Tara Andrei

[theGlowfish] – codename for my new CMS

admin — Sun, 18 Jul 2010 17:46:20 +0000

It’s alive!!! Finally I have enough time to finis a first pre-alpha release of my CMS (code name theGlowfish).

So what a hack is theGlowfish ? Well theGlowfish is an CMS ( or in long form is an content management system ), an application that allows user to administrate the content of the website without having to bother about how the thinks are done. Content can be simple text, photos, movies, documents and anything that you can imagine.

Why a pre-alpha release ? Why not an beta RC ? The answer is very simple: there are some modules under development ( deployment, update and design module) that will be integrated in application core.

Why should I use it ? There are a lot of advantages of using theGlowfish from each point of view:

Simple user:

Clean, simple and intuitive administration panel.
Multiple tabs allowing you to do more stuff in parallel (for instance editing an article and creating a new menu).
Treat separate the public content, private content (for registered users)
Multiple languages native support.
Mobile device detection, allowing to be displayed a more simple design, small images, etc.
Simple and elegant content editor

Designer:

Creating a theme for theGlowfish is very simple all you have to do is to create an HTML as you are used and add some special tags called positions that indicate to the template engine that there must be displayed something. The form of a position is {position name=’name’}. Let see an basic example:

{$TEMPLATE_PATH}/css/style.css” rel=”stylesheet” />
{$TEMPLATE_PATH}/css/buttons.css” rel=”stylesheet” />

{position name=’head’}

{position name=’Menu’ }

{position name=’Content’ }

In the example above are defined 3 positions, to each position it can be associated items to be displayed, for instance an menu or content of a page. Another simple modifier is the {$TEMPLATE_PATH} , the template engine will replace the {$TEMPLATE_PATH} with the correct relative path of the resource (image, file). There are more other special tags with more magic, the template engine used extends Smarty.

Coder:

modularity
plugin support
MVC architecture
independent of database type

History ? I get sick of trying to develop new features for some well known “classic” CMS. The weakness of the most free CMS are: mixing the code with the presentation or the aspect of the website,bad understanding an utilization of OOP (object orientated programming), database dependency, so trying to extend or change something is very unproductive ( in non academic terms ..a pain in the ass ). The story of theGlowfish has started couple of months ago on a rainy day with me scratching some core UML diagrams of the new CMS on an old piece of paper. If the first version wasn’t flexible enough, the second was too generic even for me ( if you would know me, I am the fan of generic programing ). The 3′rd version combined the simplicity of first and the flexibility of second was the perfect one.

Cool… so where can I try theGlowfish ?

demo page: http:\\test.andreitara.com/

admin page: http:\\test.andreitara.com/administrator/

user: admin

password: admin

Do you like it ? Want or participate ?

I have big plans and a lot o ideas for my CMS, the problem is that I don’t have time to do all the work by myself (software design, implementation, user interface, graphics , testing and debug) . If you are interested you can help me with:

test and debug
implementation (PHP, Javascript and MySql)
design and graphics
spread the idea (tell to all you’re friends about theGlowfish )
tell me about the things that can be improved.

The magic of mode_rewrite

admin — Tue, 08 Jun 2010 20:00:35 +0000

There’s a long time in the galaxy since I haven’t post on my blog and now, finally here I am, posing a new article. Today I will speak about htaccess mod_rewrite. Well despite the tons of examples and docs, mod_rewrite is voodoo. Damned cool voodoo, but still voodoo.

The majority of the web servers, that are based on Apache, have the mod_rewrite enabled so you don’t have to get dirty to install it on the hosting server.But anyone of those that are developing web application based on Apache server, using PHP have a local installed server therefore mode_rewrite is also necessary in testing process.

Installing mod_rewrite :

On Linux: edit the Apache configuration file ( httpd.conf ) and uncomment LoadModule rewrite_module modules/mod_rewrite.so (remove the pound ‘#’ sign from in front of the line) . Also be sure that the lines containing ClearModuleList and AddModule mod_rewrite.c are uncommented . Now you can create the famous .htacess file on the root of you website and start adding your code.
On Windows: well as we are expecting, things are a bit more complicated because on Windows you cannot create a file that doesn’t have a name (.htacess is a file that only have an extension). For first just uncomment the same lines as in the Linux example. Now you have to tell Apache to use you’re custom file instead of .htacess file, so search in the configuration file (httpd.conf) for the following lines:

# AccessFileName: The name of the file to look for in each directory # for additional configuration directives. See also the AllowOverride
# directive.
#
AccessFileName .htaccess (change the .htaccess to [name].htaccess where name can be whatever what you wish )

You can escape this step and create the .htacess file even on windows, actually the restriction of creating a file without name is an restriction of Windows Explorer is not an restriction of the operating system . Open the command (cmd), go to the root folder of the website and type copy con .htacess and press Ctrl+Z. well… that’s all folks.

Maybe you are asking yourself about mod_rewrite and where to use it, well the short and simple answer is : for simplifying the URL of a website, simpler/shorter URL are easier to write easier to remember. For example instead of having an URL like this www.example.com?id_product=23123&color=23 you can have something like www.example.com/iphone-white. Mod_rewrite basicly make use of regular expression to rewrite an specified URL.

When to use it: mod_rewrite can be used in many circumstances where you may want to rewrite the an URL, also you can create dynamically virtual hosting entry; practically mode_rewrite is an “Swiss Army Knife”.

When not to use it: well as I have mentioned before mode_rewrite make use of regular expression, and evaluating regular expression takes time, use memory and the global performance of the server is decreasing.

I will provide you some basic example of using mode_rewrite. .htaccess file should begin with:

Options +FollowSymLinks
RewriteEngine On
RewriteBase /

Redirecting
Redirect /index.php http://www.example.com/ -this example redirect the current site to www.example.com
RedirectMatch (.*)\.gif http://images.example.com$1.png -In this example, we’ve taken all of our GIF files, converted them to PNG files, and
moved them to another server

Require www

Options +FollowSymLinks
RewriteEngine On
RewriteBase /
RewriteCond %{HTTP_HOST} !^www\.example\.com$ [NC]
RewriteRule ^(.*)$ http://www.example.com/$1 [R=301,L]

Denying access to a folder except of fopen file from php

RewriteEngine On
RewriteBase /
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /([^/]+)/.*\ HTTP [NC]
RewriteRule .* - [F,L]

Limit access during some hours

Options +FollowSymLinks
RewriteEngine On
RewriteBase /
# If the hour is 7
RewriteCond %{TIME_HOUR} ^7$
RewriteRule ^.*$ - [F,L]

These samples are here just to open your appetite for mode_rewrite. Practically this tool can be used in any other ways,yes… the limit is your imagination.

Protecting HTML source code from being stolen

admin — Mon, 01 Mar 2010 19:01:45 +0000

A lot of people are asking me how they can protect the source code of HTML of they’re site from being seen or worst being stolen. Well, the simple and short answer is that you can’t everything that the browser loads to render it can be seen by the user. The simplest method to protect you’re source HTML code is never to publish it on Internet .

Well seriously, there are some meta methods to protect you’re HTML source from being seen by a common user not from an expert user.I will enumerate some methods starting with the simplest.

The first method, maybe the most stupid one but used by many people (stupid ideas work for stupid people ) is putting a lot of empty line in front of HTML source. If the user looks at the source will see just empty white page. But if he scroll down on bottom of the page he will see the source.
The second method is to disable right click on page. To do that just take a look at next code://Disable right click script III- By Renigade (renigade@mediaone.net)
//For full source code, visit http://www.dynamicdrive.com

var message=”";
///////////////////////////////////
function clickIE() {if (document.all) {(message);return false;}}
function clickNS(e)
{
if(document.layers||(document.getElementById&&!document.all))
{
if (e.which==2||e.which==3)
{(message);return false;}
}
}

if (document.layers)
{
document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;
}
else
{
document.onmouseup=clickNS;document.oncontextmenu=clickIE;
}

document.oncontextmenu=new Function(”return false”)
// –>

Now that the user can do right click->show page source, you have achieved a good protection method, if you user is a old granny that doesn’t know to use (Ctrl+U) shortcut or Edit->View page soure.
The third method is to use javascript to hide the HTML content. A short example is presented next:
Let’s suppose that the page has the following code:

Sample HTML-hide sorece code

Blah blah blah

Now what we have to do next is to “encrypt” this content, go to http://www.swingnote.com/tools/texttohex.php or a similar page and convert the text source code to an hexa representation. You will obtain something similar to this:
%3c%21%44%4f%43%54%59%50%45%20%68%74%6d%6c%20%50%55%42%4c%49%43%20%5c%22%2d%2f%2f%57%33%43%2f%2f%44%54%44%20%58%48%54%4d%4c%20%31%2e%30%20%54%72%61%6e%73%69%74%69%6f%6e%61%6c%2f%2f%45%4e%5c%22%20%5c%22%68%74%74%70%3a%2f%2f%77%77%77%2e%77%33%2e%6f%72%67%2f%54%52%2f%78%68%74%6d%6c%31%2f%44%54%44%2f%78%68%74%6d%6c%31%2d%74%72%61%6e%73%69%74%69%6f%6e%61%6c%2e%64%74%64%5c%22%3e%20%3c%68%74%6d%6c%20%78%6d%6c%6e%73%3d%5c%22%68%74%74%70%3a%2f%2f%77%77%77%2e%77%33%2e%6f%72%67%2f%31%39%39%39%2f%78%68%74%6d%6c%5c%22%3e%20%3c%68%65%61%64%3e%20%3c%6d%65%74%61%20%68%74%74%70%2d%65%71%75%69%76%3d%5c%22%43%6f%6e%74%65%6e%74%2d%54%79%70%65%5c%22%20%63%6f%6e%74%65%6e%74%3d%5c%22%74%65%78%74%2f%68%74%6d%6c%3b%20%63%68%61%72%73%65%74%3d%75%74%66%2d%38%5c%22%20%2f%3e%20%3c%74%69%74%6c%65%3e%53%61%6d%70%6c%65%20%48%54%4d%4c%2d%68%69%64%65%20%73%6f%72%65%63%65%20%63%6f%64%65%3c%2f%74%69%74%6c%65%3e%20%3c%2f%68%65%61%64%3e%20%20%3c%62%6f%64%79%3e%20%09%42%6c%61%68%20%62%6c%61%68%20%62%6c%61%68%20%3c%2f%62%6f%64%79%3e%20%3c%2f%68%74%6d%6c%3e

The page is the same but now has a different representation that is strange to a common user but remember that this is a meta protection method an advanced user can and will do the reverse method to obtain you’re source.
The next step is to create the “protected” page, create a new HTML document and add the next code:

As you can see all we are doing is to use javascript to write the content (document.write method).
!!! Important : if user has the javascript disabled he will not see anything because the code will not execute, therefore will be nothing displayed. Also remember that most of searchengine as Google or Yahoo crawl the web in text mode, remember that javascript is luxury not a necessity.
Now is time to get serious and speak about some more advanced, a little bit harder to break (not impossible to break), technique to keep you HTML source protected.The base idea is to encrypt the content of the HTML page, this time really encryption . Let imagine a function for encryption this time a simple one that is using xor logic function to achieve encryption. The code to do that is showed next:
//Encryptionfunction encrypt(text,key){

var rez=new Array(text.length);
for(i=0;i rez[i]=text.charCodeAt(i) ^key.charCodeAt(i%key.length);
}
return rez;
}

//Decryption

function decrypt(text,key){
var rez=”";
for(i=0;i rez+=String.fromCharCode(text[i] ^key.charCodeAt(i%key.length));

}
return rez;
}

Using the functions in this form won’t help to much because the user will see clear what is about, so I am going to obfuscate the code (if you don’t know what is that google it ). Now the code looks not so friendly :

eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!”.replace(/^/,String)){while(c–){d[c.toString(a)]=k[c]||c.toString(a)}k=[function(e){return d[e]}];e=function(){return’\\w+’};c=1};while(c–){if(k[c]){p=p.replace(new RegExp(’\\b’+e(c)+’\\b’,'g’),k[c])}}return p}(’8 c(2,4){9 3=d b(2.5);7(1=0;1<2.5;1++){3[1]=2.6(1)^4.6(1%4.5)}a 3}8 f(2,4){9 3=”";7(1=0;1<2.5;1++){3+=e.g(2[1]^4.6(1%4.5))}a 3}’,17,17,’|i|text|rez|key|length|charCodeAt|for|function|var|return|Array|encrypt|new|String|decrypt|fromCharCode’.split(’|'),0,{}))

The next step is to convert you’re page in hexa as showed previously in this post, suppost that we are using the same page the hexa will be:

%3c%21%44%4f%43%54%59%50%45%20%68%74%6d%6c%20%50%55%42%4c%49%43%20%5c%22%2d%2f%2f%57%33%43%2f%2f%44%54%44%20%58%48%54%4d%4c%20%31%2e%30%20%54%72%61%6e%73%69%74%69%6f%6e%61%6c%2f%2f%45%4e%5c%22%20%5c%22%68%74%74%70%3a%2f%2f%77%77%77%2e%77%33%2e%6f%72%67%2f%54%52%2f%78%68%74%6d%6c%31%2f%44%54%44%2f%78%68%74%6d%6c%31%2d%74%72%61%6e%73%69%74%69%6f%6e%61%6c%2e%64%74%64%5c%22%3e%20%3c%68%74%6d%6c%20%78%6d%6c%6e%73%3d%5c%22%68%74%74%70%3a%2f%2f%77%77%77%2e%77%33%2e%6f%72%67%2f%31%39%39%39%2f%78%68%74%6d%6c%5c%22%3e%20%3c%68%65%61%64%3e%20%3c%6d%65%74%61%20%68%74%74%70%2d%65%71%75%69%76%3d%5c%22%43%6f%6e%74%65%6e%74%2d%54%79%70%65%5c%22%20%63%6f%6e%74%65%6e%74%3d%5c%22%74%65%78%74%2f%68%74%6d%6c%3b%20%63%68%61%72%73%65%74%3d%75%74%66%2d%38%5c%22%20%2f%3e%20%3c%74%69%74%6c%65%3e%53%61%6d%70%6c%65%20%48%54%4d%4c%2d%68%69%64%65%20%73%6f%72%65%63%65%20%63%6f%64%65%3c%2f%74%69%74%6c%65%3e%20%3c%2f%68%65%61%64%3e%20%20%3c%62%6f%64%79%3e%20%09%42%6c%61%68%20%62%6c%61%68%20%62%6c%61%68%20%3c%2f%62%6f%64%79%3e%20%3c%2f%68%74%6d%6c%3e

now is time to encrypt the hexa representation with a key, so apply encrypt(”…hexa text ….”,”…you personal key…”) . I used as key “secret” and have obtained this:

86,86,0,87,87,69,86,81,87,87,81,18,86,81,80,87,80,64,86,80,90,87,80,68,86,81,86,87,87,68,86,83,91,87,82,64,86,83,7,87,83,23,86,87,83,87,80,68,86,80,86,87,81,70,
86,81,0,87,81,77,86,81,80,87,87,68,86,80,0,87,87,70,86,87,7,87,87,18,86,87,5,87,80,67,86,86,80,87,81,71,86,87,5,87,87,18,86,81,87,87,80,64,86,81,87,87,87,68,86,
80,91,87,81,76,86,80,87,87,81,16,86,81,0,87,87,68,86,86,82,87,87,17,86,86,83,87,87,68,86,80,87,87,82,70,86,83,82,87,83,17,86,82,80,87,83,77,86,82,87,87,83,77,86,
83,5,87,83,17,86,83,82,87,83,23,86,87,5,87,87,18,86,81,86,87,81,17,86,80,0,87,87,70,86,87,83,87,80,23,86,87,81,87,83,76,86,82,87,87,82,64,86,82,83,87,86,21,86,87,5
,87,87,18,86,82,84,87,82,67,86,82,84,87,87,17,86,82,84,87,86,71,86,87,6,87,83,18,86,82,81,87,83,67,86,87,5,87,80,64,86,80,81,87,87,18,86,82,91,87,83,76,86,82,87,87,
83,16,86,83,0,87,86,69,86,87,5,87,81,64,86,80,87,87,81,64,86,87,5,87,82,76,86,83,91,87,82,64,86,83,7,87,83,23,86,86,82,87,87,16,86,82,87,87,82,70,86,83,82,87,83,17,
86,82,80,87,83,77,86,82,87,87,83,77,86,83,5,87,83,17,86,83,82,87,83,23,86,87,6,87,83,64,86,82,87,87,83,64,86,80,0,87,87,70,86,86,6,87,87,68,86,86,0,87,83,76,86,82,
87,87,83,16,86,83,0,87,87,68,86,82,91,87,83,16,86,83,0,87,83,17,86,82,80,87,86,16,86,80,0,87,87,70,86,83,91,87,82,64,86,82,87,87,82,68,86,86,2,87,87,18,86,87,5,87,
82,67,86,82,84,87,82,67,86,87,6,87,82,67,86,86,80,87,87,17,86,83,5,87,82,70,86,83,84,87,87,18,86,86,82,87,86,77,86,86,90,87,86,77,86,87,5,87,82,76,86,83,91,87,82,64
,86,83,7,87,83,23,86,80,0,87,87,70,86,86,6,87,87,68,86,86,0,87,83,76,86,83,86,87,83,69,86,83,87,87,86,17,86,87,83,87,86,23,86,83,7,87,83,65,86,82,87,87,83,69,86,87,83,
87,83,76,86,82,87,87,82,64,86,82,83,87,87,16,86,83,86,87,82,69,86,82,86,87,83,77,86,82,85,87,86,16,86,80,0,87,87,70,86,81,80,87,83,18,86,83,6,87,82,64,86,83,86,87,83,
17,86,82,87,87,87,16,86,80,87,87,82,77,86,82,83,87,83,65,86,80,0,87,87,70,86,87,83,87,83,71,86,83,5,87,83,17,86,82,87,87,83,65,86,83,6,87,82,64,86,86,7,87,80,23,86,87
,81,87,82,64,86,83,86,87,82,76,86,82,87,87,87,18,86,83,91,87,82,64,86,83,7,87,83,23,86,86,1,87,87,68,86,83,80,87,83,76,86,83,82,87,82,70,86,82,80,87,83,65,86,82,87,87,86,
16,86,82,86,87,82,64,86,83,85,87,87,16,86,86,91,87,80,23,86,87,81,87,87,68,86,87,5,87,86,17,86,87,83,87,86,23,86,82,87,87,83,77,86,82,87,87,83,23,86,83,86,87,86,17,86,
80,80,87,83,69,86,83,7,87,82,68,86,83,0,87,83,65,86,87,83,87,81,76,86,80,87,87,81,16,86,81,0,87,87,16,86,83,91,87,83,77,86,83,87,87,83,65,86,87,83,87,82,71,86,83,5,
87,82,70,86,83,86,87,83,71,86,83,86,87,87,68,86,83,80,87,83,18,86,83,87,87,83,65,86,86,0,87,87,18,86,82,87,87,83,77,86,82,87,87,83,23,86,83,86,87,86,17,86,87,83,87,
86,23,86,87,5,87,83,76,86,83,86,87,83,69,86,83,87,87,86,17,86,87,83,87,87,68,86,86,0,87,83,70,86,83,5,87,83,64,86,82,90,87,86,17,86,87,83,87,85,77,86,81,81,87,83,23,
86,83,82,87,83,76,86,87,83,87,83,70,86,83,0,87,83,69,86,83,91,87,87,68,86,83,81,87,83,23,86,83,82,87,83,76,86,87,83,87,86,23,86,87,5,87,83,70,86,83,5,87,83,64,86,82,
90,87,86,17,86,87,83,87,86,23,86,87,5,87,83,76,86,82,87,87,83,16,86,83,0,87,86,17

Now let’s create the script,that will display the content of page, that will be the final step:

document.write(unescape(decrypt(new Array(86,86,0,87,87,69,86,81,87,87,81,18,86,81,80,87,80,64,86,80,90,87,80,68,86,81,86,87,87,68,86,83,91,87,82,64,86,83,7,87,83,23,86,87,83,87,80,68,86,80,86,87,81,70,
86,81,0,87,81,77,86,81,80,87,87,68,86,80,0,87,87,70,86,87,7,87,87,18,86,87,5,87,80,67,86,86,80,87,81,71,86,87,5,87,87,18,86,81,87,87,80,64,86,81,87,87,87,68,86,
80,91,87,81,76,86,80,87,87,81,16,86,81,0,87,87,68,86,86,82,87,87,17,86,86,83,87,87,68,86,80,87,87,82,70,86,83,82,87,83,17,86,82,80,87,83,77,86,82,87,87,83,77,86,
83,5,87,83,17,86,83,82,87,83,23,86,87,5,87,87,18,86,81,86,87,81,17,86,80,0,87,87,70,86,87,83,87,80,23,86,87,81,87,83,76,86,82,87,87,82,64,86,82,83,87,86,21,86,87,5
,87,87,18,86,82,84,87,82,67,86,82,84,87,87,17,86,82,84,87,86,71,86,87,6,87,83,18,86,82,81,87,83,67,86,87,5,87,80,64,86,80,81,87,87,18,86,82,91,87,83,76,86,82,87,87,
83,16,86,83,0,87,86,69,86,87,5,87,81,64,86,80,87,87,81,64,86,87,5,87,82,76,86,83,91,87,82,64,86,83,7,87,83,23,86,86,82,87,87,16,86,82,87,87,82,70,86,83,82,87,83,17,
86,82,80,87,83,77,86,82,87,87,83,77,86,83,5,87,83,17,86,83,82,87,83,23,86,87,6,87,83,64,86,82,87,87,83,64,86,80,0,87,87,70,86,86,6,87,87,68,86,86,0,87,83,76,86,82,
87,87,83,16,86,83,0,87,87,68,86,82,91,87,83,16,86,83,0,87,83,17,86,82,80,87,86,16,86,80,0,87,87,70,86,83,91,87,82,64,86,82,87,87,82,68,86,86,2,87,87,18,86,87,5,87,
82,67,86,82,84,87,82,67,86,87,6,87,82,67,86,86,80,87,87,17,86,83,5,87,82,70,86,83,84,87,87,18,86,86,82,87,86,77,86,86,90,87,86,77,86,87,5,87,82,76,86,83,91,87,82,64
,86,83,7,87,83,23,86,80,0,87,87,70,86,86,6,87,87,68,86,86,0,87,83,76,86,83,86,87,83,69,86,83,87,87,86,17,86,87,83,87,86,23,86,83,7,87,83,65,86,82,87,87,83,69,86,87,83,
87,83,76,86,82,87,87,82,64,86,82,83,87,87,16,86,83,86,87,82,69,86,82,86,87,83,77,86,82,85,87,86,16,86,80,0,87,87,70,86,81,80,87,83,18,86,83,6,87,82,64,86,83,86,87,83,
17,86,82,87,87,87,16,86,80,87,87,82,77,86,82,83,87,83,65,86,80,0,87,87,70,86,87,83,87,83,71,86,83,5,87,83,17,86,82,87,87,83,65,86,83,6,87,82,64,86,86,7,87,80,23,86,87
,81,87,82,64,86,83,86,87,82,76,86,82,87,87,87,18,86,83,91,87,82,64,86,83,7,87,83,23,86,86,1,87,87,68,86,83,80,87,83,76,86,83,82,87,82,70,86,82,80,87,83,65,86,82,87,87,86,
16,86,82,86,87,82,64,86,83,85,87,87,16,86,86,91,87,80,23,86,87,81,87,87,68,86,87,5,87,86,17,86,87,83,87,86,23,86,82,87,87,83,77,86,82,87,87,83,23,86,83,86,87,86,17,86,
80,80,87,83,69,86,83,7,87,82,68,86,83,0,87,83,65,86,87,83,87,81,76,86,80,87,87,81,16,86,81,0,87,87,16,86,83,91,87,83,77,86,83,87,87,83,65,86,87,83,87,82,71,86,83,5,
87,82,70,86,83,86,87,83,71,86,83,86,87,87,68,86,83,80,87,83,18,86,83,87,87,83,65,86,86,0,87,87,18,86,82,87,87,83,77,86,82,87,87,83,23,86,83,86,87,86,17,86,87,83,87,
86,23,86,87,5,87,83,76,86,83,86,87,83,69,86,83,87,87,86,17,86,87,83,87,87,68,86,86,0,87,83,70,86,83,5,87,83,64,86,82,90,87,86,17,86,87,83,87,85,77,86,81,81,87,83,23,
86,83,82,87,83,76,86,87,83,87,83,70,86,83,0,87,83,69,86,83,91,87,87,68,86,83,81,87,83,23,86,83,82,87,83,76,86,87,83,87,86,23,86,87,5,87,83,70,86,83,5,87,83,64,86,82,
90,87,86,17,86,87,83,87,86,23,86,87,5,87,83,76,86,82,87,87,83,16,86,83,0,87,86,17),”secret”)));

As you can see the key is “secret” you must chose a better one dynamic generate on each session stored in cookies. For extra security obfuscate this cod too:

eval(function(p,a,c,k,e,d){e=function(c){return(c35?String.fromCharCode(c+29):c.toString(36))};if(!”.replace(/^/,String)){while(c–){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return’\\w+’};c=1};while(c–){if(k[c]){p=p.replace(new RegExp(’\\b’+e(c)+’\\b’,'g’),k[c])}}return p}(’y.w(A(v(t z(4,4,0,3,3,m,4,b,3,3,b,j,4,b,a,3,a,c,4,a,r,3,a,f,4,b,4,3,3,f,4,8,l,3,9,c,4,8,7,3,8,e,4,3,8,3,a,f,4,a,4,3,b,g,4,b,0,3,b,k,4,b,a,3,3,f,4,a,0,3,3,g,4,3,7,3,3,j,4,3,
5,3,a,o,4,4,a,3,b,q,4,3,5,3,3,j,4,b,3,3,a,c,4,b,3,3,3,f,4,a,l,3,b,h,4,a,3,3,b,i,4,b,0,3,3,f,4,4,9,3,3,d,4,4,8,3,3,f,4,a,3,3,9,g,4,8,9,3,8,d,4,9,a,3,8,k,4,9,3,3,8,k,
4,8,5,3,8,d,4,8,9,3,8,e,4,3,5,3,3,j,4,b,4,3,b,d,4,a,0,3,3,g,4,3,8,3,a,e,4,3,b,3,8,h,4,9,3,3,9,c,4,9,8,3,4,u,4,3,5,3,3,j,4,9,p,3,9,o,4,9,p,3,3,d,4,9,p,3,4,q,4,3,6,3
,8,j,4,9,b,3,8,o,4,3,5,3,a,c,4,a,b,3,3,j,4,9,l,3,8,h,4,9,3,3,8,i,4,8,0,3,4,m,4,3,5,3,b,c,4,a,3,3,b,c,4,3,5,3,9,h,4,8,l,3,9,c,4,8,7,3,8,e,4,4,9,3,3,i,4,9,3,3,9,g,4,8,9,
3,8,d,4,9,a,3,8,k,4,9,3,3,8,k,4,8,5,3,8,d,4,8,9,3,8,e,4,3,6,3,8,c,4,9,3,3,8,c,4,a,0,3,3,g,4,4,6,3,3,f,4,4,0,3,8,h,4,9,3,3,8,i,4,8,0,3,3,f,4,9,l,3,8,i,4,8,0,3,8,d,4,9,
a,3,4,i,4,a,0,3,3,g,4,8,l,3,9,c,4,9,3,3,9,f,4,4,2,3,3,j,4,3,5,3,9,o,4,9,p,3,9,o,4,3,6,3,9,o,4,4,a,3,3,d,4,8,5,3,9,g,4,8,p,3,3,j,4,4,9,3,4,k,4,4,r,3,4,k,4,3,5,3,9,h,4,8,
l,3,9,c,4,8,7,3,8,e,4,a,0,3,3,g,4,4,6,3,3,f,4,4,0,3,8,h,4,8,4,3,8,m,4,8,3,3,4,d,4,3,8,3,4,e,4,8,7,3,8,n,4,9,3,3,8,m,4,3,8,3,8,h,4,9,3,3,9,c,4,9,8,3,3,i,4,8,4,3,9,m,4,
9,4,3,8,k,4,9,s,3,4,i,4,a,0,3,3,g,4,b,a,3,8,j,4,8,6,3,9,c,4,8,4,3,8,d,4,9,3,3,3,i,4,a,3,3,9,k,4,9,8,3,8,n,4,a,0,3,3,g,4,3,8,3,8,q,4,8,5,3,8,d,4,9,3,3,8,n,4,8,6,3,9,c,4,4,
7,3,a,e,4,3,b,3,9,c,4,8,4,3,9,h,4,9,3,3,3,j,4,8,l,3,9,c,4,8,7,3,8,e,4,4,1,3,3,f,4,8,a,3,8,h,4,8,9,3,9,g,4,9,a,3,8,n,4,9,3,3,4,i,4,9,4,3,9,c,4,8,s,3,3,i,4,4,l,3,a,e,4,3,
b,3,3,f,4,3,5,3,4,d,4,3,8,3,4,e,4,9,3,3,8,k,4,9,3,3,8,e,4,8,4,3,4,d,4,a,a,3,8,m,4,8,7,3,9,f,4,8,0,3,8,n,4,3,8,3,b,h,4,a,3,3,b,i,4,b,0,3,3,i,4,8,l,3,8,k,4,8,3,3,8,n,4,
3,8,3,9,q,4,8,5,3,9,g,4,8,4,3,8,q,4,8,4,3,3,f,4,8,a,3,8,j,4,8,3,3,8,n,4,4,0,3,3,j,4,9,3,3,8,k,4,9,3,3,8,e,4,8,4,3,4,d,4,3,8,3,4,e,4,3,5,3,8,h,4,8,4,3,8,m,4,8,3,3,4,
d,4,3,8,3,3,f,4,4,0,3,8,g,4,8,5,3,8,c,4,9,r,3,4,d,4,3,8,3,s,k,4,b,b,3,8,e,4,8,9,3,8,h,4,3,8,3,8,g,4,8,0,3,8,m,4,8,l,3,3,f,4,8,b,3,8,e,4,8,9,3,8,h,4,3,8,3,4,e,4,3,5,3,
8,g,4,8,5,3,8,c,4,9,r,3,4,d,4,3,8,3,4,e,4,3,5,3,8,h,4,9,3,3,8,i,4,8,0,3,4,d),”x”)));’,37,37,’|||87|86||||83|82|80|81|64|17|23|68|70|76|16|18|77|91|69|65|67|84|
71|90|85|new|21|decrypt|write|secret|document|Array|unescape’.split(’|'),0,{}))

We have an pretty good protection, must remember a meta HTML protection because this can be broken by a good hacker.

I hope that this article was helpful I am waiting for you’re feedback.

[UPDATE:] here are the source used in this article
Secure_HTML_code

Bad web programming technique.

admin — Wed, 24 Feb 2010 19:01:19 +0000

ASP.Net and JSP are two wonderful enviroment to create web application, application that are easy to modify and adapt to all requirements, but the major problems of ASP.Net and JSP is that they are not cheap and slow, in fact there are not many hosting provider that are offering hosting service for this technologies at a affordable price (for a common user ).

Therefore other affordable technology like PHP are commonly wide used by most common users. In comparison with Java or C#, PHP language is pretty simple and doesn’t relay on so much formalism and doesn’t need a lot of knowledge about programming, allowing users to create application without knowing much think about programming technique.

The side effect is that the applications developed in this way are extremely hard to debug and even more harder to extend from a very wide variety of factors, some I will discuss later in this paper.

The first think to speak about is the “spaghetti code” where the entire application logic (code) is meshed up in same file, you know what I am talking about: a lot of if/else/for/while and functions with no logic organization. To extend such crap application wrote by some other programmers is quite hard and unproductive.
Since version 4 PHP offers OOP(object orientated programming) but it seams that most of users doesn’t know how to use it right, how to increase their productivity using OOP programming technique and software engineering technique .It seams that web programmers are still writing code like in the stone age.
Another problem, the biggest one is that users are creating applications dependent on design. The design of a web site is changing frequently that means restructuring the code again and again and again.

The list is still open. I will continue to add more and more bad programming technique.

Imagini comice

admin — Mon, 25 Jan 2010 21:11:27 +0000

Cateva imagini comice gasite pe net care cred ca merita vazute ) .

Interoperabilitate intre Matlab si C++

admin — Tue, 24 Nov 2009 21:21:27 +0000

matlab

Cu siguranta ca nu este o noutate pentru nimeni notiunea de cross compilare(sau daca este…corss compilare=compilare pentru o masina cu o arhitectura diferita de cea pe care ruleaza compilatorul ) sau intreoperabilitate (in doua cuvinte…proces prin care se utilizeaza cod scris in limbaje diferite).

Daca cross compilarea este un process destul de banal, daca ai la indemana uneltele necesare,in sensul ca totul se face “din mouse”. In cazul interoperabilitatii trebuie totusi si ceva cunostinte mai avansate de modul de oparare al limbajelor implicate (ca de ex. conversii de apel ) dar trebuie mentionat ca se poate si metoda mai simpla folosiund asa numitul “limbaj neutru” sau cu alte cuvinte prin dll-uri.

Se poate exporta codul sub forma unor functii intr-un fiser .dll , acesta putand fi importat si folosit in orce limbaj care este capabil sa incarce un dll.Ca si un exmplu, sa zicem, extrem se poate incarca un dll pana si in PHP. Dar o sa insist asupra unui exemplu si mai extrem adica folosirea codului din MATLAB in C++ si invers.

Daca in cazul C++-ului asi putea sa dau o definitie scurta, ei bine, in cazul MATLAB-ului imi este destul de greu deoarece acesta este un adevarat mamut computational ce stie sa faca cam de toate in ce priveste calculul de matematica si inginerie..ca si un exemplu care sa ilustreze forta sa se poate rezolva o integrala in 2 linii de cod… destul de impresionant daca ne gandim la agoritmii din c++ ce rezolva o integrala in cele mai 1000 de linii de cod …dar nu despre asta este vorba.

Pentru a exporta un fiser .m (fiser de cod matlab) se foloseste mcc-ul , un fel de compilator de c,c++,fortran de matlab.

mcc -m -B sgl name of function.m

codul de mai sus transforma un fiser de cod matlab intr-un fiser executabil (.exe)…se poate exporta ca si fisere de librarie (.dll sau .lib) precum urmeaza:

mcc -t -W lib:name of function lib -L C -T link:lib -h libmwsglm.mlib
libmmfile.mlib name of function.m

acest cod generaza: name of function lib.dll, name of function lib.lib, name of function lib.h

Prin acest post vreau cumva sa demonstrez faptul a fi bun programator nu inseamna a stii “perfect” un singur limbaj de programare ci mai de graba de a gasi solutia cea mai eficienta folosind toate limbajele disponibile.

Atlas cisc simulator

admin — Sun, 11 Oct 2009 17:45:54 +0000

Un proiect de facultate devenit un simulator in toata regula.Atlas este un simulator pentru un procesor cu unitatea de control microprogramata. Detalii arhitecturale gasesti aici in documentatie iar programul il poti descarca de aici. Intrucat nu am inclus in documentatie un manual de utilizare am sa incerc sa explic aici modul de utilizare si mai ales utilitate lui.

Un pas esential in utilizarea simultatorului este parcurgerea documentatiei ( la urma urmei trebuie sa se inteleaga ce se simuleaza ), trebuie sa prezicez ca am plecat de la ipoteaza ca utilizatorul este familiarizat cu conceptele fundamentale de CISC,unitate de control,registre,intrerupere etc.

A. Pasi utilizare

1. Se scrie codul de asamblare ce se doreste executat apoi se apasa butonul Genereaza cod masina . Codul scris de catre utilizator este supus procesului de asamblare rezultand codul masina ce este incarcat in memorie la adresa 0×100, concomitent se reseteaza registrele si se incarca in PC adresa 0×100 (adresa primei instructiuni).
2. Executia pas cu pas
3. Simulatorul poate fi resetat folosind butonul Reseteaza procesor
4. Pentru a genera o intreupere se introduce numarul ei si se apasa butonul Genereaza intrerupere.

B. Intereruperi.

Trebuie precizat faptul ca simulatorul include si facilitatea de a simula o intrerupere in timpul executie.
De asemenea se ofera utilizatorului posibilitatea de a-si defini propriile rutine de trarea intreruperiilor, rutine care pot fi salvate pentru a fi folosite implicit de catre simulator la fiecare rulare sau doar in timpul executiei curente.

Utilitatea simulatorului este cumva mai mult didactica, dupa cum spuneam este doar un proiect de facultate.

P.S.:Daca va intereseaza.. va pot da si sursele.

Wireless signal power detector

admin — Thu, 23 Apr 2009 20:42:31 +0000

Zilele trecute mi-am cumparat un router wireless nou, unul care sa bata o distanta mai mare pentru a-mi oferi un grad mai mare de portabilitate, curios de performantele noului router am cautat pe net un tool care sa imi indice putere semnalului si calitatea deoarece eram nemultumit de cel existent in sistemul de operare . Dupa cateva minute de cautare pe google in care nu am gasit nimic (nimic care sa ma satisfaca) imi suflec manecile si ma hotarasc sa imi scriu propriul programul care sa imi calculeze calitatea si puterea semnalului, dupa cate ore de programare am schitat un programel care m-am gandit ca poate ar mai putea fi util cuiva. Daca sunteti intersati aplicatia o puteti descarca de aici

aQua beta release -un utilitar remote desktop connection/control

admin — Sun, 12 Apr 2009 13:40:58 +0000

In sfarsit am reusit sa imi fac timpul necersar pentru a publica primul proiect, este vorba de un utilitar ce va permite sa va conectati de oriunde si oricand la computerul de acasa/la servici si sa preluati controlul, de asemenea ar putea fi folosit ca si o unealta pentru a supraveghea activitatea ce se

inteprinde pe un calculator.
Trasaturi:

Criptarea traficului
Suport pentru control mouse si tastatura
Suport pentru WOL (wake on lan) momentan doar pentru pachet magic
Calitate inalta a imaginii.

Mai multe aici

Componente vizuale in c#

admin — Sun, 01 Mar 2009 11:42:50 +0000

Desi nu imi place trebuie sa reunosc ca limbajul de la Microsoft c#, principalul rival al lui Java, este o adevarata “unealta” atunci cand vine vorba de productivitate si viteza in a realiza un program, iar paltforma .net este o adevarata “lada plina de unelte” in sensul ca aici poti gasi o sumedenie de clase gata facute pentru tine ce asteapta sa le folosesti. O sa incerca sa ilustrez cele mentionate printr-un exemplu practic si anume o componenta vizuala pe care o putem folosi ori de cate ori dorim in orice proiect. Pentru cei care au mai relizat astfel de compoente in alte limbaje cum ar fi c++ sau vb se se poate observa simplitatea cu care realizam o munca relativ complexa daca stam sa ne gandim la principiile care stau la baza unei componente vizuale.

Prima componenta vizuala in c#

P.S. Pentru cei care probabil ca va inrebati de unde vine numele asta de c# (citit c sharp) iata raspunsul aici