Posts

Mitigating Security Risks in Web Development

Image
Balancing Pure PHP Code and Third-Party Libraries Loading third-party libraries does introduce potential security risks, especially if those libraries are not properly vetted or if they contain vulnerabilities. However, it's not necessarily true that using only pure PHP code is the best approach for security, especially in the context of complex applications like financial applications. Here are some considerations: Code Quality and Maintenance: Third-party libraries are often well-maintained and regularly updated by a community of developers. This means that security vulnerabilities are often identified and patched quickly. However, it's important to keep dependencies up to date to ensure that you're using the latest, most secure versions. Security Audits: Before incorporating any third-party library into a financial application, it's crucial to conduct a security audit. This involves reviewing the codebase for potential vulnerabilities and ensuring that...

Thieves could be stealing money from contact-less cards while you have it in your pocket

Image
Thieves could be stealing money from contact-less cards while you have it in your pocket contact-less cards without providing the option for their customers to opt out of contact-less card. So far banks are providing a good service to their customers so far with credit cards. That is of course for a person with the ability to maintain their credit and control their spending, it is a really a great service where you don´t have to carry cash every where you go and specially for emergencies. ...'> contact-less cards without providing the option for their customers to opt out of contact-less card. So far banks are providing a good service to their customers so far with credit cards. That is of course for a person with the ability to maintain their credit and control their spending, it is a really a great service where you don´t have to carry cash every where you go and specially for emergencies. ...'> I am sure you may have seen, ...

Be aware, your smart phone may be saving all your activities on cloud without you knowing

Image
Be aware, you smart phone may be saving all your activities on cloud without you knowing (Web App Activity) !! What does web activity do ? If Web & App Activity is turned on (by default this option is turned on), what you search and other app activities are from Google services are saved in your Google Account. And as per Google explanation it is saved to give you more " personalized experiences, like faster searches and more helpful app and content recommendations" . '> What does web activity do ? If Web & App Activity is turned on (by default this option is turned on), what you search and other app activities are from Google services are saved in your Google Account. And as per Google explanation it is saved to give you more " personalized experiences, like faster searches and more helpful app and content recommendations" . '> What does web activity do ? If Web & App Activity is turne...

Adding Payment Gateway to your web site (Payment Gateway API)

Image
Adding Payment Gateway to your web site (Payment Gateway API) A typical Payment gateway API enables a web site (application developers) to efficiently enable and add credit card transaction processing capabilities to their products /shopping carts. Due to it´s need for the level of security, APIs are mainly developped as the C/C++ libraries. It is objectified in such a manner that can be used directly from C++ code or it can be wrapped using a high level scripting languages such as Perl and PHP that will give easy access to the libraries thus allowing web services running on Unix or Windows based operating systems, to enabe payment gateways. However, gateways have gone a step further by web service that can be enabled just by wrapping payment UI using a JavaScript from the gateway server. where gateway server provides an API to communicate along with JavaScript wrapper to tokenize the payment information where token needs to be used with...

Full Stack of web services & How you choose your components !!

Image
Full Stack of Web Services and How you choose your components !! The front or the client side is mainly user-interface of the web application that the user interacts with the system. Usually built with language tools such as HTML, CSS, JavaScript, Libraries etc. However there are exceptions. Then again, the back end of the stack handles the data provided by the client and processes, and makes the connection between repositories+engines and the clients or the front end interface. Basically the web server/cloud that consists of servlets and repositories, that will use different programming languages like PHP, Python, Java, Perl, CGI, C,C++, Micro Languages etc, along with servers like : Apache The Apache HTTP Server, colloquially called Apache, is a free and open-source cross-platform web server software, released under the terms of Apache License 2.0. Apache is developed and maintained by an open community of developers under the auspices of the Apache Software Foundation...

Apache vs Nginx

Image
Yes, its about web servers. Starting from Netscape we have come across many web servers which came in to the picture while all Microsoft based web servers has failed miserably, due to its OS failures, Unix based, servers have survived like the OS its self, And Apache has been in use for multiple decades with lease number of problems. However there is a new kid on the block Nginx yes engin X , trying to take a chunk of Apache market. So how do we find which is better. It is not that straightforward, because both servers has good and bad features. Architecture : But one major difference is that Apache is pure multi threaded system where load balancing is mostly being transferred to the OS to decide how load should be done, where lot of control is given to admins to do manual adjustments. But Nginx on the other hand its event driven, where one might panic that ohh servers will get stuck. No its not, it basically takes care of the load by ...