Library author: Don’t provide an exploitable interface

Tags:

SQL injection is a pretty big deal. Its cousin shell injection is also a common issue, demonstrated quite well by a recent post to the PHP reddit. Although some suspect it was a troll, I heard echos from a variety of people who had seen pretty much exactly the same vulnerability in production. This got me thinking: People writing libraries …

3 ways to get backend data to AngularJS

Tags:

It seems this is a rather common conundrum with Angular code: You have some backend data, say in PHP or Rails, and you want to output it when rendering the page so that Angular can display it. Since Angular is designed to work more as a single-page app framework, it isn’t immediately obvious how to do this without Ajax, so …

First impressions on Ruby on Rails

Tags:

In my job at Ribbon, I’ve been using Ruby on Rails a lot – that is what the Ribbon service is built with afterall. This has been my first time working with Rails, so read on for some thoughts.

Knockout vs Backbone vs Angular

Tags:

There’s a lot of talk of various client-side kind-of-mvc libraries. Three of the popular ones I’ve used are Knockout, Backbone and Angular. While there are other comparisons of the three, I feel many of them don’t really touch on some of the aspects that I’ve come to learn from my experiences with the three.

Parsing and evaluating PHP in Haskell: Part 2

Tags:

Last week I wrote a post about a PHP parser / evaluator I wrote in Haskell. I explained some of the parts on how the parser itself was designed to process PHP code into an abstract syntax tree. Continuing from where we left off in the previous part, in this post I’ll discuss the actual evaluation part.

Parsing and evaluating PHP in Haskell: Part 1

Tags:

The other day I uploaded a new experimental project on GitHub – A Haskell PHP parser / evaluator. It doesn’t understand 100% of all PHP syntax, but it was an interesting experiment nevertheless. Here’s some insights and other thoughts from working on the code.

Post-mortem: Battlefield 3 Web Commander

Tags:

I thought I’d write a sort of “lessons learned” thing about my Battlefield 3 related NodeJS application. As of writing this, the service has been down for several months. The very first idea with it was simply to see if it could be done. Then, the next idea was to see if I could make a few bucks with it. …