Notes on Web and Mobile App Development

https://www.acunetix.com/websitesecurity/upload-forms-threat/ https://owasp.org/www-community/vulnerabilities/Unrestricted_File_Upload Some way to create vulnerability files like image with PHP code in comments, descriptions ... ImageTragick! https://help.shopify.com/en/manual/orders/fraud-analysis Beating getimagesize() The getimagesize() function will check if it is an image and will check “mime” to verify image type. Insecure Configuration :  <FilesMatch ".+\.ph(p([3457s]|\-s)?|t|tml)">  SetHandler application/x-httpd-php  </FileMatch> Secure Configuration :  <FilesMatch ".+\.ph(p([3457s]|\-s)?|t|tml)$">  SetHandler application/x-httpd-php  </FileMatch> If the service is up an running with the Insecure Configuration, any one can beat the getimagesize function by writing comments in GIF file. For that an end user need to install an utility in Kali/Ubuntu OS named ‘gifsicle’  For Kali Linux : apt-get install gifsicle  For ...

http://download.music-eclub.com/midradio/detail_m_x.php Mac version seem not work since it's too old. Window 7 work well even though font break (we often not install Japanese fonts). Tried many online and offline video/audio converter but no luck. https://www.file-extensions.org/smaf-tools-file-extensions#desc https://www.file-extensions.org/convert-mmf-to-mp3 https://www.fmjsoft.com/awavestudio.html#main

 https://serverfault.com/questions/968402/load-specific-php-module-for-directory-apache-2-4-centos-7 You can't load two different PHP modules at the same time. Full stop. This is why you must use php-fpm to run different PHP versions. https://medium.com/@pushpendrachauhan/how-migrating-apache-mpm-from-prefork-to-event-based-using-php-fpm-saved-our-day-8a6e371d94fd => note more https://forums.aws.amazon.com/thread.jspa?threadID=283215 https://stackoverflow.com/questions/30446904/how-to-allow-custom-built-scan-this-dir-for-additional-ini-files-php-ini-file https://www.php.net/manual/en/configuration.file.php The configuration file ¶ The configuration file (php.ini) is read when PHP starts up. For the server module versions of PHP, this happens only once when the web server is started. For the CGI and CLI versions, it happens on every invocation. php.ini is searched for in these locations (in order): https://github.com/brefphp/bref/issues/355 AWSTemplateFormatVersion: '2010-09-...

https://martinfowler.com/articles/testing-culture.html  It’s likely that the programmer who wrote this algorithm the first time did execute the program to check for errors in the new code. Most programmers will run a program with some sample inputs to verify that it’s doing what they think it should do. The problem is that these runs are often ephemeral and thrown away once the code is working; an automated test captures those runs as a permanent double-check. - Yeah many time (often in legacy) code that I write some precious test and then have to clean it after done to push to Git. That permanent double-check is important here: We don’t know exactly how that rogue second goto fail got into the code; a likely reason is that it was the result of a large merge operation. When merging a branch into the mainline, large differences can result. Even if a merge compiles, it can still introduce errors. Inspecting such merge differences can be time-consuming, tedious, and error-prone , even...

Follow this post: https://gamengineering.blogspot.com/2018/07/libgdx-tutorial-setup-admob-ads.html https://github.com/libgdx/libgdx/wiki/Admob-in-libgdx Errors and solutions: W/Ads: Received error HTTP response code: 400 => Need config payment in AdMobs account (have to wait for verify/review). Debug test Ads: Banner Ads: https://developers.google.com/admob/android/banner "The easiest way to load test ads is to use our dedicated test ad unit ID for Android banners: ca-app-pub-3940256099942544/6300978111 " Config test Device: public class GameLauncher extends AndroidApplication implements AdsController {   protected void onCreate (Bundle savedInstanceState) { AndroidApplicationConfiguration config = new AndroidApplicationConfiguration();         new RequestConfiguration.Builder().setTestDeviceIds(Arrays.asList("A61E7BBD2BF92F8BA1FXXXXYYYY")); https://support.google.com/admob/answer/10589757?hl=en https://stackoverflow.com/questions/67434312/can-i-still-use-sma...

https://github.com/flutter/flutter/issues/24287 https://www.codenong.com/cs110440941/ This guy explained in some Chinese, mean that you can fix it either by remove setting Orientation or tweak transparent setting. Two problems encountered in android 8.0 (API=26) adaptation (Horizontal screen orientation problem) (1) Remove android:screenOrientation; (Theme style) (2) android:windowIsTranslucent is changed to false; if you need a transparent setting, add android:windowDisablePreview =true; Create values-v26  /  styles.xml  in the res directory of the project  ; 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 <?xml version="1.0" encoding="utf-8"?> <resources>     <style name="AppTheme.Splash" parent="AppTheme">         <item name="android:windowActionBar">false</item>         <item name="android:windowNoTitle">true</item>         <item name="android:windowFullscreen"...

https://martinfowler.com/articles/nonDeterminism.html Eradicating Non-Determinism in Tests non-deterministic tests - tests that sometimes pass and sometimes fail. Left uncontrolled, non-deterministic tests can completely destroy the value of an automated regression suite. In this article I outline how to deal with non-deterministic tests. Initially quarantine helps to reduce their damage to other tests, but you still have to fix them soon. Therefore I discuss treatments for the common causes for non-determinism: lack of isolation, asynchronous behavior, remote services, time, and resource leaks.  Footnotes 1: Yes, I know many advocates of TDD consider that a primary virtue of testing is the way it drives requirements and design. I agree that this is a big benefit, but I consider the regression suite to be the single biggest benefit that automated tests give us. Even without TDD tests are worth the cost for that. 2: Sometimes, of course, a test failure is due to a change in what the...