The Hacker's Handbook: The Strategy Behind Breaking into and Defending Networks

Download

• Publisher:   AUERBACH
• Number Of Pages:   896
• Publication Date:   2003-11-24
• Sales Rank:   469262
• ISBN / ASIN:   0849308887
• EAN:   9780849308888
• Binding:   Hardcover
• Manufacturer:   AUERBACH
• Studio:   AUERBACH
• Average Rating:   4
• Total Reviews:   5

Description:
This guide reveals the technical aspects of hacking that are least understood by network administrators. It analyzes subjects through a hacking/security dichotomy that details hacking maneuvers and defenses in the same context. Chapters are organized around specific technical components and administrative tasks, providing theoretical background that prepares network defenders for the always-changing and creative tools and techniques of intruders. This book is divided into three parts. Part I introduces programming, protocol, and attack concepts. Part II addresses subject areas (protocols, services, technologies, etc.) that may be vulnerable. Part III details consolidation activities that hackers may use following penetration.

Date: 2005-07-19 Rating: 2
Review:
It wasn't what I expected.

I found they print of the book isn't practical, pages too closed to each other. It speaks about Windows2000 exploits and tools used to hack into it, while Windows2003 is out from a while; but no one can deny the book had usefull things in it.

Date: 2004-09-03 Rating: 5
Review:
The Definitive Guide to Computer Security

Susan has presented a thorough guide to computer security and how to guard against internal and external vulnerabilities. She allows the reader to get inside the mind of both the nefarious hacker and the seasoned defender.

Recommended for the beginner through the advanced security consultant.....

Date: 2004-04-15 Rating: 5
Review:
Make sure you have a copy of this handbook close at hand!

...This book covers a wide array of topics, focusing on three aspects of each topic: technical background, hacking, and security. The coverage is both comprehensive and practical. The book explains the technical and conceptual foundations of computer security. Its information is organized in a way that makes it easy to find material relevant to any questions you may have regarding hacking and security. And every chapter points to additional materials if you want to investigate further.

You'll learn all about the anatomy of various types of attacks, including the five elements of attack strategy: reconnaissance, mapping targets, system or network penetration, denial-of-service, and consolidation. You'll also learn about the tools you'll need to defend your network, how they all work within a security framework, and the strengths and weaknesses of each. Included are tools for the purposes of access control, authentication, auditing, privacy, intrusion detection, data integrity, and more.

If you are a network or security administrator, protecting your network's integrity is one of your most important tasks. Before you begin your chess match with the world's hackers, make sure you know the rules, the tools, and the possibilities of the game. Make sure you understand the strategies that will be used against you and that you can use against your opponents. Make sure you have a copy of The Hacker's Handbook close at hand. Hey, I do! - Raffiudeen Illahideen, IL, USA

Date: 2004-02-26 Rating: 4
Review:
Good solid work

"The Hacker's Handbook" is a comprehensive and entertaining volume on security. It has most of the defining traits of a great book, such as clearly stated goal (authors realize that lots of security books are out there and one needs to differentiate) as well as some unique content on application attacks.

The book is a technically sound volume, I found very few factual mistakes. I found some interesting content on central auth servers such as radius, which I haven't seen described well elsewhere. Defensive tool info is a bit jumbled and not new. For example, IDS coverage is too non-specific to be useful. I also found a couple of other chapters a bit weak on interesting content.

The book covers the security field on many levels - from concepts to scripts - and can be successfully used by entry-level people as well as experts. The book is better suited for technologists rather than managers. Security analysts/admins, hands-on security managers, security savvy system and network admins, students of computer security can benefuit from a book.

Anton Chuvakin, Ph.D., GCIA, GCIH is a Senior Security Analyst with a major security information management company. He is the author of the book "Security Warrior" (O'Reilly, 2004). His areas of infosec expertise include intrusion detection, UNIX security, forensics, honeypots, etc. In his spare time, he maintains his security portal info-secure.org

Date: 2003-12-24 Rating: 5
Review:
Great Book

I am a computer security consultant and I think this book is great. I found it complete and through. I would highly recommend it. It is like 800 plus pages. I wonder how many keyboards got worn out authoring this outstanding work.

Read more»

PC Magazine Fighting Spyware, Viruses, and Malware

Download

• Publisher:   Wiley
• Number Of Pages:   382
• Publication Date:   2004-12-31
• ISBN-10 / ASIN:   0764577697
• ISBN-13 / EAN:   9780764577697

Description:
Think there's no malicious software on your computer? PC Magazine thinks you should think again.

Scans by ISPs have revealed as many as twenty-eight spyware programs running on the average home computer--like yours. That's a lot of people prying into what's on your PC, and a DSL or cable connection is a virtual welcome mat. But by following Ed Tittel's advice, you can learn how invasions occur, spot an infestation, repair damage that's already done, and slam the door on those who want to hijack your PC--along with your wallet.

Here's how you can
* Learn to recognize when a Trojan horse, a virus, adware, or spyware has invaded your PC
* Get the tools that can cure an infection
* Dig into the Windows Registry to remove the nastiest of bugs
* Prevent a recurrence with personal firewalls and protective software
* Deal with the onslaught of spam
* Keep your defenses up-to-date

Give it the boot
If you believe you've caught something and you're willing to kiss everything goodbye that you've added to or changed ... since the last time you booted up your computer ... try this. While Windows is first booting up, hit the F8 key .... Choose the Last Known Good Configuration option, and Windows should boot running the version of the Registry that existed the last time your system booted--that is, before you got infected.
-- From Chapter 4

Summary: Simply the Best
Rating: 5
I normally like to write some detailed reviews but not on this book.

If you really want a fast read broken down into areas that let you know how the bad guys are screwing with your computer AND you buy this book.

You will learn what spyware, malware, viruses and trojans are and the best ways-products to use. No second guessing and in fact this book should be required reading for all American students.

On average I find about 35 instances of pests per PC I work on so do yourself a favor. If you want to learn more in detail, get this book.

And don't forget as Red Green says, "if the women don't find you handsome they should at least find you handy".
Mike


Summary: Wordy but helpful
Rating: 5
This book gives alot of information, probably more than most will want to read. But if you can wade through all of it you will find some very useful information. It is very techinical information. It does however provide an indepth explanation of how viruses, hijackers, etc work and what you can do to protect yourself. Overall it is a great buy with very much useful info.

Summary: fighting malware
Rating: 5
Tittel can certainly unsettle the reader! He warns of the increasing encroachments against your computer. The biggest single danger is that this might be your home computer. Not a computer at your workplace, for which you might be able to ask a sysadmin for help.

So it's you and Tittel against the 3 menaces. Be aware that the terminology in the text and title may vary from what others use. Often, malware is taken to include viruses. I think he chose to break viruses out separately from malware so that the title would outreach to more people. Malware is still somewhat of a techie term, while spyware and viruses have broader recognition.

Naturally, since we're discussing personal computers, the text tends to focus on those running a Microsoft operating system. But in fact, much of his advice applies to Macs and linux/unix machines. Though users of the former 2 types might take heart in knowing that most viruses or worms won't go after their machines.

Tittel explains that increasingly, it's harder to draw clear lines between malware, spyware and adware. But he shows how to use existing anti-malware products that can scan for these and remove them. These products use combinations of signatures of known malware, and also search for "strange" activity that is typical of malware. However, since new variants of malware are continually being developed and found, you should always download the latest sets of signatures from your vendor, before running the tests.

Tittel also gives a succinct description of phishing. A particularly virulent type of malware that has increased enormously in the last 2 years. He suggests that you scrutinise the links and be very wary of any message that asks for personal information; either in a reply, or in a web page pointed to from that message. Unfortunately, the phishers continue to refine their tactics and many users simply aren't savvy enough to follow Tittel's suggestions. These users may be a minority, but there are enough of them to make this worthwhile for the phishers.

Summary: Good Overall Viewpoint
Rating: 5
Any of us connected on-line for even a few minutes has probably been the recipient of at least one virus attack.

Not only viruses, but many other kinds of intrusive software would like to come into your machine for its own purpose. This book talks about the major kinds of invasions you might expect and how to prevent them from entering your machine.

Most of us have learned about viruses the hard way, we cought them and then had to learn how to clean the system. Here in one book is a complete introduction to the problem. It covers all the common types of problems a PC is likely to encounter in one place.

Read more»

Hacker Disassembling Uncovered

Download

• Publisher:   A-List Publishing
• Number Of Pages:   600
• Publication Date:   2003-04-01
• ISBN-10 / ASIN:   1931769222
• ISBN-13 / EAN:   9781931769228
• Binding:   Paperback

Description:
Going beyond the issues of analyzing and optimizing programs as well as creating the means of protecting information, this guide takes on the programming problem of, once having found holes in a program, how to go about disassembling it without its source code. Covered are the hacking methods used to analyze programs using a debugger and disassembler. These methods include virtual functions, local and global variables, branching, loops, objects and their hierarchy, and mathematical operators. Also covered are methods of fighting disassemblers, self-modifying code in operating systems, and executing code in the stack. Advanced disassembler topics such as optimizing compilers and movable code are discussed as well.

Text shows how to analyze programs without its source code, using a debugger and a disassembler. Covers hacking methods including virtual functions, local and global variables, branching, loops, objects and their hierarchy, and mathematical operators. For intermediate to advanced level programmers.


Summary: Delivers what others promise
Rating: 5
This has the most straightforward exposition of exploits.
I used the info as the basis of a testing framework.
Kris knows his stuff and shares. This book delivers,
but make sure you've got you're brain on and be
prepared to find and use the external resource.

you don't absolutely need the tools he suggests
for all the exploits covered, but they will make
the task a lot easier, and are therefore worth it
for the time they save you writing your own.
This book is aimed at professional's.


Summary: Excellent book, highly recommended!
Rating: 5
This book is fantastic- one of a kind, by far :)
Provided you've covered the basics, x86 assembly language- and C++, this book will teach you some of the absolute essential skills required in reversing commercial-level software. This book isn't a toy- it's the real thing, for serious programmers, researchers and experts in the field.

It has a step by step introduction- and builds firmly upon previous chapters- covering various compilers; and how they generate serveral of the common constructs found in Higher Level languages. The section of Virtual Functions is a dime; combined with structures, arrays and many other important elements.

A lot of work has gone into this book, and it definately shows.

One reviewer gave this book a low rating, and claimed- "I had a no luck getting SoftICE to run correctly on Windows XP". That has got nothing to do with the author of the quality of this book. If you searched[..], you'll find there exists several patches you can get to make it run on Windows XP; IDA pro is availible commercially aswell, and dumpbin is provided with Visual Studio.

It's an absolute winner for those wanting to go deeper into the core of computers/software.


Summary: fair intro to disassembly
Rating: 3
I give the author credit for a decent intro to disassembly, but it's a difficult path with this book. Expensive tools are assumed to be available (no reference is made to free alternatives), and less than subtle remarks about using these tools to make commercial software "free".

Later chapters do get more in-depth, and more useful.


Summary: Step-by-step
Rating: 5
The best part about this book is that besides all of the neat tricks it gives you, the layout is step-by-step. You can sit down with it using the CD and go through each exercise. I have recommended this book to all of my friends/co-workers that are either learning how to protect software they write to how to identify vulnerabilities in other programs. Knowing assembly helps, but this also presents it in a way that you can learn as you go.


Summary: Excellent introduction to the subject
Rating: 4
Copy protection schemes are to software as locks are to doors: they keep honest people out. This book provides the first insight into the science of disassembling object code for the reader who has been disinclined to search for hacker web sites and zines.

With a topic this large, the author can be forgiven for presenting only a limited set of examples: C, C++, Pascal on Windows. He shows how to use commercial tools to disassemble object code into assembler and how to identify program structures there, with particular emphasis on language features that produce non-intuitive structures.

Topics covered include: cracking passwords, identifying key structures in high level languages (the bulk of the book) and how to make your code difficult to analyse using these methods.

The structures examined include IF-THEN-ELSE, SWITCH-CASE-BREAK, objects, structures, arrays, constants, offsets and variables. The reader is shown how to recognise these objects. Explanations are complete and involve no handwaving.

A good solid introductory text.

Read more»

SQL FOR DUMMIES

Download

Description:
The soup-to-nuts guide on all things SQL!SQL, or structured query language, is the international standard language for creating and maintaining relational databases. It is the basis of all major databases in use today and is essential for the storage and retrieval of database information.

This fun and friendly guide takes SQL and all its related topics and breaks it down into easily digestible pieces for you to understand. You’ll get the goods on relational database design, development, and maintenance, enabling you to start working with SQL right away!Provides an overview of the SQL language and examines how it is integral for the storage and retrieval of database informationIncludes updates to SQL standards as well as any new featuresExplores SQL concepts, relational database development, SQL queries, data security, database tuning, and moreAddresses the relationship between SQL and programming as well as SQL and XMLIf you’re looking for an up-to-date sequel to the bestelling first edition of SQL All-in-One For Dummies, then this is the book for you!

Read more»

Advenced XML Applications

Download

• Publisher:   Course Technology PTR
• Number Of Pages:   384
• Publication Date:   2006-12-19
• ISBN-10 / ASIN:   1598632140
• ISBN-13 / EAN:   9781598632149

Product Description:
Numerous books abound for the beginning programmer who wants to learn XML, but there are few learning resources available for those who are already proficient in XML and need expert-level advice to help maximize their workflow. Advanced XML Applications from the Experts at The XML Guild provides such a resource, written by the expert programmers at The XML Guild. The book is not intended to be another exhaustive XML "bible," rather, it’s a collection of advanced tips and techniques that the authors have used in the real world-and are now happy to share with you. Each chapter is written by the guild member considered to be the expert on a particular topic.

Summary: Excellent book, clearly written and presented
Rating: 5
I acquired a copy of this book at the XML-In-Practice 2008 conference, and read it on the plane on the way home. It's very clearly written and well laid out, making it possible to read just the bits that you need and skim the rest.
I'd recommend this to anyone working with XML.

Read more»

Programming ASP.NET AJAX: Build rich, Web 2.0-style UI with ASP.NET AJAX

Download

• Publisher:   O'Reilly Media, Inc.
• Number Of Pages:   473
• Publication Date:   2007-09-18
• ISBN-10 / ASIN:   0596514247
• ISBN-13 / EAN:   9780596514242
• Binding:   Paperback 

Description:
Delivering rich, Web 2.0-style experiences has never been easier. This book gives you a complete hands-on introduction to Microsoft ASP.NET AJAX 1.0, the new framework that offers many of the same benefits for Ajax development that ASP.NET provides for server-side development. With Programming ASP.NET AJAX, you'll learn how to create professional, dynamic web pages with Ajax in no time.

Loaded with code and examples that demonstrate key aspects of the framework, this book is ideal not only for ASP.NET developers who want to take their applications a step further with Ajax, but for any web developers interested in ASP.NET AJAX, no matter what technology they use currently. That includes JavaScript programmers who would like to avoid the headaches of writing cross-browser code.

Programming ASP.NET AJAX offers you: A high-level overview of the ASP.NET AJAX framework Functional code that you can cut and paste for use in your own applications The essentials of JavaScript and Ajax to help you understand individual technologies used by the framework An organization that reflects the framework's packages, including Extensions, Control Toolkit, the Futures CTP, and the AJAX Library Sidebars throughout the book that identify and propose solutions to potential security breaches Ways to use the standards-based AJAX Library with other platforms, such as PHP A complete chapter on the UpdatePanel control for making individual parts of a web page independently updateable -- one of the framework's most important elements Released previously as Programming Atlas to cover the beta version of the Microsoft framework, this edition is fully up-to-date and expanded for the official 1.0 release of ASP.NETAJAX. Written by Christian Wenz -- Microsoft MVP for ASP/ASP.NET and AJAX Control Toolkit Contributor -- Programming ASP.NET AJAX contains many hard-to-find details, along with a few unofficial ways to accomplish things.

Read more»

Developing Web Application with Visual Basic.NET and ASP.NET

Download

By John Alexander, Billy Hollis

---

• Publisher: Wiley
• Number Of Pages: 400
• Publication Date: 2002-04-15
• ISBN-10 / ASIN: 0471085170
• ISBN-13 / EAN: 9780471085171
• Binding: Paperback

Book Description:

John Alexander and bestselling author Billy Hollis show programmers how to develop enterprise-level Web applications using Microsoft's popular programming language—Visual Basic.NET.

• Features the incomparable insights and programming know-how of two popular Microsoft insiders, arming developers with proven tips and workarounds to use in their own projects
• Provides step-by-step instruction for creating business Web applications using ASP.NET and VB.NET
• Companion Web site contains all the code for the sample application

---

Summary: Good but needs an update
Rating: 3
This book gave me a good understanding of the methodology of ASP.NET as well as the concepts behind it. The organization of the book is good for someone new to ASP.NET and C# as it starts simple and proceeds forward in a logical manner to more complex topics.

However, I agree with a previous reviewer that an updated version or an errata page on the publisher's web site are sorely needed. This too kept me from giving it 5 stars.

This book was started with a pre-release of Visual Studio.NET 2002 so the example code won't match the code you generate yourself; most people should be able to figure out which parts of the sample code are relevent. A few of the samples won't work as-is but that shouldn't stop experienced programmers from figuring out how to get it to work.


Summary: Good stuff
Rating: 5
I found this book to be very helpful! It is an excellent source of information for the VB6 developer making the transition to .NET. The OOP chapter was great. It's great for learning to use the IDE and other related features. In reference to the last review: I found that there are revisions and a feedback loop available at the website.


Summary: Good info, poor proofreading
Rating: 3
I read this book cover to cover, and worked through virtually all the examples. There's a lot of good information here, but proofreading is poor, and more information is needed to get some of the more complex sample code (provided at the author's web site) operational on one's local machine. That's rather frustrating after making a large investment in studying the text.
Most of the textual content of the book is well-written and helpful. Chapter 6, "Using ASP.NET Web Controls", is a bit garbled and buggy.
The web page for downloads related to the book currently has no errata section, in spite of the existence of plenty of errata. Perhaps one reason there is no list is that no easy way is provided to contact the authors or publisher with bug reports.
For a five-star rating from me this book would need:
(1) Another proofreading pass, with emphasis on making sure code examples work (with thought given to conditions on local machines that might cause particular ones not to work); and
(2) An active feedback loop between readers and the author. A discussion forum for reader-to-reader interaction would be helpful, too.


Summary: Thanks for a Fantastic Read!!!
Rating: 5
This was a delightful book to read. I am a very seasoned VB6/ASP Developer who is about to get his feet wet with .NET. Your book provides the direction I need to make a comfortable transition...Your examples were of the level I anticipated, and your dialog made it very easy to follow along.
My hat goes off to all of the authors who created this very readable and worthwhile book! Thanks so much!


Summary: Excelente Book
Rating: 5
I preordered and received it on April 12,2002.
Hasta ahora el libro esta excelente. El Capitulo de "Object-Oriented Changes in Visual Basic" esta tan bueno que vale lo que pesa en oro.
Nunca habia visto una explicacion de Programacion Orientada a Objeto tan facil de entender; con ejemplos tan claros.
El libro no es grande asi que se puede leer en un par de semanas.
El precio esta muy bueno tambien.
Eso si, debes tener idea de como programar en VB6 para que puedas entender las diferencias con VB.NET.

Read more»

Visual Basic Developer's Guide to Asp and IIS (Visual Basic Developer's Guides)

Download

By A. Russell Jones

---

• Publisher:   Sybex Inc
• Number Of Pages:   416
• Publication Date:   1999-09
• ISBN-10 / ASIN:   0782125573
• ISBN-13 / EAN:   9780782125573
• Binding:   Paperback

Summary: Hoping for instant karma...
Rating: 1

I am a programmer. I currently develop in Visual Basic, HTML, CSS, Javascript, and VBscript. I purchased this book in order to learn ASP, and I've struggled through the first six chapters. I must tell you that, so far, the "book" is garbage. The examples are mismatched (i.e., the pictures don't match their descriptions), and the exercise projects don't work. I followed the examples word for word, line by line, only to find that after the exhausting effort, I accomplished nothing. I thought perhaps it was me at first, but after I downloaded the sample code from the Sybex website, I found it to be identical with the code I had written. When I tried to run the code I downloaded (presumably, this code was written by the author of the book), it also did not work. Chapter 5 in particular is overflowing with errata, only one of which is addressed in the Errata section of the Sybex website. I don't mind telling you, Mr. Jones, that I feel cheated...I hope you are enjoying the [money] that I paid for this doorstop. I could go on all day about this POS, but I must now go down to the bookstore and try my best not to get swindled again.

Summary: Not too shabby
Rating: 4
This was a pretty good book for someone experienced with Internet content delivery and Visual Basic but not both together.
It allowed me to tie my knowledge of both together and often resulted in a lot of lightbulbs over my head.
If you're a VB developer who would like to leverage your skill to get into web development, I'd highly recommend you grab this book.

Summary: good, but caveat emptor...
Rating: 3
This book has been very useful to me so far--the author seems to have a good grasp of the subject. The issue I have is with the code downloads from the Sybex website--it seems to contain a lot of errors--the code for chapter 7 is especially bad. Also, I wish the auther had not included so much ADO in the book; while I understand that ADO was relatively new when the book was written, I do not feel that it was necessary to include so much of it, since the author says the book is for those who already know VB well. As a result I've had to waste a lot of time tweaking the database code to get it to work with my system, and I haven't learned anything new from doing that.

Summary: good, but caveat emptor...
Rating: 3
This book has been very useful to me so far--the author seems to have a good grasp of the subject. The issue I have is with the code downloads from the Sybex website--it seems to contain a lot of errors--the code for chapter 7 is especially bad. Also, I wish the auther had not included so much ADO in the book; while I understand that ADO was relatively new when the book was written, I do not feel that it was necessary to include so much of it, since the author says the book is for those who already know VB well. As a result I've had to waste a lot of time tweaking the database code to get it to work with my system, and I haven't learned anything new from doing that.

Read more»

Eclipse Rich Ajax Platform: Bringing Rich Client to the Web (Firstpress)

Download

By Fabian Lange

• Publisher:   Apress
• Number Of Pages:   148
• ISBN-10 / ASIN:   1430218835
• ISBN-13 / EAN:   9781430218838

Product Description:

Eclipse Rich Ajax Platform (RAP) is an innovative toolkit for developing applications that will run as rich clients as well as web applications. Eclipse Rich Ajax Platform is the first book on the new Eclipse RAP, and it introduces the required RCP and OSG/i concepts used by Eclipse RAP.
This firstPress title demonstrates the functionality and benefits of Eclipse RAP as well as shows the sweet spots of RAP, especially focusing on single sourcing RCP and web applications, which can be a huge cost saver.
This book also covers possible issues that might prevent you from successfully deploying RAP.

• Describes Eclipse RAP concepts and its underlying technology
• Explains key features of RAP
• Shows case studies where RAP works and where it won’t

What you’ll learn

• Understand what the purpose of RAP is.
• Learn what is required to deploy RAP applications.
• Get to know how to utilize RAP features.
• Develop single sourced RCP and web applications.
• Solve issues when migrating a RCP application to RAP.
• Determine when to use RAP or when to choose a different framework.

Who is this book for? This book is suitable for IT managers, technical leads, and developers. While the focus is on concepts and understanding the technology, developers can also find insights on how to solve specific issues. For IT managers, it shows how RAP is able to save development costs, but also presents limitations of the framework. The reader is expected to have at least basic Eclipse RCP knowledge and some complementary Java or web application development experience.

Summary: A good introduction to a new Eclipse Technology
Rating: 4
I've been following Eclipse RAP since I first saw the demo at EclipseCon 2008. The technology is very promising and the emphasis on single-sourcing is a time saver. This book is an introduction to Eclipse RAP. Don't expect an in depth review of the technology.

Chapters on how RAP is setup relative to the whole Eclipse Platform stack and comparison to Eclipse RCP is very helpful. In addition chapter that covered whether RAP will work for a particular projects was something I was interested in. I especially liked the example RAP application that author walks you through so you can get started using RAP pretty quickly.

So, if you are looking for a in depth discussion of RAP technology this is not the book yet. It is a book for someone who is not sure if the technology will work for a particular project and wants q gentle introduction. I do look forward to more in depth book on Eclipse RAP as it promises to be a very interesting technology to use.

Also, the book would have been half the size if font that was used would not have been 13 or 14 px - seems too big for me.

Read more»

Plug-In PHP: 100 Power Solutions: Simple Solutions to Practical PHP Problems

Download

• Publisher:   McGraw-Hill Osborne Media
• Number Of Pages:   384
• Publication Date:   2010-02-18
• ISBN-10 / ASIN:   0071666591
• ISBN-13 / EAN:   9780071666596 

Product Description:
100 power solutions to real-world problems
This practical guide gives you 100 ready-to-run PHP functions for solving most of the main problems you encounter when building a dynamic website with PHP. Every plug-in in the book offers a complete and working solution for a result you can achieve right away, using ready-made code you simply drop into your own program. And there’s little or no learning curve, because each one is self-contained and thoroughly documented.

Plug-in PHP is packed with programming tips and suggestions for further adapting the functions to your own needs, and even breaks down all the variables, arrays and functions used by each into at-a-glance tables, accompanied by a screen grab of every function in action. This makes the book extremely easy to use, even for complete beginners to PHP programming.

A plug-in for every need
No matter what cookbook-style solutions you’re looking for, you’ll find the perfect functions in this book, and you can have them up and running in just a couple of minutes. For example, here’s the complete list of plug-ins which, while comprehensive, simply doesn't do justice to the depth and breadth of help, information, and practical code provided in this book:
Wrap Text; Caps Control; Friendly Text; Strip Whitespace; Word Selector; Count Tail; Text Truncate; Spell Check; Remove Accents; Shorten Text; Upload File; Resize Image; Make Thumbnail; Image Alter; Image Crop; Image Enlarge; Image Display; Image Convert; GIF Text; Image Watermark; Relative to Absolute URL; Get Links from URL; Check Links; Directory List; Query Highlight; Rolling Copyright; Embed YouTube Video; Create List; Hit Counter; Referer Log; Evaluate Expression; Validate Credit Card; Create Captcha; Check Captcha; Validate Text; Validate E-mail; Spam Catch; Send E-mail; BB Code; Pound Code; Check Links; Get Title from URL; Auto Back Links; Create Short URL; Use Short URL; Simple Web Proxy; Page Updated?; HTML to RSS; RSS to HTML; HTML to Mobile; Users Online; Post to Guestbook; Get Guestbook; Post to Chat; View Chat; Send Tweet; Send Direct Tweet; Get Tweets; Replace Smileys; Replace SMS Talk; Add User to DB; Get User from DB; Verify User in DB; Sanitize String; Create Session; Open Session; Close Session; Secure Session; Manage Cookie; Block User by Cookie; Create Google Chart; Curl Get Contents; Fetch Wiki Page; Fetch Flickr Stream; Get Yahoo! Answers; Search Yahoo!; Get Yahoo! Stock News; Get Yahoo! News; Search Google Books; Convert Currency; Ajax Request; Post Ajax Request; Get Ajax Request; Protect E-mail; Toggle Text; Status Message; Slide Show; Input Prompt; Words from Root; Predict Word; Get Country by IP; Bypass Captcha; Get Book from ISBN; Get Amazon Sales Rank; Pattern Match Word; Suggest Spelling; Google Translate; Corner GIF; Rounded Table; Display Bing Map

Real world solutions
Plug-in PHP has everything you need for processing text; image uploading and manipulation; content management; forms and user input; integrating your website with others; creating chat and messaging services; using MySQL; managing sessions and cookies; dealing with APIs; RSS; and XML; integrating with JavaScript and Ajax; accessing geo-location; spell checking and language translation; and a great deal more.

Written by PHP expert with many years of experience developing websites in PHP and writing about PHP development, this invaluable resource draws on the author’s personal toolkit of solutions built up over the years. This means they are fast, tried-and-tested functions that have been proven to work in the real world, and they will work for you too.

Summary: Taking PHP to the Next Level
Rating: 5
A well laid-out book that serves both as a textbook and reference manual. The author, Robin Nixon, keeps your interest by introducing plug-ins adaptable for today's world of webs, should you be seeking how-to information on such things as RSS feeds, Twitter, chat rooms, and more.

Throughout the book, Mr. Nixon applies security measures to prevent hacks nad spam from affecting your website. His use and explanation of Regular Expression have helped me understand its power better.

Should you have a problem with any of the examples and/or plug-ins, help is only an email away. Robin Nixon has responded quickly to every question I've put to him.

I recommend this book to be added to anybody's library who has a working interest in web development.

Read more»

SQL Injection Attacks and Defense

Download

SQL Injection Attacks and Defense
By Justin Clarke

• Publisher:   Syngress
• Number Of Pages:   474
• Publication Date:   2009-05-15
• ISBN-10 / ASIN:   1597494240
• ISBN-13 / EAN:   9781597494243

Product Description:
SQL injection represents one of the most dangerous and well-known, yet misunderstood, security vulnerabilities on the Internet, largely because there is no central repository of information to turn to for help. This is the only book devoted exclusively to this long-established but recently growing threat. It includes all the currently known information about these attacks and significant insight from its contributing team of SQL injection experts.

What is SQL injection?-Understand what it is and how it works
Find, confirm, and automate SQL injection discovery
Discover tips and tricks for finding SQL injection within the code
Create exploits using SQL injection
Design to avoid the dangers of these attacks

Summary: Tour de Force Coverage of SQL Injection Issues
Rating: 5
This is a book that I can heartily endorse. My bailiwick, and probably yours too if you are looking here, is data management and database administration. And if you function within that realm, you should be familiar with SQL injection attacks and how to defend them. Not surprisingly, given its title, that is just what this book provides.

SQL injection is quite dangerous, and yet is commonly misunderstood by many. This book, which is devoted exclusively to the SQL injection threat and how to defend against it, provides the knowledge and tactics you will need to understand and combat SQL injection attacks.

From the basics of vulnerability to discovery, exploitation, prevention, and mitigation measures, the book is a SQL injection tour de force. The book is up-to-date and covers unique, publicly unavailable information. One quick example of a a major benefit of this book: you can make the code level and platform level defenses offered in Chapters 8 and 9 can available to the developers and system administrators responsible for Internet development at your shop... which should minimize the risk of SQL injection attacks.

If you are a DBA, programmer, or system analyst involved in writing Internet applications using database systems, then you owe it to yourself to buy and read SQL Injection Attacks and Defense. It just may save your data!



Summary: Finally, the "Bible" for SQL Injection
Rating: 5
I'm giving "SQL Injection Attacks and Defenses" five stars for a few reasons.

First, the book is extremely comprehensive, covering everything from basic "What is SQL Injection?" information to advanced exploit development and static analysis tools (including open source tools).

Second, this book was obviously written very recently. The content is fresh and cutting-edge.

Finally, the book is advanced. Though the reader doesn't necessarily need to know much about SQL Injection in order to start reading it, the book covers as much as anyone would need to know about the subject.

SQL Injection Attacks and Defenses is a well written, comprehensive book that can be extremely useful to security professionals, developers, and database administrators interested in writing or maintaining secure code. It could easily be called the "bible" of SQL Injection.

Summary: Probably Great Book, if I ever see it
Rating: 5
I really would like to give this book 1 star (or zero) and it would be no fault in part of the author, I just didn't want to bring down what is probably going to be a fine publication.

I ordered it two weeks ago when it was so called "in stock" and it still hasn't shipped. It has oscillated between "in stock" and "pre-order" states three times now so I phoned the publisher, who informed me that Amazon should have it. I informed them that if they would check the amazon uk website, the release is in 2009...December??!? They were a little surpised at that.

If you check the Syngress website (not facebook version) the book is listed with a different cover. Does artistic endeavor always push forward release dates? I don't think people who would buy this title would be particularly influenced by an infuriating lack of blue, would they?. Anyway, I am disappointed and writing this since Amazon has no communication path (well none that i could find) on orders when they are in yet to be shipped.

Another annoyance is that I bought several other titles at same time with ship all at once option set, so when I discovered that SQL Injection had gone back into pre-order status I had to split the order up which cost more.

Sorry for the bitching, I needed to vent

PS Publisher called back and said that they have it locally (Aussie) for $AUS40 more than what Amazon are asking, whom don't have it.

Read more»

Aspect-Oriented Software Development

Download

Aspect-Oriented Software Development
By Robert E. Filman, Tzilla Elrad, Siobhán Clarke, Mehmet Aksit

• Publisher:   Addison-Wesley Professional
• Number Of Pages:   800
• Publication Date:   2004-10-16
• ISBN-10 / ASIN:   0321219767
• ISBN-13 / EAN:   9780321219763

Product Description:
Aspect-oriented Software Development (AOSD) is receiving considerableattention in the software engineering and programming language communities.Since 1997, there have been several successful workshops on AOSD at theleading software engineering conferences. Many have felt that AOSD may havebeen ahead of its time, but the practicality and promise of this paradigm iscatching up with the theory. This new book offers the definitve look at AOSDfrom the movers and shakers behind this concept. Just as object-orientedprogramming was a radical departure from structured programming, AOSD isa departure from the OO concept. AOSD offers increased flexibility and abetter way to develop complex systems without sacrificing scalability, security,and other important concerns. In this book, readers will learn the state-of-theartbest practices in AOSD, and will be able to help their organizations savetime and money by developing complex software systems more efficiently.

Summary: Dont't buy this book if...
Rating: 1
If you want to learn what Aspect Programming is, don't buy this book. If you want to know how to use Aspect Programming, don't buy this book. If you want to know what Aspect Programming is for, don't buy this book. This is a collection of ehem... "high level, systemic" articles, usually not top quality about... yes, good question, about what?... Buying this book was total waste of monies, several attempts to read was total waste of time. No, this book was not too difficult for me; I am computer engineering professor

Summary: Uber-geeks rejoice, newbies should just move along...
Rating: 3
Over the last year or so, I've heard more and more talk about something called aspect-oriented programming, or AOP for short. Wanting to at least be aware of major trends, I was happy when I received a copy of Aspect-Oriented Software Development by Robert E. Filman, Tzilla Elrad, Siobhan Clarke, and Mehmet Aksit. Unfortunately, I'm not the right audience for this particular book, and I really still don't know much about the subject.

The book is an outgrowth of a special issue of a software engineering publication back in 2001. The subject was AOP, and it drew a heavy response of submitted papers and ideas. Rather than only letting a few of them see the light of day, the authors decided to contact the top researchers in the field and ask them to do a write-up of their special area of AOP interest. As a result, you now have this book which is a compilation of around 30 of these papers and articles. The target of the book is for advanced software engineers who want to catch a glimpse of what is going on in the AOP field. Guess that rules me out...

As with any compilation of articles and papers from different sources, you'll get hits and misses based on communication and writing skills. If you're the type of software engineer that eagerly awaits Dr. Dobb's Journal each month, you'll probably really like this book. It appears that by reading all the way through, you'll get a broad range of information that may make you want to investigate AOP further. If you're like me and you are more focused on working directly with end users to build systems and you have a bent towards practicality over theory, don't start out your AOP experience here. It seems like AOP could be just as hard to wrap your mind around as object-oriented programming was the first time you heard of it. If I'm ever to start to understand this subject, I think I'll need an AOP for Dummies title...

If you're an uber-geek who wants to know more about AOP, or if you're an AOP person already who wants to know more, knock yourself out on this book. If you're wondering what AOP is or what the fuss might be about, I'd recommend that you keep looking. You probably won't get either of those questions answered by this book at your stage of the journey... I certainly didn't.

Read more»

AOP. Aspektorientierte Programmierung in der Praxis

Download

• Publisher:   Entwickler.Press
• Number Of Pages:   288
• Publication Date:   2005-11
• ISBN-10 / ASIN:   3935042744
• ISBN-13 / EAN:   9783935042741 
• Binding:   Broschiert

Summary: Etwas enttäuschend
Rating: 3
Kenntnisse, die der Leser mitbringen sollte (mit Schulnoten): OOP(3), Java(1), UML(4), Design Pattern(4), XML(4), Software-Architektur(2).

Ich kann mich meinem Vorredner nur anschließen. Laut dem Autor verspricht AOP ein neuer Meilenstein in der Softwareentwicklung zu sein, wie einst OOP (Objektorientierte Programmierung). AOP soll es bereits seit der 90ern geben. (Durchgesetzt hat es sich aber immer noch nicht.) Der Autor macht mehrere Anläufe, dem Leser klar zu machen, was AOP ist und wo die Unterschiede zu OOP liegen. Doch sind diese Versuche eher schlecht als recht. Man findet keinen schlüssigen Ansatz, der in OOP gut wäre aber in AOP noch besser. Dafür gibt es aber zahlreiche Verweise, wo man sich sonst Wissen holen kann.

Ich vermisse einen roten Faden, der bei anderen Büchern sonst üblich ist. Der Autor macht hin und wieder ein Paar Beispiele die aber untereinander ohne Zusammenhang sind. Besser wäre es, wenn er ein Projekt in OOP und AOP über das ganze Buch parallel entwickeln würde, so dass man hätte die Unterschiede deutlich sehen können.

Der Praxisbezug (Das Buch heißt ja AOP-Aspektorientierte Programmierung in der Praxis.) ist zwar gut dargestellt aber wieder inkonsistent. Deswegen gibt es von mir nur drei Sterne.


Summary: Verspricht mehr als eshält
Rating: 2
Nach dem Artikel im Java Magazin bestellte ich das Buch "blind". Der Titel und der Klappentext versprechen mehr als erwartet. Das Buch enthält drei Kapitel. Auf den ersten 87 Seiten eine Einführung, die ich für etwas unstruktturiert halte. Da finde ich das Probekapitel aus "Aspektorientierte Programmierung mit AspectJ" deutlich verständlicher. Das zweite Kapitel (S. 87-133) zeigt die Unterschiede von AspectJ und JBoss AOP und verweist dann schnell auf die offizielle Dokumentation (aha!).

Dann wird aber plötzlich seitenweise gezeigt wie ein Eclipse-Plugin installiert wird. Die vergleichende Bewertung der beiden Tools erfolgt dann auf einer Seite. Schade, gerade hier hätte ich handfeste Informationen aus der Praxis erwartet. Im dritten Kapitel (S 133-278) werden dann leider erst ab den Seiten 213 Anwendungsgebiete für AOP vorgestellt.(mit vielen Seiten Quelltext, den ich mir lieber downloaden möchte als im Buch gedruckt lesen).
Alles in allem fand ich das Buch nicht den Preis wert. Die Theorie ist unstrukturiert und teilweise unverständlich und die Praxis kommt deutlich zu kurz.

Read more»

Pro Apache XML

DOWNLOAD

Publisher: Apress
Number Of Pages: 504
Publication Date: 2006-05-11
ISBN-10 / ASIN: 1590596412
ISBN-13 / EAN: 9781590596418

Product Description:

Pro Apache XML thoroughly introduces several subprojects found under the Web Services–driven API umbrella. The book begins with a concise introduction to XML and Web Services. Subsequent chapters devote themselves to specific subprojectscovering their purposes, APIs, implementation, and practical uses through appropriate code examples. Additional material includes

Introductions to several of the Apache Foundation’s hottest projects, including Xerces, Axis, and Xindice
Building XML–driven websites using the popular Cocoon project
Transforming XML–based documents into a variety of formats, including PDF, SVG, and PS, using the Formatting Objects Processor (FOP) project

You’lll learn to perform tasks like validation, parsing, transformation, and storage and how to work with this information through a programming interface. You may either read this book from cover to cover or jump to any desired subproject for a detailed study of its implementation. All programming examples use the Java programming language.

Summary: Title should Apache XML Quickly
Rating: 4
Show you how to apply XML in various scenarios. All scenarios are made simple with very good example. Obviously this is a not a reference book for the technologies mentioned. But to start up with those XML technologies mentioned this one is great book. You will able to quickly go through all chapters. I started with the free chapters available in their web site and decide to try other chapters.

Obviously this not expert's voice but a very good beginners tutorials with excellent example. Again I liked their examples a lot as it is easier to understand.
Note - It is not like Wrox books usually with too verbose in theory or too complex examples

Read more»

Basic Hazardous Waste Management, 3rd Edition

DOWNLOAD

This third edition updates and expands the material presented in the best-selling first and second editions of Basic Hazardous Waste Management. 
It covers health and safety issues affecting hazardous waste workers, management and regulation of radioactive and biomedical/infectious wastes, as well as current trends in technologies.
While the topics have been completely revised, the author employs the same practical approach that made the previous editions so popular.
Chapters are structured to first outline the issue, subject, or technology, then to describe generic practice, and then to conclude with a summary of the statutory or regulatory approach.
Blackman introduces fundamental issues such as human health hazards; the environmental impacts of toxic, reactive, and ignitable materials; the mobility, pathways and fates of released hazardous materials; and the roles of science, technology, and risk assessment in the standards-setting process.
He explores hazardous waste site remediation technology, and the application of federal statutes, regulations, programs, and policies to the cleanup of contaminated sites.
This text provides an introductory framework-which can serve as the foundation for a program of study in traditional as well as modern hazardous waste management-or a component of a related program. Its overview format provides numerous references to more detailed materials to assist the student or instructor in expansion on specific topics.

Read more»

Applied Survey Data Analysis (Chapman & Hall CRC Statistics in the Social and Behavioral Scie)

DOWNLOAD

Taking a practical approach that draws on the authors’ extensive teaching, consulting, and research experiences, Applied Survey Data Analysis provides an intermediate-level statistical overview of the analysis of complex sample survey data.

It emphasizes methods and worked examples using available software procedures while reinforcing the principles and theory that underlie those methods. After introducing a step-by-step process for approaching a survey analysis problem, the book presents the fundamental features of complex sample designs and shows how to integrate design characteristics into the statistical methods and software for survey estimation and inference.

The authors then focus on the methods and models used in analyzing continuous, categorical, and count-dependent variables; event history; and missing data problems.

Some of the techniques discussed include univariate descriptive and simple bivariate analyses, the linear regression model, generalized linear regression modeling methods, the Cox proportional hazards model, discrete time models, and the multiple imputation analysis method.

The final chapter covers new developments in survey applications of advanced statistical techniques, including model-based analysis approaches. Designed for readers working in a wide array of disciplines who use survey data in their work, this book also provides a useful framework for integrating more in-depth studies of the theory and methods of survey data analysis.

A guide to the applied statistical analysis and interpretation of survey data, it contains many examples and practical exercises based on major real-world survey data sets.

Although the authors use Stata for most examples in the text, they offer SAS, SPSS, SUDAAN, R, WesVar, IVEware, and Mplus software code for replicating the examples on the book’s website

Read more»

Malignant Mesothelioma

ISBN: 9783642108617

Download

Description:
Malignant mesothelioma is an aggressive and fatal neoplasm of serous membranes that still shows a rising incidence worldwide.
This book covers all the important aspects of the disease by bringing together contributions from selected experts in the fields of epidemiology, imaging, pathological diagnosis, therapy, genetics, and screening.
Special emphasis is placed on the latest diagnostic techniques and current therapy standards. In addition, the mineralogy of asbestos is reviewed and clear advice is included on the analysis of tissue mineral fiber content.
By providing a compact, scientifically based, and up-to-date overview of the management of malignant mesothelioma, this volume will be invaluable for all clinicians and pathologists who are engaged in the diagnosis and treatment of the disease or in related research.
  
Common terms and phrases:
amosite amphibole apoptosis aquaporin biopsy chemotherapy chrysotile cisplatin diagnosis extrapleural pneumonectomy lung cancer malignant mesothelioma malignant pleural mesothelioma mesothelial metastases pemetrexed peritoneal pleural effusion radiotherapy thoracoscopy tumor XIAP.

Read more»

Mesothelioma

Download

Mesothelioma
By Bruce W S Robinson, A Philippe Chahinian

Publisher: Informa HealthCare
Number Of Pages: 380
Publication Date: 2002-01-17
ISBN-10 / ASIN: 9058231801
ISBN-13 / EAN: 9789058231802
Binding: Hardcover


  


Product Description: 
Mesothelioma used to be a rare disease, but because of the widespread use of asbestos it has now been described as an epidemic around the world. The disease has proven exceptionally resistant to common forms of treatment (chemotherapy, radiotherapy and surgery).
Mesothelioma has a very aggressive natural history with a median survival of around 9 months.
There has been an explosion in knowledge about mesothelioma in the past few years, partly stimulated by the formation of the International Mesothelioma Interest Group network.
This book represents a state-of-the-art review of the disease, from laboratory through to the bedside, from diagnostic procedures through to treatment and from imaging and early detection through to medico-legal aspects.
It will be of interest to any clinician or scientist with any involvement in asbestos-related diseases, as well as members of the legal profession and anyone with an interest in respiratory diseases.

Read more»

Web Design for Teens

Download

Description
Summary:
Your Web site is a way to communicate who you are to the world?your style, your interests, your voice. "Web Design for Teens" gives you the skills you need to create your first Web site. You don?t need any coding experience to begin. You?ll cover everything from how to write the code to how to create a cool design. Begin by learning HTML as you move from the basics to advanced coding topics.
Then it?s on to design as you conquer the fine points of color and navigation systems. Wrap things up as you learn how to put your Web site online, advertise it, and attract visitors.
About the Author:
Maneesh Sethi is a student at Stanford University in Palo Alto, California.
As a high-school student, Sethi founded Standard Design, a web-site design company.
He is the author of Game Programming For Teens, first and second editions, and Web Design For Teens.
Sethi lectures on game programming topics at conferences across the country and has been a guest on G4TechTV.

Read more»

SEO Warrior

SEO Warrior By John I. Jerkovic

Download

Publisher: O'Reilly
Media Number Of Pages: 494 Publication
Date: 2009-11-30
ISBN-10 / ASIN: 059615707X
ISBN-13 / EAN: 9780596157074








Product Description: 
How can you make it easier for people to find your website? And how can you convert casual visitors into active users? SEO Warrior shows you how it's done through a collection of tried and true techniques, hacks, and best practices. Learn the nuts and bolts of SEO theory, the importance of keyword strategy, and how to avoid and remedy search engine traps.

You'll also learn about search engine marketing (SEM) practices, such as Google AdWords, and how you can use social networking to increase your visibility. Ideal for web developers, savvy marketers, webmasters, and anyone else interested in SEO, this book serves not only as an SEO tutorial, but also as a reference guide for implementing effective SEO techniques.

• See website optimization in action with detailed case studies of five website types 
• Optimize your site for Google, Yahoo!, Microsoft's Bing, as well as search engines used in different parts of the world 
• Conduct keyword research to find the best terms to reach your audience-and the related terms they'll respond to 
• Learn what makes search engines tick by utilizing custom scripts 
• Analyze your site to see how it measures up to the competition 

Summary: Can't Beat It!
Rating: 5
If you need a way to go from the backs pages of the major search engines - this text can help. If you need your visitors to be active - this is the text. Jerkovic takes the reader into a world of perfection in teaching him/her to improve rankings. The theory, SEARCH ENGINE OPTIMIZATION, is the only way to get it done and Jerkovic makes it possible to do it yourself instead of paying hundreds of dollars periodically to get it done. And, then again, most of these individuals don't guarantee continuous results!!

Jerkovic also introduces the reader to Google AdWords, SEM, and social networking to get the job done. In all, he gives you a total picture of how to keep your site in the forefront of search engines - and yes, Bing is included.

Read more»