About the Author

Chris Shiflett is an author and speaker who leads the web application security practice at OmniTI.

php|architect Magazine

Tue, 28 Feb 2006 at 21:11:37 GMT
3 Comments
References

I just got through reading the latest issue of php|architect - always a good read.

Sean starts by announcing the departure of Marcus Baker as a columnist. I've always enjoyed Marcus's perspective on things, primarily because it's different. Luckily, Sean follows this announcement with very good news - Jeff Moore is going to take over the column. I've been reading Jeff's blog for the past year or two, and I'm really looking forward to reading more from him in future issues.

Marco has an interesting article on applying the poka-yoke concept to input filtering and output escaping. (A poka-yoke is a behavior-shaping constraint.) A few of the principles he describes mirror design principles in one of the Zend Framework components, but more on that soon. :-)

In this month's Security Corner, I pull together a few topics I've been discussing in my blog, all related to character encoding:

I'm also announcing a short break from the column:

I want to give my sincere thanks to Ilia Alshanetsky, who has agreed to take over Security Corner for a few months. It has been my pleasure to be the author of this column for the past few years, and I hope a short break can give me renewed enthusiasm and a fresh perspective. I also think it's valuable to hear from different sources of security expertise. Ilia is a well-known PHP expert and educator, and I'm confident that you'll learn a lot from what he has to say.

About This Post

php|architect Magazine was posted on Tue, 28 Feb 2006 at 21:11:37 GMT.

3 Comments

1. Matthew Delmarter said:

Quote: "A few of the principles he describes mirror design principles in one of the Zend Framework components, but more on that soon."

How soon would that be Chris?? :-)
Tue, 28 Feb 2006 at 22:41:06 GMT Link

2. Chris Shiflett said:

Very soon. :-)

(Sorry I can't be more specific.)
Wed, 01 Mar 2006 at 15:16:33 GMT Link

3. Jeff Moore said:

Thanks Chris. The first has been sent off already & I'm working on the second. I hope they don't disappoint.
Wed, 01 Mar 2006 at 23:55:44 GMT Link

Ash Searle wrote:: It might be worth changing your example code from using htmlentities to htmlspecialchars. Runn...; Posted in Allowing HTML and Preventing XSS
Chris Shiflett wrote:: Hi Steve, According to the NYT Manual of Style and Usage, it's push-up: Most but not all co...; Posted in Miscellaneous
steve wrote:: so, is it push up, pushup or push-up? just curious... --steve --www.hundredpushups.com; Posted in Miscellaneous
Walter Lawless wrote:: It's sad to think that even now, nearly 4 years after this was originally written, that there are...; Posted in
Asanka Dewage wrote:: I've been a Mac user for over a year now and I didn't know about the [say] command! What a nifty ...; Posted in Miscellaneous