CSCI 554 (581) - Web Architecture and Programming

Instructor: Tobin Maginnis

Web Standards and Tutorials http://www.w3.org
http://www.w3schools.com/
XHTML Validation http://www.w3.org/QA/Tools/#validators
Javascript Validation http://code.google.com/closure/compiler/

PHP and MySQL Programming Guides, Tutorials, & Articles http://www.phpdynamic.com/
PHP Tutorial: Installation and The Basics (see related for more tutorials)
http://www.youtube.com/watch?v=afgyNp5HueQ
20 Online Resources to Learn PHP
AJAX Tutorial 1 - Introduction
http://www.youtube.com/watch?v=dtrWHL9Asec
http://www.youtube.com/watch?v=lX5e0_3hvOw&feature=related

LAMP, XAMPP, and WAMP Linux
http://www.ubuntu.com/
Apache
http://www.apache.org
PHP
http://www.php.net
MySQL
http:www.mysql.com
phpMyAdmin http://www.phpmyadmin.net/home_page/index.php
MySQL Workbench http://www.mysql.com/products/workbench/

XAMPP
http://www.apachefriends.org/en/xampp.html
Linux version http://www.apachefriends.org/en/xampp-linux.html
Windows version http://www.apachefriends.org/en/xampp-windows.html
Mac OS X version http://www.apachefriends.org/en/xampp-macosx.html
Solaris version http://www.apachefriends.org/en/xampp-solaris.html

Windows Apache MySQL and PHP (WAMP)
WampServer2.0i.exe
http://www.wampserver.com/en

Browsers
http://www.mozilla.com/en-US/firefox
http://www.google.com/chrome
IE6 CSS limitations

Textbook Source Code PHP 6 and MySQL 5 for Dynamic Web Sites Textbook Homepage
http://www.dmcinsights.com/phpmysql3/
scripts_named.zip
layout.css.zip
style.css.zip
sql_utf8.sql.zip
ch_17_images.zip

Tips and Hints 30 Web Developer Cheat Sheets http://www.webhostingsearch.com/articles/30-web-developer-cheat-sheets.php
Google Cheat Sheets http://hacknmod.com/hack/the-google-cheat-sheets-everything-you-need-to-know/
11 ways to speed up your website
140 CSS Point Font Example

What is a PHP Framework? http://www.noupe.com/php/discussing-php-frameworks.html
40 Invaluable PHP Tutorials and Resources http://net.tutsplus.com/articles/web-roundups/40-invaluable-php-tutorials-and-resources/
http://net.tutsplus.com/tutorials/php/9-useful-php-functions
http://devsnippets.com/article/10-essential-php-code-snippets.html

Gordon: An open source Flash runtime written in pure Javascript tobeytailor-gordon-1e42f93.tar • http://github.com/tobeytailor/gordon

Ajax and Javascript Libraries http://technotarget.com/ajax-dhtml-and-javascript-libraries/ • http://www.techfeedr.com/blog/2010/02/10-most-useful-jquery-plugins/
Dynamic Unobtrusive Javascript Progress/Percentage Bar http://www.bram.us/projects/js_bramus/jsprogressbarhandler

Inject this Javascript into the URL bar of a displayed Web page. The browser will add the Javascript to the Web page and it will show the passwords in plain text when the cursor is placed over the masked password.
javascript:(function() { var inputs, input; inputs = document.evaluate( '//input[@type="password"]', document, null, XPathResult.UNORDERED_NODE_SNAPSHOT_TYPE, null); if(!inputs.snapshotLength) return; for(var i = 0; i < inputs.snapshotLe ngth; i++) { input = inputs.snapshotItem(i); input.addEventListener('mouseover', function(event) { this.type = 'text'; }, false); input.addEventListener('mouseout', function(event) { this.type = 'password'; }, false); } })();

Easy way to create empty Web pages into which URLs may be pasted.
Drag any URL icon to the Bookmarks Toolbar. Right click the bookmark icon and select Properties. Change the "Location" entry to "about:blank" and delete the other entries. Click OK. Now any tab can be cleared by clicking the blank icon; moreover, the back arrow can be used to return to pages that were visited earlier.

Security Code Used in Chinese Attack on Google "ccc[1].ht_"
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0249
"Use-after-free" vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, as exploited in the wild in January 2010.
Wepawet analyzes Flash, Javascript, and PDF web-based malware.
http://wepawet.iseclab.org/
http://wepawet.iseclab.org/view.php?hash=1aea206aa64ebeabb07237f1e2230d0f&type=js
Script creates objects within the rendered page, specifically the "comment" HTML element which isn't rendered and retains a pointer to the element. Script deletes the element it created, but holds on the the pointer. Via the pointer, script updates element memory area with execute command and whatever is in the memory area is executed.
As with most targeted attacks, the intruders gained access to an organization by sending a tailored attack to one or a few targeted individuals. We suspect these individuals were targeted because they likely had access to valuable intellectual property. These attacks will look like they come from a trusted source, leading the target to fall for the trap and clicking a link or file. That is when the exploitation takes place, using the vulnerability in Microsoft's Internet Explorer.
Aurora is example of a highly customized attack is known as a Advanced Persistent Threat (APT) and primarily seen by governments. With pinpoint accuracy they deliver their deadly payload and once discovered it is too late.
Operation Aurora is changing the cyberthreat landscape once again. Demonstrating that companies of all sectors are lucrative targets. Operation Aurora looks to be a coordinated attack on many high profile companies targeting their intellectual property. Like an army of mules withdrawing funds from an ATM, this malware enabled the attackers to quietly suck the crown jewels out of many companies while people were off enjoying their December holidays. Without question this attack was perpetrated during a period of time that would minimize detection.

Top 10 vulnerabilities in web applications http://securitytube.net/OWASP-Top-10-Detailed-Primer-video.aspx

Top 25 Most Dangerous (Insecure) Programming Mistakes


Web Frameworks Web frameworks are made up of libraries for database access, HTML templating, and session management.

http://en.wikipedia.org/wiki/Web_framework
http://en.wikipedia.org/wiki/List_of_web_application_frameworks
http://solarphp.com/