₦airaland Forum

spikesC: Why framework when he doesn't even know how the basic works

I don't tink its compulsory he learns all d basics b4 he can use laravel. E.g using Post::all() will return all d posts in d database as json being d default mode and there are many other easy syntax dat can b used.
Although I won't recommend diving in without knowing d basics of php including oop.

Try laravel php framework, its really easy creating an api with it.

dhtml: Is alright, seen your email

Oga dhtml still awaiting ur reply

Thank you @sisqology, I will definitely work on d aspect u pointed out.
@dhtml nd zicjoe thank u as well.

tweb1: I for one, I also enjoy using my own source code but I feel a need to have a good knowlege of the workings of 2 or 3 frameworks. One reason is that they can really help to speed up a project and another reason is to make my portfolio/profile look better. I have plans to learn yii in the near future but for now I need a framework that is designed for ecommerce.

Dis is my question as well. Am currently developing a shopping website like jumia but am using laravel framework 4 it.
@op mayb u shuld consider magento

User name: dubuntu
License key:
Copy as it is

===== LICENSE BEGIN =====
59354-12042010
00000xmaXJJsaq7t9ARgxNsgschoTE
gLrxiczg0r7OJwGOOm!P2W"4RJ0vZp
Vi7Yrs6alYMlRMGZuz4fJRz1thcORR
===== LICENSE END =====

Or tell me wen u'v downloaded it, I can help u generate a key.

Download dis www.jetbrains.com/pycharm/ nd search 4 d key on google

If u still think php is ugly, try out Laravel php framework when u av learnt a little oop in php.
Read d article here http://code.tutsplus.com/tutorials/why-laravel-is-taking-the-php-community-by-storm--pre-52639

HighwayTech: Giv me yor Whatsapp phn no

08096646699

I stay in ilorin. What do u need?
U can contact me on bbm or whatsapp
2B83AF12
08096646699

What kept me goin when I started learning programming were
Passion 40%
Money I might earn 60%
.
.
@ op u shuld see some older post in d web master's section whr Yawatide nd some other guys wuld brag aw much they will charge nd won't accept 4 creating a website. Then my uncle is my mentor, although he is a dotNet guy he still gives me credible advice when I av a problem in php nd programming generally.
My advice 4 u start with html then css nd javascript. I can help u get ebooks on any language u want, email me nd I will send u d download link.

Wait. Do I av 2 approve all d commits I av made?

IamGodzilla: So now could we say this is one of the reason for wordpress 4.0 release? Or a patch could still be downloaded for users with 3.9 and less?

it has been fixed in wordpress 3.9.2
we should just upgrade our wordpress and drupal site to d latest version.

If your website runs on a self-hosted WordPress installation or on Drupal, update your software now.

Nir Goldshlager, a security researcher from Salesforce.com's product security team, has discovered an XML vulnerability that impacts the popular website platforms WordPress and Drupal.

The vulnerability uses a well-known XML Quadratic Blowup Attack — and when executed, it can take down an entire website or server almost instantly.

This is a big deal because WordPress and Drupal are used by millions of websites WordPress and Drupal are used by millions of websites. The latest statistics from W3Techs shows WordPress alone powers nearly 23% of the web.

The XML vulnerability Goldshlager discovered affects WordPress versions 3.5 to 3.9 (the current version) and works on the default installation. It affects Drupal versions 6.x to 7.x (the latest version) and also works on the default installation.

The good news is that both WordPress and Drupal have released patches for their applications. Users and web hosts simply need to upgrade to the latest version to protect against the vulnerability.

When the vulnerability is exploited, the results can basically render a website or web server unusable. The vulnerability can cause 100% CPU and RAM usage, cause the server to become unavailable and also create a Denial of Service attack on the MySQL database program.

In other words, your website and web server can become totally inaccessible.

How the attack works
This vulnerability uses what is called an XML Quadratic Blowup Attack. This type of attack is similar to a Billion Laughs attack, which can allow a very small XML document to totally disrupt the services on machine in a matter of seconds.

The Quadratic Blowup Attack is similar; however, instead of using nested entities inside an XML document, it just repeats one large entity with tens of thousands of characters over and over again.

With this type of attack, an XML document that might be a few hundred kilobytes in size can end up requiring hundreds of megabytes or even gigabytes of memory. That will easily bring down an entire website or web server.

In Goldshlager's words:

<?xml version="1.0"?>
<!DOCTYPE DoS [
  <!ENTITY a "xxxxxxxxxxxxxxxxx...">
]>
<DoS>&x;&x;&x;&x;&x;&x;&x;&x;&x;...</DoS>

"If an attacker defines the entity "&x;" as 55,000 characters long, and refers to that entity 55,000 times inside the "DoS" element, the parser ends up with an XML Quadratic Blowup attack payload slightly over 200 KB in size that expands to 2.5 GB when parsed. This expansion is enough to take down the parsing process."

How the attack is exploited
The default memory allocation limit for PHP (the language that WordPress and Drupal are written in) is 128MB per process. In theory, this means that you can't exceed the 128MB limit with an XML bomb request. So far so good, right?

Here's the problem: Apache, the world's most popular web server, has its "Max Clients" property set to 256 by default. Meanwhile, MySQL, the database that WordPress and Drupal use, has its default "Max Connections" value set to 151.

If we multiply those connections against one another (128x151), we get 19328MB — which will consume all available memory.

To successfully attack the server, the attacker needs to fingerprint the available memory limit on the victim's server. If the attack overwrites the PHP limit, the server will reject the overwrite, rendering the attack unsuccessful.

A successful attack, however, will return the injected payload as a result. This will bring down the system.
The fix
WordPress and Drupal have both updated their software to protect against this vulnerability. The update procedure will vary based on your setup.

WordPress 3.7 introduced automatic updates for minor releases for this very reason. This allows security patches, such as this one, to get rolled out to users automatically.

Automatic updates can turned on or off at the discretion of your web host, so it's a good idea to check your settings and update manually if automatic updates are not enabled.

Comment on disclosure
Because of the potential vector size of this vulnerability, Goldshlager made sure to responsibly disclose the vulnerability to the WordPress and Drupal teams before sharing the results with the public.

This allowed the teams time to patch their respective pieces of software before the vulnerability was exploited on a large scale.

Given the nature of this type of attack — and the relative ease in which it could have been exploited — the repercussions for plenty of website owners and web hosts could have been innumerable. WordPress alone is used by many of the biggest publishers on the web — not to mentions millions upon millions of regular users and small businesses.

Responsible disclosure was the best way to get the issue out in the open, and also fixed.

Notably, the WordPress and Drupal teams worked together on this solution and timed their security releases to coincide with one another.

Because the vulnerability targets WordPress's XML-RPC library file — a file that Drupal uses a derivative of — it made sense for the teams to work together on a patch and release.

source http://mashable.com/2014/08/06/wordpress-xml-blowup-dos/

callmejulian: do you want to build the site with wordpress? let me know what platform its going to be on so that i can get you the appropriate plugin/module .

Yeah wordpress

I want 2 design a site 4 a radio station. And I don't know aw 2 implement live radio on d website. Can any1 help?
Dhtml, I tink I saw a similar website in ur portfolio.

Name: Olajide Afeez
Sex: MALE
Challenge: DEVELOPMENT/PROGRAMMING
Language: PHP
Framework: Laravel

I av Lagos state numbers in excel format. But d LGA is not included.

hilaryiwens05: i have this template and more to sell, they are quiet cheap and affordable...check the demo out:

Fashion Boutique Responsive HTML Template For Sale
http://templatation.com/Site-templates/fashion-boutique/

contact 08182428991/08062207346 BBM:22E88D19
halo me @ hilaryiwens@yahoo.com

I will only buy from you if you can supply me with constant update as it is released. eg. I av a wp theme that is version 2.2, it has already been updated to version 2.8 on themeforest. which means I might still be susceptible 2 whatever bug that was fixed.

eddiebruk: you got mail

Yea, I will reply you in a few.

Email: jide4real43 [at] gmail.com.
Bbm pin: 7C86E06D

@ op.
The best is to just redesign the one online. Or 2. If you used the same database prefix when installing both, you can just export the database and import it to the 1 online.

Email me, I will send you the demo links of the designs available. So that you can make your choice.

aikfrank: If you don't know its better to keep quiet

I would have appreciated it if you just said your opinion with out the quoted words above.
Punchng uses a custom theme based on genesis framework (it's just like creating a child theme).
Look at http://sunnewsonline.com/new/ they use a magazine theme, I don't think there is much difference between it and Punchng. And here is a website I designed recently http://consciencemagazine.com/
So why not show us the themes you have coded from scratch?

don't disturb yourself. that's jst d work of a theme. email me I think I av some premium themes dat can do it.

ebukaezeh: so pls wat do u suggest i do tenx

I encounter d problem as well on my cp wen using airtel. The I thing I do is use hide ip application (windows) to change my ip address. u can do d same or use any oda network except airtel.

I can help u @ N195 per dollar