Moonlight Blog » development

Top Ten Open Source PHP Apps

William Long — Sun, 05 Jul 2009 15:39:14 +0000

Open-source PHP applications that changed the world. From managing databases to shopping, writing blogs to sending emails. Ten years of passion, great software architectures, team work and revolutionary ideas. Here are the most influential open-source PHP applications.

Blog

WordPress – is a state-of-the-art semantic personal publishing platform with a focus on aesthetics, web standards, and usability.

BBS

phpBB -is a high powered, fully scalable, and highly customizable open-source bulletin board package. phpBB has a user-friendly interface, simple and straightforward administration panel, and helpful FAQ. Based on the powerful PHP server language and your choice of MySQL, MS-SQL, PostgreSQL or Access/ODBC database servers, phpBB is the ideal free community solution for all web sites. Features include: Unlimited forums and posts; Multiple language interface; Private or public forums; Powerful search utility; Private messaging system; Templates.

CMS

Drupal – an open source content management platform. Equipped with a powerful blend of features, Drupal supports a variety of websites ranging from personal weblogs to large community-driven websites.

Wikis

MediaWiki – is a free software wiki package originally written for Wikipedia. It allows collaborative editing on documents within a familiar interface. It was designed to be run on a large server farm and requires Apache, PHP, and MySQL.

Database Tools

phpMyAdmin – handles the administration of MySQL over the Web. phpMyAdmin performs many database administration tasks like running SQL statements, adding and dropping databases, and adding, editing or deleting tables or fields.

Photo Tools

Gallery – is an open source project with the goal to develop and support leading photo sharing web application solutions. It allow some basic photo manipulation, such as resizing, rotating, and altering image quality, but does not include advanced photo editing.

Advertising Tools

OpenX – OpenX is a hugely popular, free ad server for web publishers. Take control, manage your advertising and make more money from online advertising today.

DIGG

Pligg – Pligg CMS provides free software to create your own social networking website. Start a site in minutes using Pligg Content Management System and save time and money on your next website.

RSS

Gregarius–Gregarius is a web-based RSS/RDF/ATOM feed aggregator, designed to run on your web server, allowing you to access your news sources from wherever you want.

E-Commerce

osCommerce – osCommerce(“open source Commerce”) is an e-commerce and online store-management software program. It can be used on any web server that has PHP and MySQL installed. osCommerce provides a basic set of functionality that meets the common needs of online businesses.

Top Ten WordPress Security Tips

William Long — Sun, 30 Nov 2008 09:29:16 +0000

Below are 10 security tips that you can easily implement on your WordPress blog. Please share one or more life-savers you use permanently to help protect yourself from WordPress security issues.

1. Upgrade WordPress – In general, keeping your WordPress installation up to date is a great way to avoid known problems. Do note that the lastest version, especially in the case of major upgrades, may cause more problems then it resolves.

2. WordPress Version – The tag in your header.php that displays your current version of wordpress. Since everyone knows your wordpress version this way, your blog is prone to hackers if you have not upgraded to the new version.

3. WordPress Username – Every hacker knows WordPress has a user “admin” with god-like administration privileges. Slow the hackers down by removing the “admin” user. Create a WordPress user with admin privileges using the administration interface. Log out of WordPress and log back in with the new user. Delete the admin user. The new admin user should be different than your normal post author.

4. WordPress Password – Are you still logging into your wp-admin page with the same default password that was emailed to you? If so, CHANGE IT! That password is only 6 characters and just numbers and letters. Make it complex and more than 10 characters if you can. Also, try not to use words, make it a nice jumble of letters, numbers, and symbols.

5. Prevent Directory Listing – In many WordPress installations it is possible to view a list of installed plugins by navigating to the /wp-content/plugins/ directory. This is not a good idea as known plugin vulnerabilities can than be easily exploited. Add an empty default index file, such as index.html, to the directory. You can also protect it using an .htaccess file assuming you’re using Apache.

6. Protect Your WP-Admin Folder – You can protect your WordPress admin folder by allowing access to it from a defined set of IP addresses. Everything else will bring up a Forbidden error message. So if you only access your blog from one or two places routinely, it’s worth implementing. Also, you’re supposed to create a new .htaccess file inside your wp-admin folder, not replace the one at the root of your blog.

7. Protect From Search Engines – There is no need to have all of your filesWordPress files indexed by Google, so it’s best to block them in your robots.txt file. Add the following line to your list:Disallow: /wp-*

8. Install Login Lockdown WordPress Plugin – This plugin records the IP address and timestamp of every failed WordPress login attempt. If more than a certain number of attempts are detected within a short period of time from the same IP range, then the login function is disabled for all requests from that range.

9. Install WordPress Database Backup Plugin – You always have to take regular backups of your file directories as well as the database. WordPress Database Backup plugin creates backups of your core WordPress tables as well as other tables of your choice in the same database.

10. Install WordPress Security Scan Plugin – The WP Security Scan plugin attempts to both to audit your blog security and to implement many of the suggestions mentioned above.

Disable WordPress Autosave Plugin

William Long — Tue, 25 Nov 2008 17:48:04 +0000

WordPress autosave is the best features which I hate in WordPress. AutoSave will auto save a copy of edited post or page every 60 seconds provided there is a change on the content in the editor. However, there is only ever a maximum of one AutoSave version for any given post. New AutoSaves created will overwrite old AutoSaves. Beside, AutoSaves are stored as a special type of revision so that the auto saved with a more recent version of data does not overwrite actual published content, and is used to restore unsaved work only when necessary.

While each Post Revisions is stored in its own database table, the auto-save is only stored once with previous versions being overwritten by the new auto-saved content. So, if you’re worried about your database growing to massive proportions because of auto-save, you can stop worrying.

These are methods that disable or delay the WordPress autosave functions. The Most easy way is using plugin. The disabling plugin works with versions 2.3 through 2.7 while the delay configuration works with 2.5 and later.

Copy this text to a text file, name it whatever you want (using the .php extension, of course) and upload it to your WordPress plugin directory. Activate it and it works immediately, but you need to clear your browser cache:

/* Plugin Name: Disable autosave */ add_action('admin_print_scripts', 'plugin_deregister_autosave'); function plugin_deregister_autosave() { wp_deregister_script('autosave'); } define('WP_POST_REVISIONS',false); ?>

Disable WordPress 2.6 Post Revisions

William Long — Wed, 16 Jul 2008 03:42:16 +0000

Post Revisions Tracking is a new features of WordPress 2.6, Which makes it a lot easier to share writing between people. Since you can save your copy, and the other person can see what you changed. Also you can revert to previous revisions of posts you’ve made.

But if there is only one author of WordPress blog, Post Revisions will taking too much space as every revision is a new row in wp_post table. It creates a alot of useless database-entries.

To disable Post Revisions, Add:

define('WP_POST_REVISIONS', false);

into wp-config.php, the wordpress 2.6 Post Revisions now disabled.

In my little opinion, there should be an option in general or writing settings to enable/disable the post revision feature.

DB2ASP – Free Access Database to ASP Converter

William Long — Mon, 23 Jun 2008 15:39:18 +0000

DB2ASP generates an Active Server Page framework from an Access database. The framework contains Script subroutines to display and validate html forms and update the selected table or query. This won’t do everything for you but it will jumpstart your development process by automatically generating tedious code.

Overview

So many of the applications I create involve using web-based html forms to update Access databases that one day I just got tired of doing the same stuff over and over and came up with the idea for this program. The framework created by the program will display a blank form and data view, you can enter data into the form and write the form data back to the database. The wizard eliminates about 80% of the redundant coding associated with these types of applications. You’ll still have to make modifications to the resulting code to fit your specific situations.

You need VB6 with service pack 5 and DAO 3.6 on your machine for the db2asp to run.

UI Details

Run db2asp.exe.

In the Register Form, if you don’t have a register code, Click Cancel.

Click Select.

Select an existing Access database.

Select a table.

Select the fields you want to appear on the html form.

Select the filter method and search field.

Verify your selections.

Click Start.

Some ASP file which containing the JavaScript code will be generated on the output path. Copy this file and database to your Inetput/wwwroot path and run it. You can also edit it with your editor.

Code Details

The prgoram creates a Dim statement for each database field you selected. It also dims several other variables used throughout the framework.

Verify that sDBName points to a valid path on your server.

db.asp :

You can change your database connect string here. You can also change your database to another database system, such as SQL Server.

If you use SQLServer, change your connstr as below.
connstr=”driver={SQL Server};server=localhost;uid=sa;pwd=;database=DatabaseName”

fileedit.asp :

This file is your data edit form. You can change your edit form interface here.

filelist.asp :

This file is your data listview interface.

filefilter.asp :

This file is your data data filter form.

Hints

Your Access database must have a field named “ID”, and it should auto increase.

Your Access database must writeble. check the property of the database file.

Requirements

At least 32 MB RAM

MS Access 7.0 or higher (ODBC is not required)

Necessary privileges to write into the destination database

Price

DB2ASP Converter is totally free with no limited features.

Downloads

Click here to download totally free version of DB2ASP converter.

Installation

After downloading the zip program you should simply unzip it and run the db2asp program.

Contact

William Long
e-mail: williamlone(at)gmail.com
website:http://www.moon-blog.com

Install WordPress MU On IIS With Url Rewrite

William Long — Sun, 25 May 2008 00:40:17 +0000

I have successfully installed WordPress MU on my Windows Server 2003 running IIS 6. To be honest, I know that WPMU is not full compatible with IIS right out of the box. It relies heavily on apaches mod_rewrite, which IIS isn’t capable of. The only IIS fix for permalinks I’ve seen have either been via a special filter named ISAPI_Rewrite.

ISAPI_Rewrite is Apache mod_rewrite compatible URL rewriter for Microsoft IIS server. It is compatible with Apache mod_rewrite making it possible to move configurations from Apache to IIS and vice versa just by copying .htaccess files. I have tested with WordPress 2.x or WordPress MU 1.3.x, it’s work. This is also works in IIS Mod-Rewrite Pro, but IIS Mod-Rewrite Pro have no free version.

To enable Clean Permalinks on WordPress MU on IIS, follow these steps:

Install PHP and MySQL following the vendor’s instructions.
Install ISAPI_Rewrite.
Install WordPress according to the vendor’s instructions.
Open with a text editor the file wp-settings.php, located in WordPress root directory. Add the code line

$_SERVER['REQUEST_URI'] = $_SERVER['HTTP_X_ORIGINAL_URL'];

Log on to WordPress as administrator, go to admin panel, open the “Permalinks” settings page, and set the permalink structure of your choice. Apply your changes.
WordPress is supposed to automatically create a file with name “.htaccess” in its root directory. Open with a text editor the file .htaccess, copy it and paste into httpd.conf in ISAPI_Rewrite directory.

Now we have a WordPress MU with clean permalinks on Windows Server 2003 running IIS 6.

WordPress 2.5 Widescreen Version

William Long — Tue, 15 Apr 2008 13:40:37 +0000

I have discussed in an article under WordPress 2.5 in widescreen display abnormal. Almost all of the interface of WordPress 2.5 are directed at the design of the 1024 × 768. When I use my 1440 × 900 widescreen monitor will show only the left side of the body. I’ve finally managed to get my 1440×900 widescreen monitor working with the WordPress 2.5.

Open file wordpress\wp-admin\css\global.css, in line 159, replace:

max-width: 980px;

to:

max-width: 1400px;

In line 166, replace:

max-width: 950px;

to:

max-width: 1400px;

That’s it. Before the modification, we can see that the interface of WordPress 2.5 in 1440 × 900 like this:

After the modification, we can see that the interface of WordPress 2.5 in 1440 × 900 like that. It’s so cool, isn’t it.

If you are using the 1440 × 900 display resolution, you can changes the code and make a better look in WordPress 2.5 Widescreen Version.

WordPress 2.5 Released

William Long — Sun, 30 Mar 2008 04:12:57 +0000

WordPress 2.5 has been released and includes a huge number of changes over the WordPress 2.3 series. Rather than list the changes in detail which would probably take me some days to write out I offer the following statistics and information about the WordPress 2.5 release:

In development for 185 days (6 months 3 days to be precise).
Changes to 364 files with 54008 insertions, and 29136 deletions for more detail you can view the diffstat output.
Patches committed from over 110 different contributors.
Over 1300 individual changes made for more detail you can view a complete changelog.

As usual you can download wordpress at their site, http://wordpress.org/download/. Btw, check out their new interface. They also changed how the wordpress.org site works.

WordPress Excerpt Seo Tips

William Long — Mon, 10 Mar 2008 10:40:04 +0000

WordPress blogs have duplicate content issues, and one of them is allowing reading the same content on both the posts, index page, archives and categories pages. To avoid search engine penalty it is important to optimize your WordPress using WordPress excerpt so that duplication will be avoided.

Instead of duplicating the whole content, you may use just an excerpt in the index, archives and categories pages. The WordPress displays the excerpt of the current post with [...] at the end, which is not a “read more” link. If you do not provide an explicit excerpt to a post (in the post editor’s optional excerpt field), the first 55 words of the post’s content are used.

To use WordPress excerpt function, you may replace the_content() tag with the_excerpt() when on archive (tested by is_archive()) and category (is_category()) pages and index (is_home()) page in WordPress themes.

Now that you are in the correct section, locate the following piece of code:

You are going to replace that entire piece of code with the following:



 
  the_excerpt();

 } else {

  the_content('Read the rest of this entry »');

 } ?>

Of course, this example uses the WordPress default template, but the same code can be used on most any template if you find the index.php or main index page and the spot where is in the code.

WordPress Mod Rewrite Make Subdirectory 404 Error

William Long — Fri, 15 Feb 2008 11:39:28 +0000

Last night, I getting lots of 404 error while using Google to search my own blog index page, I realized there is something wrong about my blog.

My user-created-outside-of-WP folder is throwing a 404 when trying to access it. Now for some details:

Blog www.moon-blog.com : normal WP blog. Permalinks “/%year%/%monthnum%/%postname%.html” through mod_rewrite in the default .htaccess file WP created.

Subdirectory www.moon-blog.com/MySubdirectory/): normal PHP application. User defind permalinks. Located at directory “/MySubdirectory/”.

The problem is that the WordPress thinks My Subdirectory is 404, and do not allow Google to index my files.

I Try add some of php code into my php application to resolve this problem:

header("Status: 200 OK");

After adding that code, my PHP application in the subdirectory do not return 404 error again.

Moonlight Blog » development

Top Ten Open Source PHP Apps

Related posts

Top Ten WordPress Security Tips

Related posts

Disable WordPress Autosave Plugin

Related posts

Disable WordPress 2.6 Post Revisions

Related posts

DB2ASP – Free Access Database to ASP Converter

Overview

UI Details

Code Details

Hints

Requirements

Price

Downloads

Installation

Contact

Related posts

Install WordPress MU On IIS With Url Rewrite

Related posts

WordPress 2.5 Widescreen Version

Related posts

WordPress 2.5 Released

Related posts

WordPress Excerpt Seo Tips

Related posts

WordPress Mod Rewrite Make Subdirectory 404 Error

Related posts