BVS Banner

Archive for the ‘Web Applications’ Category

45+ New jQuery Techniques For Good User Experience

Saturday, October 3rd, 2009

JavaScipt libraries have made huge leaps and bounds in helping developers write code and develop products more quickly. jQuery is one of the most popular JavaScript frameworks, with powerful tools that improve the user’s interaction with Web applications. jQuery has an additional advantage in that it allows developers to select elements on a page using CSS-like syntax.

To help you take it up a notch, we share below some methods that can help you give visitors to your website an amazing user experience. Here are over 45 impressive jQuery plug-ins and techniques that have been recently created and that could make the development of your next website an easier and more interesting experience than the last.

You may want to take a look at the following related posts:

(more…)

VN:F [1.8.8_1072]
Rating: 5.0/5 (2 votes cast)
VN:F [1.8.8_1072]
Rating: +2 (from 2 votes)
Share and Enjoy:
  • Print
  • Digg
  • del.icio.us
  • Facebook
  • Google Bookmarks
  • LinkedIn
  • Reddit
  • RSS
  • StumbleUpon
  • Technorati
  • Twitter
  • Twitthis
  • Yahoo! Bookmarks
  • Share/Save

PHP $_SERVER variables are not safe for use in forms, links

Wednesday, September 23rd, 2009

A common security mistake I see WordPress plugin authors (and PHP coders in general) make is using $_SERVER['PHP_SELF'] or $_SERVER['REQUEST_URI'] as the action of a form or part of an anchor’s href attribute. This is not safe to do, and opens your code up to XSS (cross-site scripting) exploits.

Common example:

<form action="<?php echo $_SERVER['PHP_SELF']; ?>">

Another example:

<a href="<?php echo $_SERVER['PHP_SELF']' ?>?foo=bar">link title</a>

Here are my two rules regarding $_SERVER['PHP_SELF'] or $_SERVER['REQUEST_URI'] in forms:

  • Do not use them
  • If you use one of them, escape it with esc_url()

(more…)

VN:F [1.8.8_1072]
Rating: 2.7/5 (3 votes cast)
VN:F [1.8.8_1072]
Rating: +1 (from 3 votes)
Share and Enjoy:
  • Print
  • Digg
  • del.icio.us
  • Facebook
  • Google Bookmarks
  • LinkedIn
  • Reddit
  • RSS
  • StumbleUpon
  • Technorati
  • Twitter
  • Twitthis
  • Yahoo! Bookmarks
  • Share/Save
Freelance Web Developers | Entries (RSS) | and Comments (RSS)