Archive for March, 2006

CW3 - March 30, 2006

This week, CompiledWeekly gets you started with the Nullsoft Install System (NSIS) and how to handle PHP magic quotes. Plus software application of the week KeePass and web site of the week is the Javascript sectiono of Codelifter.com


Compiled Weekly #3 Now Available

This week, CompiledWeekly gets you started with the Nullsoft Install System (NSIS) and how to handle PHP magic quotes. Plus software application of the week KeePass and web site of the week is the Javascript sectiono of Codelifter.com

Check it out

CW2 - March 23, 2006

This week, CompiledWeekly gets you started with wxWidgets and Visual C++ 2005 Express Edition and explains what is E-mail injection and how to prevent it. Plus software application of the week WinMerge and web site of the week www.codeproject.com.


Podcast #2 March 23, 2006

Compiled Weekly Podcast #2 is now available.

This week, we gets you started with wxWidgets and Visual C++ 2005 Express Edition and explains what is E-mail injection and how to prevent it. Plus software application of the week WinMerge and web site of the week www.codeproject.com.

http://www.compiledweekly.com/podcast/

E-mail Injection

E-mail injection is caused when form fields entered by hackers who add unexpected lines of text to the from and/or subject lines of your form.

For instance, many web sites add a contact us page to their web site to allow a web visitor an opportunity to send comments and suggestions. Usually these forms ask the user for a subject and an E-mail address. The risk of injection occurs when these fields are placed into the headers of the E-mail sent from the script to the E-mail address assigned to the contact submission.

The injection works when the hacker adds extra lines to the field before sending it to your script. IF your script does not check the E-mail address entered then the injection will find its way to the PHP mail() function. Then the rest is history.

The PHP mail() function takes multi lines in the to field and may treat them as additional lines for the headers of the E-mail message.

Click here http://securephp.damonkohler.com/index.php/Email_Injectionfor some better detailed examples of E-mail injections.

You can prevent E-mail injections in a number of ways. The easiest is to only place data that is submitted by the user in the message body of the E-mail. If you want your script to automatically generate a response message to the user, then you will need to verify the E-mail address entered is valid and does not contain additional lines of information.

Click here http://www.bl0g.co.uk/?d=060214 for an alternative method for protecting your script from E-mail injections.

CW1 - March 16, 2006

Welcome to the first podcast of Compiled Weekly. Today’s podcast I introduce myself, promote the PodcasterNews.com podcast network, review the open source Ravencore web control panel, recommend the SciTE text editor, and cover Cross Site Scripting XSS and how to prevent it.


PodcastPromos.com Goes Live

The new PodcastPromos.com web site is now online!

The PodcastPromos.com web site features the RawVoice Generator, the first turnkey network podcasting solution.

Display Folder Size in Windows Explorer Details View

Ever wanted to know how much data is stored in a particular folder when browsing your computer? Use FolderSize:

http://foldersize.sourceforge.net/

It also reports file sizes, so you could simply delete the filesize column in Windows Explorer Details View and put ‘Folder Size’ in its place.

Free copy of Visual Studio 2005 Standard

If you like to develop software in previous versions of Microsoft’s Visual Studios then this is the promotion for you!

Listen to 3 podcasts and be qualified for a free copy of Visual Studio 2005 Standard.

https://www.learn2asp.net/SignIn.aspx

Blubrry player!