Angriffswelle gegen Webserver (”iFrame-Attacken”) – nun auch TYPO3

Angriffswelle gegen Webserver (”iFrame-Attacken”) – nun auch TYPO3: „Schon seit einiger Zeit wird von wiederkehrenden Angriffen auf Webserver berichtet, so etwa in den Pressemeldungen “Groß angelegter Angriff auf Web-Anwender im Gange”, “Weitere Details zu Web-Attack-Toolkit MPack” “Schneeball-Effekt: nur ein anfälliges PHP-Script genügt” und vielen anderen Quellen. In diesen Angriffen werden – zumindest teilweise automatisiert – verschiedene Wege ausgenutzt, um Kontrolle über die Webserver zu erlangen.

Dies hat nun auch TYPO3 (und andere CMS-Systeme) erreicht: Einige Berichte zu solchen Vorkommnissen waren in Foren zu lesen, andere wurden diskret dem TYPO3 Security Team gemeldet. In diesem Artikel möchte ich vorstellen, was davon von allgemeinem Interesse ist.“

(Via TYPO3 Security Blog.)

Zend Framework 1.0.0 production release

Zend Framework 1.0.0 production release: „

I am very proud to announce availability of the first production release of Zend Framework. Many thanks to the scores of PHP developers who have worked for many months to make this product milestone possible. Zend Framework has followed a mission to provide classes that are extremely simple, yet powerful and extensible. Zend Framework is now the best class library available for PHP 5 web application development.“

(Via Zend Developer Zone.)

Yet another one more thing… a new Web Inspector!

Yet another one more thing… a new Web Inspector!:

„As some of you saw last week at WWDC, we have a brand new version of the Web Inspector. We know that a lot people have found the current Web Inspector useful, and we have gotten a lot of feedback and sugestions about how to make it even better. And boy have we been listening! We have taken the current Web Inspector and have added a bunch of new features that you will find invaluable for web development:

  • Completely redesigned interface, no longer a transparent panel
  • Works with any WebView inside third-party applications, not just Safari
  • Supports docking to the inspected page
  • Shows all resources included by the page, sorted into categories
  • Global search through all text-based resources
  • Console to show errors and warnings with live JavaScript evaluation
  • Network panel showing resource load timeline along with HTTP request and response headers
  • Resource size and load time summary graph in the Network panel
  • Syntax highlighted HTML source
  • Inline JavaScript and HTML error reporting

We will be telling you in more detail about all of the great new features in future blog posts.

We have been working on this for a long time, but now we want to get the whole WebKit community involved with making this the best web development tool available. So show up in #webkit or on the mailing list and suggest new ideas or implement them yourself (remember everything is HTML, JavaScript and CSS)!

And there is one more thing… all of this new inspector goodness also works on Windows.

The new inspector is available in the Mac and Windows nightly builds.

New Web Inspector

(Via Surfin‘ Safari.)

Extensions: Static file publishing – 23000% speed gain and cooling the globe

Extensions: Static file publishing – 23000% speed gain and cooling the globe: „Interview with Michiel Roos about TYPO3 performance improvement using static file cache. During a 30+ minute interview and demonstration you will be introduced into the Dark Arts of optimizing TYPO3 performance using static files, mod_rewrite and mod_expires. Learn how to make your site 230 times as fast! Includes comparison of extensions doing more or less the same.
Sponsor: http://www.lightwerk.com/“

(Via TYPO3 Podcast.)