About the Author

Chris Shiflett

Chris Shiflett is an author and speaker who leads the web application security practice at OmniTI.


Belated php|works Recap

I've been traveling non-stop since php|works, so I haven't had a chance to reflect on the conference, what I learned, who I met, and things like that. (Zak has been doing a good job of this lately, and I'd like to follow his lead.) I've probably forgotten more than I remember, but this is my recap.

I had the pleasure of meeting a number of people for the first time:

I presented The Truth about XSS and Agile PHP Testing, both of which went pretty well. I enjoy the cross-site scripting (XSS) talk, because it gives me a chance to highlight some new trends in web application security as well as discuss some of my current research. (If you're interested in keeping up with the latest developments, I highly recommend RSnake's blog.) I wasn't really in the mood to give my testing talk, so I spiced it up a bit by adding some information about security testing. I think everyone appreciated that, as it made the talk more fun.

After my talks, Cal Evans interviewed me for the Zend Developer Zone. His first question was how I became interested in computers, which is the same question Nat asked me for his Burn In series on O'Reilly Radar. I was too busy at the time to respond to Nat's request, so it was nice to get a chance to reminisce with Cal about my Commodore 64 and such. I'll let you know when the interview gets posted.

Other interesting highlights for me were the Zend PHP 5 Certification panel and the Great PHP Trivia Tournament. The latter was a trivia contest with questions like:

  • Spell Andrei's last name.
  • Name the King of PECL and the PECL Princess.
  • Who started the PEAR project?
  • When did Rasmus first announce PHP?

There were also plenty of crazy PHP syntax questions that seemed more like a showcase of PHP's oddest behavior than trivia questions, but I guess that's what makes it trivia. :-) Regardless, this was a fun event that everyone seemed to enjoy, and the winner walked away with a new Apple MacBook. Hopefully Sean and the other folks at php|architect will make this an annual event.

My friend and colleague Wez gave his PDO talk as well as one on mail that became known as "Not PDO" among conference attendees. :-) Sadly, I had to miss the latter, because I had an early flight on Friday, but I ended up spending almost 12 hours at the Toronto airport after four consecutive flights to New York were cancelled - not a good way to end my trip, but I enjoyed my time in Toronto and hope to be back next year.

About This Post

Belated php|works Recap was posted on Sun, 24 Sep 2006 at 04:29:55 GMT.

0 Comments

Post A Comment

Personal Details and Comment

Style Guide

Line breaks are converted to paragraphs. Also use:

  • <a href="" title="">text</a>1
  • <em>text</em>
  • <blockquote><p>text</p></blockquote>
  • <code>2  <?php  if ($foo) {      $foo = TRUE;  }  ?></code>
  1. Note: <code> can be used inline (e.g. in paragraphs) or in a block as shown. Include whitespace and newlines in blocks.

Please enter Chris (my first name) below. This is a primitive spam prevention technique, and I apologize for the inconvenience.

Preview and Submit

Upcoming Talks

PHP Appalachia

11 - 14 Oct 2008

At Big Bear Lodge, Gatlinburg, Tennessee.

php|works / PyWorks

12 - 14 Nov 2008

At Sheraton Gateway Hotel Atlanta Airport, Atlanta, Georgia.

New Comments

Chris Shiflett wrote:

Miguel, read the post again. PHP 4.4.9 is the final release of PHP 4.

Posted in End of Life for PHP 4
Miguel Palazzo wrote:

I think you're wrong. PHP 4.4 is DEAD, that's so right, because they just released 4.4.9, and you...

Posted in End of Life for PHP 4
alikim wrote:

Hi, Thanks for the article! Tell me please if it's enough to use just session_start(); se...

Posted in
Wayne wrote:

Hi ZX, When taking in data, you should always check to see if magic_quotes is enabled. If it i...

Posted in addslashes() Versus mysql_real_escape_string()
Chris Shiflett wrote:

Thanks, Brandon. I'm glad you liked the talk. Maybe some parts of it would be interesting to some...

Posted in ZendCon

Browse Comments