Auf den Mann sollte man hören:

here is a summary of 8 steps any web developer can take to improve their page code, including substeps for 2 of the 8.

Zusammengefasst ergibt das:

1. Validate your web pages!
2. Eliminate layout tables and spacer GIFs
3. Dump meta keywords
4. Better class names
5. Drop excess large blocks of blank lines
6. Use ‘rel’ and ‘hreflang’ for translations
7. Trim commented markup
8. +hCard

Ein neues PHP security tool: Spike phpSecAudit

This is a new Open Source tools based on the popular RATS C based auditing tool.

Schon ein wenig älter, aber egal: Brad Neubergs Post über AJAX History Libraries.

The following major issues affect all of the AJAX history libraries I have evaluated, other than the Really Simple History framework.

First, some history frameworks, such as Dojo, use JavaScript objects to store an internal representation of the state of an AJAX application’s history; unfortunately, browsers completely clear out all JavaScript objects when a user leaves a page.(…)

Another bug that affects many frameworks is that they do not differentiate between the first time a page truly loads versus “fake” page loads.(…)

Finally, I have not seen an AJAX history framework that will detect when a user has manually entered a new hash location in Internet Explorer.

PHP-O-Lait ist eine Json / Json-Rcp Implementierung in PHP oder wie es auf der Website beschrieben wird:

PHP-O-Lait, in two boiler-plate lines of code (three if you include the ‘require_once’) provides a transparent bridge between server-side PHP methods and client-side JavaScript code.

Gerade ein wenig rumprobiert und ich bin sehr angetan.

Gerade im PHPmagazin gefunden: server2go.

Server2Go is a Webserver that runs out of box without any installation. That means it is a webserver that can run directly from cdrom, usb stick or from any folder on harddisk. Server2Go allows you to create a standalone working web site or PHP application on a CD-ROM. Server2Go was primary developed for the usage on CD-ROM but there is no problem use it from other drives too.

Leider zur Zeit nur für Windows.

Mightyseek hat die Folge Cross Site Scripting (XSS) Part 1 aus der Hands On Series veröffentlicht.

Nicht zu advanced aber sehr anschaulich, insbesondere die Seite zum Testen.