Posts

Git Getting Started

Git is a distributed version control system and is one of the most used version control systems that is used today.
The major difference between Git and any other VCS is that Git takes a picture of what all your files look like at that moment and stores a reference to that snapshot. On ...

Matching Strings in Zend PHP 5

Here is an overview of the matching strings in Zend PHP 5 section when studying for the certification. There are a variety of functions in PHP we can use to compare and match two strings. Below are some examples, such as the equal comparison operators used to compare if two strings are equal.
$string1 = ...

Zend PHP 5 – Strings – HEREDOC & NOWDOC

HEREDOC and NOWDOC are used to specify a string literal. This is covered within the Zend PHP 5 study guide.
HEREDOC
The heredoc syntax uses the operator: <<<. After this operator, an identifier is provided, then a newline. The string itself follows, and then the same identifier again to close the quotation.
<?php
$string = ...

Operators in Zend PHP 5

Here is an overview of the operators in Zend PHP 5 when studying for the certification. Some of these operators are commonly used in PHP and are essential to master.
Arithmetic Operators
Like with most programming languages, the basic arithmetic operators are as follows:

+ (Adding)
– (Subtracting)
* (Multiplying)
/ (Dividing)

You ...

Magento Class Inheritance List

The Magento class inheritance list below represents classes that are used when extending Magento functionality. This includes when defining new classes and the parent classes that they should extend from.
Blocks

Custom blocks should extend the Mage_Core_Block_Template class.
The Mage_Core_Block_Template class in turn extends the Mage_Core_Block_Abstract class.
Mage_Core_Block_Abstract also extends the Varien_Object class.

Magento SUPEE-6788 Admin Routing

Since the release of Magento’s SUPEE-6788 security patch, admin routing for modules need to adhere to new conventions. Part of the patch includes protection for non-default admin URLs against automated attacks.
This means that if you have an admin module that has a URL defined like the following:
It should be changed so that the ...

Zend PHP 5 – Security – Password Hashing API

When storing passwords, the golden rule is to not store them in plain text. PHP provides several functions to hash the passwords.
md5() and sha1()
Hashing algorithms such as MD5 and SHA1 are very fast and efficient. Unfortunately with modern computers, it has become trivial to “brute force” the output of these algorithms to determine ...

Magento 1.9.1 Emails

As of Magento 1.9.1, all e-mails (including order confirmation and transactional) are now queued and sent via a cron schedule. If you have the AOE Scheduler extension installed, you will be able to view the status of the scheduled tasks configured in Magento. The task that is responsible for email queuing can be found within ...

Zend PHP 5 – Security – Cross Site Request Forgery

Cross Site Request Forgery (CSRF) is a type of attack that occurs when a malicious Web site, email, blog, instant message, or program causes a user’s Web browser to perform an unwanted action on a trusted site for which the user is currently authenticated.
URLs on websites can sometimes reflect the actions that they perform. ...

Zend PHP 5 – Security – Configuration

Display Errors
Unless you are in a closed development state, there are certain configuration directive that should be disabled for security reasons. The “display_errors” directive should be disabled, and all error messages should be passed to system log files using the “log_errors” directive.
This prevents your environment from presenting sensitive information to the public.
You ...