Web Source Code Web Program’s source code Collection

list of PHP Content Management Systems

APC ActionApps - http://www.apc.org/actionapps/
Ariadne - http://www.muze.nl/ariadne/
Back-End - http://www.back-end.org
Bitflux - http://www.bitflux.ch/developer/
Bricolage - http://www.bricolage.cc/
C-Arbre - http://realink.org/c-arbre/doc/
CAMPSITE - http://www.campware.org/campsite/
Cocoon - http://xml.apache.org
Cofax - http://www.cofax.org
Coranto - http://coranto.gweilo.org/
DaCode - http://www.dacode.org
DCP-Portal - http://www.dcp-portal.com
Drupal - http://www.drupal.org
Easy Publisher - http://www.easypublisher.com
Edit-X - http://www.edit-x.com/
Geeklog - http://www.geeklog.org
Krysalis - http://www.interakt.ro/products/Krysalis/index.php
Mambo - http://sourceforge.net/projects/mambo/
Mason - http://www.masonhq.com/
mCubes - http://www.mCubes.com/
Metadot - http://www.metadot.net
Midgard - http://www.midgard-project.org/
MMBase - http://www.mmbase.org
MySource - http://mysource.squiz.net/
N/X - http://nxwcms.sourceforge.net/
OpenACS - http://openacs.org/
OpenCMS - http://www.opencms.org
Pagetool - http://www.pagetool.org
phpCMS - http://phpcms.de/homepage/phpcms/index.htm
PHPNuke - http://www.phpnuke.org
PHProjekt - http://www.phprojekt.com/
phpSlash - http://www.phpslash.org
phpWebSite - http://phpwebsite.appstate.edu/
Redhat CCM - http://www.redhat.com/software/ccm/
Scoop - http://scoop.kur5hin.org
Slash - http://www.slashcode.com
Squishdot - http://www.squishdot.org
SSR - http://www.ssrtech.com/
TeaServlet - http://opensource.go.com/
thatware - http://www.atthat.com/
ttCMS - http://www.ttcms.com
Webgenerator-X - http://webgenerator-x.com
WebGUI - http://plainblack.com/webgui
WebMake - http://webmake.taint.org/
WebTop - http://webtop.newfangled.com
Wyona - http://www.wyona.org/
Xinity - http://www.xinity.org/
Xoops - http://xoops.sourceforge.net/
Zope - http://www.zope.org
EZ Contents - http://www.visualshapers.com

SiteWorksPro - http://www.siteworkspro.com/
VirtuaNews - http://www.virtuanews.co.uk/

Set Up Ruby on Rails for Windows

This tutorial came from sitepoint there have free video to install a ruby on rails in windows

Technical Director Kevin Yank takes you step by step through the intricacies of setting up a Ruby on Rails development environment on Windows in this FREE video tutorial.

View

PHP SOURCE Ad Management

Collection of Advertise Management Script in PHP, ingrate to your site, this scirpt its free ware we going find this to other site for you in one, its not our own script, this script we getting to other site for build up to there script, what the best script for ad management you can comment which the best.

phpAdsNew-2.0.7

adsense_v5.0

banner_ad

advanced

azbanner

banner

fad

mad_0_5_auto

PHP_ad

phpLedAds-2.2

phpPgAds-2.0.7

PixelAdRaptor-0.4_PHP4

Advanced PHP Techniques Source Code

Interacting with the File System and the Server

When offering an Internet service, you must always keep security in mind as you develop your code. It may appear that most PHP scripts aren’t sensitive to security concerns; this is mainly due to the large number of inexperienced programmers working in the language. However, there is no reason for you to have an inconsistent security policy based on a rough guess at your code’s significance. The moment you put anything financially interesting on your server, it becomes likely that someone will try to casually hack it. Create a forum program or any sort of shopping cart, and the probability of attack rises to a dead certainty.

Source Code PHP Security

Recommended Security Configuration Options

When offering an Internet service, you must always keep security in mind as you develop your code. It may appear that most PHP scripts aren’t sensitive to security concerns; this is mainly due to the large number of inexperienced programmers working in the language. However, there is no reason for you to have an inconsistent security policy based on a rough guess at your code’s significance. The moment you put anything financially interesting on your server, it becomes likely that someone will try to casually hack it. Create a forum program or any sort of shopping cart, and the probability of attack rises to a dead certainty.

Don’t trust forms.

Hacking forms is trivial. Yes, by using a silly JavaScript trick, you may be able to limit your form to allow only the numbers 1 through 5 in a rating field. The moment someone turns JavaScript off in their browser or posts custom form data, your client-side validation flies out the window.

Users interact with your scripts primarily through form parameters, and therefore they’re the biggest security risk. What’s the lesson? Always validate the data that gets passed to any PHP script in the PHP script. “Verification Strategies”

Don’t trust users.

Assume that every piece of data your website gathers is laden with harmful code. Sanitize every piece, even if you’re positive that nobody would ever try to attack your site. Paranoia pays off.

Turn off global variables.

The biggest security hole you can have is having the register_globals configuration parameter enabled. Mercifully, it’s turned off by default in PHP 4.2 and later. Refer to “#14: Turning Off Registered Global Variables” on Section 2.6.1 to disable this setting.

Novice programmers view registered globals as a convenience, but they don’t realize how dangerous this setting is. A server with global variables enabled automatically assigns global variables to any form parameters. For an idea of how this works and why this is dangerous, let’s look at an example.

Let’s say that you have a script named process.php that enters form data into your user database. The original form looked like this:

<input name="username" type="text" size="15" maxlength="64">

When running process.php, PHP with registered globals enabled places the value of this parameter into the $username variable. This saves some typing over accessing them through $_POST['username'] or $_GET['username']. Unfortunately, this also leaves you open to security problems, because PHP sets a variable for any value sent to the script via a GET or POST parameter, and that is a big problem if you didn’t explicitly initialize the variable and you don’t want someone to manipulate it.

Take the script below, for example—if the $authorized variable is true, it shows confidential data to the user. Under normal circumstances, the $authorized variable is set to true only if the user has been properly authenticated via the hypothetical authenticated_user() function. But if you have register_globals active, anyone could send a GET parameter such as authorized=1 to override this:

<?php // Define $authorized = true only if user is authenticated if (authenticated_user()) { $authorized = true; } ?>