=utf-8 Content-Length: nnn Proxy-Authorization: Basic Z3Vlc3Q6Z3Vlc3Q= ...



When X-Forwarded-For headers are returned by the proxy, the header can be accessed in the soap.proxy_from string.



Links:

gSOAP 2.7.10 User Guide - http://www.cs.fsu.edu/~engelen/soapdoc2.html



Labels: SERVICE ORIENTED ARCHITECTURE (SOA)

CInternetSession INTERNET_OPEN_TYPE_PROXY through Http Proxy

CInternetSession - Creates and initializes a single or several simultaneous Internet sessions and, if necessary, describes your connection to a proxy server.

CInternetSession is a MFC wrapper over WinInet.dll which gets installed with Internet Explorer(IE).

The Constructor of "CInternetSession" looks like -

CInternetSession(
LPCTSTR pstrAgent = NULL,
DWORD_PTR dwContext = 1,
DWORD dwAccessType = PRE_CONFIG_INTERNET_ACCESS,
LPCTSTR pstrProxyName = NULL,
LPCTSTR pstrProxyBypass = NULL,
DWORD dwFlags = 0
);

Details:
dwAccessType :
The type of access required. The following are valid values, exactly one of which may be supplied:
INTERNET_OPEN_TYPE_PRECONFIG - Connect using preconfigured settings in the registry. This access type is set as the default. To connect through a TIS proxy, set dwAccessType to this value; you then set the registry appropriately.

INTERNET_OPEN_TYPE_DIRECT - Connect directly to Internet.

INTERNET_OPEN_TYPE_PROXY - Connect through a CERN proxy.

For information on connecting with different types of proxies, see Steps in a Typical FTP Client Application.

pstrProxyName :
The name of the preferred CERN proxy if dwAccessType is set as INTERNET_OPEN_TYPE_PROXY. The default is NULL.

pstrProxyBypass :
A pointer to a string containing an optional list of server addresses. These addresses may be bypassed when using proxy access. If a NULL value is supplied, the bypass list will be read from the registry. This parameter is meaningful only if dwAccessType is set to INTERNET_OPEN_TYPE_PROXY.

Labels: VC++ PROGRAMMING

SQL Injection Prevention Tools

SQL Injection: Something to do with Sql User Input Vulnerability.

SQL Injection is a technique which enables an attacker to execute unauthorized SQL commands by taking advantage of unsanitized input opportunities in Web applications building dynamic SQL queries.

SQL injection attacks are possible because the SQL language contains a number of features that make it quite powerful and flexible, namely:
1. The ability to embed comments in a SQL statement using a pair of hyphens.

2. The ability to string multiple SQL statements together and to execute them in a batch.3. The ability to use SQL to query metadata from a standard set of system tables.
SqlInjection examples: SELECT Count(*) FROM Users WHERE UserName='' Or 1=1 --' AND Password='' ' UNION SELECT id, name, '', 0 FROM sysobjects WHERE xtype ='U' -- '; UPDATE Products SET UnitPrice = 0.01 WHERE ProductId = 1--

How to prevent SQL Injection:

1. Always validate User dynamic SQL data

2. Always execute SQL Statements with Least User Privilges

3. Do not show database Error messages completely

Tools to prevent Sql Injection:
Each of these tools works differently and each attacks the SQL injection problem from a different angle, and in combination they complement each other well," revealed Bryan Sullivan, Security Product Manager SDL team.

HP Scrawlr: The tool will crawl a website, simultaneously analyzing the parameters of each individual web page for SQL Injection vulnerabilities. Scrawlr uses some of the same technology found in HP WebInspect but has been built to focus only on SQL Injection vulnerabilities. This will allow an IT/DB admin to easily find vulnerabilities similar to the ones that have been used to compromise sites in recent attacks. No source code is required to run this tool. From a starting URL, the tool recursively crawls that URL in order to build up a site tree that will be then analyzed for SQL injection vulnerabilities.

Microsoft Source Code Analyzer for SQL Injection: Called MSCASI, this is a static code analysis tool that identifies SQL Injection vulnerabilities in ASP code (ASP pages are the ones that have been under attack). In order to run MSCASI you will need source code access and MSCASI will output areas vulnerable to SQL injection (i.e. the root cause and vulnerable path is identified). It scans ASP source code and generates warnings for first order and second order SQL Injection vulnerabilities.

URLScan 3.0: This tool restricts the types of HTTP requests that Internet Information Services (IIS) will process. By blocking specific HTTP requests, UrlScan helps prevent potentially harmful requests from being executed on the server. It uses a set of keywords to block certain requests. If a bad request is detected, the filter will drop the request and it will not be processed by SQL. That said, if a SQL injection flaw has been identified, you are encouraged to fix the root cause of the problem instead of attempting to produce the perfect filter (since in our view this is error prone).

Tool to perform SqlInjection !!!
SqlMap: http://sourceforge.net/projects/sqlmap/
Sqlmap is an automatic SQL injection tool. It is capable to perform an extensive DBMS back-end fingerprint, retrieve remote usernames, tables, columns, enumerate entire DBMS and much more taking advantage of web application SQL injection vulnerabilities.

Links:

SQL Injection Attacks by Example – http://www.unixwiz.net/techtips/sql-injection.html

SQL Injection Walkthrough - http://www.securiteam.com/securityreviews/5DP0N1P76E.html

Developers at fault? SQL Injection attacks lead to wide-spread compromise of IIS servers - http://blogs.zdnet.com/security/?p=1059

Bryan Sullivan Blog on Security: - http://blogs.msdn.com/sdl/

http://msdn2.microsoft.com/en-us/magazine/cc163917.aspx

http://www.codeproject.com/KB/database/SqlInjectionAttacks.aspx

http://www.4guysfromrolla.com/webtech/061902-1.shtml

Labels: DATABASE

SqlServer Overview

Microsoft SQL Server is a relational database management system (RDBMS) produced by Microsoft. Its primary query language is Transact-SQL, an implementation of the ANSI/ISO standard Structured Query Language (SQL) used by both Microsoft and Sybase.

Links:

Microsoft SqlServer's Home -
http://www.microsoft.com/SQL/default.mspx

Microsoft's SqlServer Developer Home -
http://crawlmsdn.microsoft.com/en-us/sqlserver/default.aspx

sqlserver central -
http://www.sqlservercentral.com/

Microsoft SqlServer -
http://en.wikipedia.org/wiki/Microsoft_SQL_Server

SqlServer Magazine -
http://www.sqlmag.com/

SqlServer Tools -
http://www.stylusstudio.com/sqlserver.html

SqlServer Tutorials -
http://www.functionx.com/sqlserver/

Free SQL Server tools that might make your life a little easier -
http://weblogs.sqlteam.com/mladenp/archive/2007/11/20/Free-SQL-Server-tools-that-might-make-your-life-a.aspx

SQL Server 2008 Books Online -
http://msdn.microsoft.com/en-us/library/bb543165(sql.100).aspx

Labels: DATABASE

Oracle Overview

Links:

Oracle Technology Network -
http://www.oracle.com/technology/index.html

Oracle Knowledge Base -
http://oracle.ittoolbox.com/

Oracle Blogs -
http://blogs.oracle.com/

Oracle Academy -
https://academy.oracle.com/

Oracle Tools -
http://www.orafaq.com/tools/

Oracle Development Tools -
http://www.orafaq.com/tools/#Developer_Tools

Mastering Oracle Sql Book -
http://books.google.com/books?hl=en&id=Rl2_4LhDjZkC&dq=oracle&printsec=frontcover&source=web&ots=gaYnrtP4J6&sig=0B8OKUXnQuHTJQ9bFFeNQSyODlA&sa=X&oi=book_result&resnum=6&ct=result

PL/SQL Best Practices: Optimizing Oracle Code Book -
http://books.google.com/books?hl=en&id=BZ3xICLiwwkC&dq=oracle&printsec=frontcover&source=web&ots=Jr6svNlvdn&sig=83VgoXnDtddPh7p9zV359C9Eyr8&sa=X&oi=book_result&resnum=9&ct=result

Free and Open Source Software -
http://oss.oracle.com/

Toad vs Sql Developer -
http://oracle.ittoolbox.com/documents/popular-q-and-a/toad-vs-sql-developer-4625

Labels: DATABASE

Software Freelancing Sites URLs

Links:

https://www.elance.com

http://www.guru.com/

http://www.rentacoder.com/RentACoder/default.asp

http://www.getacoder.com/

http://www.getafreelancer.com/buyers/create.php

http://www.guru.com/category.cfm?cid=800&tc=20000&kw=freelance%20software%20development

http://www.softwareprojects.org/offshore-development-freelance-developer.htm

http://www.ifreelance.com/Freelancers/Freelance-Software-Designers/

http://programmingbids.com/

http://www.freelancebbs.com/fbb/freelancer_pp_2030_Software_development.html

How to become Freelancer -

http://www.softwarebyrob.com/2008/01/18/the-five-minute-guide-to-becoming-a-freelance-software-developer/

Labels: TECHNICAL MISCELLANEOUS

Regular Expression Engines - PCRE, Boost Regex, Apache Regexp

PCRE - Perl Compatible Regular Expressions

The PCRE library is a set of functions that implement regular expression pattern matching using the same syntax and semantics as Perl 5. PCRE has its own native API, as well as a set of wrapper functions that correspond to the POSIX regular expression API. The PCRE library is free, even for building commercial software.

C++ Regular Expression Engines - PCRE, BOOST REGEX
JAVA Regular Expression Engines - Apache Regexp

Links:

PCRE - http://www.pcre.org/

BOOST Regex - http://www.boost.org/doc/libs/1_35_0/libs/regex/doc/html/index.html

Regular Expressions in C++ with Boost.Regex - http://www.onlamp.com/pub/a/onlamp/2006/04/06/boostregex.html

Apache Regexp - http://projects.apache.org/projects/regexp.html

Regular Expressions in C++ - http://www.ddj.com/184404797

Regular Expression Engines - http://en.wikipedia.org/wiki/Comparison_of_regular_expression_engines

Labels: C PROGRAMMING

Network Packet Analysis API

What is libpcap?:

The libpcap library can be used to read, record, inject and in general deal with network packets at a higher level than raw sockets. Essentially libpcap can be used to easily collect up or manipulate packets. Libpcap functions also abstract a lot of the differences between Operating Systems' network API making programs that leverage libpcap generally more portable or perhaps saving the programmer the headache of writing their own network API layer. This is not to say dealing with packets even with libpcap is easy; just slightly easier.

Tools that use libpcap : Wireshark, Tcpdump

Links:

1. Packet Reading with libpcap Part 1 - http://www.systhread.net/texts/200805lpcap1.php

2. On the Wire: Network Capture Tools for API Developers - http://code.google.com/support/bin/answer.py?answer=71567

Labels: C PROGRAMMING

SAAS(Software as a Service) WebServices


Web services
are software systems designed to support interoperable machine-to-machine interaction over a network. This interoperability is gained through a set of XML-based open standards, such as WSDL, SOAP, and UDDI. These standards provide a common approach for defining, publishing, and using web services.

Web Services is an emerging technology that provides machine-to-machine interaction over a network using an XML based protocol called SOAP. Web Services are an important building block of a Service Oriented Architecture or SOA. SOAP is analagous to Remote Procedure Calls (RPC) or Remote Method Invocation (RMI) which also can be used in a SOA. Alternatively, SOAP can use a "document-style" for its calls; this minimizes the need to call the service multiple times for most requests.

Interfaces available through a SOAP based Web Service are generally described using the Web Services Description Language (WSDL). Location of WSDL files are often times indexed in a UDDI server, although UDDI never became a critical part of web services deployments. In recent years, UDDI's role as a directory of services has been superceded by Web Service Brokers, which provide a single access point to multiple services while providing functions common to most services such as caching, logging, security, and high availability (failover/clustering). Synapse from the Apache Foundation provides one such broker.

SOAP and Web services, broadly speaking, are not restricted to using HTTP for transport. Many SOAP libraries include support for SOAP over SMTP (via email), XMPP (instant messaging protocol), and other transports. Support for alternate transports is something to consider when implementing SOAP-based services.

A useful web service is one that exposes information through a generic interface that is intended for multiple consumers. The better designed your web service, the more useful it becomes for the consumers of that web service.

gSoap can be used to develop C++ based WebServices ... It provideds C++ to XML binding.

Apache Axis can be used to develop JAVA based WebServices.

SoapUI tool can be used for WebServices Unit Testing.

Wireshark tool can be used to sniffer Soap/XML Packets.

Fiddler tool can be used to intercept HTTP Headers.

Links

http://java.sun.com/developer/technicalArticles/WebServices/soa/

http://java.sun.com/developer/technicalArticles/WebServices/soa2/

http://www.xml.com/pub/a/ws/2003/09/30/soa.html

http://www.service-architecture.com/web-services/articles/index.html

gsoap YahooGroups
http://tech.groups.yahoo.com/group/gsoap/

Developing WebServices with gSoap -
http://www.ddj.com/cpp/184401909

gSOAP 2.7.10 User Guide(In HTML) -
http://www.cs.fsu.edu/~engelen/soapdoc2.html#tth_sEc7.1.2

gSOAP 2.7.10 User Guide(In PDF) -
http://www.cs.fsu.edu/~engelen/soapdoc2.pdf

gSoap Sample(Developing Calculator Webservice) -
http://www.genivia.com/Products/gsoap/demos/calc.html

gSoap Sample Code -
http://www.cs.fsu.edu/~engelen/soap.html

Unit Testing WebServices Tool - SoapUI (
http://sourceforge.net/projects/soapui)

Intercept WebService Soap Calls : Tool - WireShark (
http://www.wireshark.org/)

Apache tcpmon: An open-source utility to Monitor A TCP Connection Link -
https://tcpmon.dev.java.net/

WSMonitor - wsmonitor (Web Services Monitor) is a light-weight SOAP and HTTP traffic monitor. This tool intercepts and logs the SOAP messages and HTTP headers between a sender and a receiver and displays them nicely formatted in a graphical user interface Link :
https://wsmonitor.dev.java.net/

Apache Webservices Common Tools Link -
http://ws.apache.org/

Fiddler - Web Debugging Tool (Intercept HTTP Headers) -
http://www.fiddlertool.com/fiddler/version.asp

Apache WebServices Wiki -
http://wiki.apache.org/ws/

Securing Web Services Book - http://books.google.com/books?id=zX2N7fWTJOUC&pg=PA115&lpg=PA115&dq=RBAC+ABAC&source=web&ots=iNSgG5F5Sc&sig=ILebS-DsvlxddRBSIwmakwMKyzk&hl=en&sa=X&oi=book_result&resnum=3&ct=result#PPP1,M1

ABAC vs RBAC - http://www-ifs.uni-regensburg.de/fileadmin/Forschung/PDF_Publikationen/llncs-dem.pdf

RBAC - http://www.sciencedirect.com/science?_ob=ArticleURL&_udi=B6V0G-46WW2TN-1&_user=10&_rdoc=1&_fmt=&_orig=search&_sort=d&view=c&_acct=C000050221&_version=1&_urlVersion=0&_userid=10&md5=32cb8dcb0dc01647b5e6c71d80f3181b

Labels: SERVICE ORIENTED ARCHITECTURE (SOA)
Newer Posts Older Posts Home
Subscribe to: Posts (Atom)

The Verge - YOUTUBE

Loading...

Google - YOUTUBE

Loading...

Microsoft - YOUTUBE

Loading...

MIT OpenCourseWare - YOUTUBE

Loading...

FREE CODE CAMP - YOUTUBE

Loading...

NEET CODE - YOUTUBE

Loading...

GAURAV SEN INTERVIEWS - YOUTUBE

Loading...

Y Combinator Discussions

Loading...

SUCCESS IN TECH INTERVIEWS - YOUTUBE

Loading...

IGotAnOffer: Engineering YOUTUBE

Loading...

Tanay Pratap YOUTUBE

Loading...

Ashish Pratap Singh YOUTUBE

Loading...

Questpond YOUTUBE

Loading...

Kantan Coding YOUTUBE

Loading...

CYBER SECURITY - YOUTUBE

Loading...

CYBER SECURITY FUNDAMENTALS PROF MESSER - YOUTUBE

Loading...

DEEPLEARNING AI - YOUTUBE

Loading...

STANFORD UNIVERSITY - YOUTUBE

Loading...

NPTEL IISC BANGALORE - YOUTUBE

Loading...

NPTEL IIT MADRAS - YOUTUBE

Loading...

NPTEL HYDERABAD - YOUTUBE

Loading...

MIT News

Loading...

MIT News - Artificial intelligence

Loading...

The Berkeley Artificial Intelligence Research Blog

Loading...

Microsoft Research

Loading...

MachineLearningMastery.com

Loading...

Harward Business Review(HBR)

Loading...

Wharton Magazine

Loading...
My photo
Krishna Kishore Koney
View my complete profile
" It is not the strongest of the species that survives nor the most intelligent that survives, It is the one that is the most adaptable to change "

View krishna kishore koney's profile on LinkedIn

Monthly Blog Archives

  • ►  2025 (2)
    • ►  May (1)
    • ►  April (1)
  • ►  2024 (18)
    • ►  December (1)
    • ►  October (2)
    • ►  September (5)
    • ►  August (10)
  • ►  2022 (2)
    • ►  December (2)
  • ►  2021 (2)
    • ►  April (2)
  • ►  2020 (17)
    • ►  November (1)
    • ►  September (7)
    • ►  August (1)
    • ►  June (8)
  • ►  2019 (18)
    • ►  December (1)
    • ►  November (2)
    • ►  September (3)
    • ►  May (8)
    • ►  February (1)
    • ►  January (3)
  • ►  2018 (3)
    • ►  November (1)
    • ►  October (1)
    • ►  January (1)
  • ►  2017 (2)
    • ►  November (1)
    • ►  March (1)
  • ►  2016 (5)
    • ►  December (1)
    • ►  April (3)
    • ►  February (1)
  • ►  2015 (15)
    • ►  December (1)
    • ►  October (1)
    • ►  August (2)
    • ►  July (4)
    • ►  June (2)
    • ►  May (3)
    • ►  January (2)
  • ►  2014 (13)
    • ►  December (1)
    • ►  November (2)
    • ►  October (4)
    • ►  August (5)
    • ►  January (1)
  • ►  2013 (5)
    • ►  September (2)
    • ►  May (1)
    • ►  February (1)
    • ►  January (1)
  • ►  2012 (19)
    • ►  November (1)
    • ►  October (2)
    • ►  September (1)
    • ►  July (1)
    • ►  June (6)
    • ►  May (1)
    • ►  April (2)
    • ►  February (3)
    • ►  January (2)
  • ►  2011 (20)
    • ►  December (5)
    • ►  August (2)
    • ►  June (6)
    • ►  May (4)
    • ►  April (2)
    • ►  January (1)
  • ►  2010 (41)
    • ►  December (2)
    • ►  November (1)
    • ►  September (5)
    • ►  August (2)
    • ►  July (1)
    • ►  June (1)
    • ►  May (8)
    • ►  April (2)
    • ►  March (3)
    • ►  February (5)
    • ►  January (11)
  • ►  2009 (113)
    • ►  December (2)
    • ►  November (5)
    • ►  October (11)
    • ►  September (1)
    • ►  August (14)
    • ►  July (5)
    • ►  June (10)
    • ►  May (4)
    • ►  April (7)
    • ►  March (11)
    • ►  February (15)
    • ►  January (28)
  • ▼  2008 (61)
    • ►  December (7)
    • ►  September (6)
    • ►  August (1)
    • ▼  July (17)
      • HTML
      • System & Network Monitoring Tools
      • PHP
      • VBScript
      • Toos for Analyzing Web Server Logs
      • Regular Expressions
      • Python
      • Best of Java
      • gSoap Client through Http Proxy
      • CInternetSession INTERNET_OPEN_TYPE_PROXY through ...
      • SQL Injection Prevention Tools
      • SqlServer Overview
      • Oracle Overview
      • Software Freelancing Sites URLs
      • Regular Expression Engines - PCRE, Boost Regex, Ap...
      • Network Packet Analysis API
      • SAAS(Software as a Service) WebServices
    • ►  June (6)
    • ►  May (24)
  • ►  2006 (7)
    • ►  October (7)

Blog Archives Categories

  • .NET DEVELOPMENT (38)
  • 5G (5)
  • AI (Artificial Intelligence) (9)
  • AI/ML (4)
  • ANDROID DEVELOPMENT (7)
  • BIG DATA ANALYTICS (6)
  • C PROGRAMMING (7)
  • C++ PROGRAMMING (24)
  • CAREER MANAGEMENT (6)
  • CHROME DEVELOPMENT (2)
  • CLOUD COMPUTING (45)
  • CODE REVIEWS (3)
  • CYBERSECURITY (12)
  • DATA SCIENCE (4)
  • DATABASE (14)
  • DESIGN PATTERNS (9)
  • DEVICE DRIVERS (5)
  • DOMAIN KNOWLEDGE (14)
  • EDGE COMPUTING (4)
  • EMBEDDED SYSTEMS (9)
  • ENTERPRISE ARCHITECTURE (10)
  • IMAGE PROCESSING (3)
  • INTERNET OF THINGS (2)
  • J2EE PROGRAMMING (10)
  • KERNEL DEVELOPMENT (6)
  • KUBERNETES (19)
  • LATEST TECHNOLOGY (18)
  • LINUX (9)
  • MAC OPERATING SYSTEM (2)
  • MOBILE APPLICATION DEVELOPMENT (14)
  • PORTING (4)
  • PYTHON PROGRAMMING (6)
  • RESEARCH AND DEVELOPMENT (1)
  • SCRIPTING LANGUAGES (8)
  • SERVICE ORIENTED ARCHITECTURE (SOA) (10)
  • SOFTWARE DESIGN (13)
  • SOFTWARE QUALITY (5)
  • SOFTWARE SECURITY (23)
  • SYSTEM and NETWORK ADMINISTRATION (3)
  • SYSTEM PROGRAMMING (4)
  • TECHNICAL MISCELLANEOUS (31)
  • TECHNOLOGY INTEGRATION (5)
  • TEST AUTOMATION (5)
  • UNIX OPERATING SYSTEM (4)
  • VC++ PROGRAMMING (44)
  • VIRTUALIZATION (8)
  • WEB PROGRAMMING (8)
  • WINDOWS OPERATING SYSTEM (13)
  • WIRELESS DEVELOPMENT (5)
  • XML (3)

Popular Posts

  • Observer Pattern - Push vs Pull Model
  • AI Agent vs AI Workflow
  • Microservices Architecture ..
  • SSCLI(Shared Source Common Language Infrastructure)

My Other Blogs

  • Career Management: Invest in Yourself
  • Color your Career
  • Attitude is everything(in Telugu language)
WINNING vs LOSING

Hanging on, persevering, WINNING
Letting go, giving up easily, LOSING

Accepting responsibility for your actions, WINNING
Always having an excuse for your actions, LOSING

Taking the initiative, WINNING
Waiting to be told what to do, LOSING

Knowing what you want and setting goals to achieve it, WINNING
Wishing for things, but taking no action, LOSING

Seeing the big picture, and setting your goals accordingly, WINNING
Seeing only where you are today, LOSING

Being determined, unwilling to give up WINNING
Gives up easily, LOSING

Having focus, staying on track, WINNING
Allowing minor distractions to side track them, LOSING

Having a positive attitude, WINNING
having a "poor me" attitude, LOSING

Adopt a WINNING attitude!

Total Pageviews

who am i

My photo
Krishna Kishore Koney

Blogging is about ideas, self-discovery, and growth. This is a small effort to grow outside my comfort zone.

Most important , A Special Thanks to my parents(Sri Ramachandra Rao & Srimathi Nagamani), my wife(Roja), my lovely daughter (Hansini) and son (Harshil) for their inspiration and continuous support in developing this Blog.

... "Things will never be the same again. An old dream is dead and a new one is being born, as a flower that pushes through the solid earth. A new vision is coming into being and a greater consciousness is being unfolded" ... from Jiddu Krishnamurti's Teachings.

Now on disclaimer :
1. Please note that my blog posts reflect my perception of the subject matter and do not reflect the perception of my Employer.

2. Most of the times the content of the blog post is aggregated from Internet articles and other blogs which inspired me. Due respect is given by mentioning the referenced URLs below each post.

Have a great time

My LinkedIn Profile
View my complete profile

Failure is not falling down, it is not getting up again. Success is the ability to go from failure to failure without losing your enthusiasm.

Where there's a Will, there's a Way. Keep on doing what fear you, that is the quickest and surest way to to conquer it.

Vision is the art of seeing what is invisible to others. For success, attitude is equally as important as ability.

Favourite RSS Syndications ...

Google Developers Blog

Loading...

Blogs@Google

Loading...

Berklee Blogs » Technology

Loading...

Martin Fowler's Bliki

Loading...

TED Blog

Loading...

TEDTalks (video)

Loading...

Psychology Today Blogs

Loading...

Aryaka Insights

Loading...

The Pragmatic Engineer

Loading...

Stanford Online

Loading...

MIT Corporate Relations

Loading...

AI at Wharton

Loading...

OpenAI

Loading...

AI Workshop

Loading...

Hugging Face - Blog

Loading...

BYTE BYTE GO - YOUTBUE

Loading...

Google Cloud Tech

Loading...

3Blue1Brown

Loading...

Bloomberg Originals

Loading...

Dwarkesh Patel Youtube Channel

Loading...

Reid Hoffman

Loading...

Aswath Damodaran

Loading...