<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Tue, 21 May 2013 07:20:35 -0500</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[DeveloperTutorials.com: Port Scanning and Service Status Checking in PHP]]></title>
      <guid>http://www.phpdeveloper.org/news/12297</guid>
      <link>http://www.phpdeveloper.org/news/12297</link>
      <description><![CDATA[<p>
On the DeveloperTutorials.com site today there's <a href="http://www.developertutorials.com/tutorials/php/port-scanning-and-service-status-checking-in-php-8-06-06/page1.html">a new tutorial</a> showing the creation of a port scanner with PHP - a tool that, given some of the familiar ports that services (like web or email servers) run on, can check to see if they're responding.
</p>
<blockquote>
While building web applications, it's often important to keep an eye on the other services running on your server. Having access to the current status of public servers can empower your applications to make decisions and respond to problems automatically. Acknowledging a service is offline can also save endless support emails. In this tutorial, I'll show you how to keep track of your server status by scanning ports on your server with PHP.
</blockquote>
<p>
Their example makes a socket connection to the remote port to see if there's a valid hookup. The wrap this inside a loop for ports 1 through 1000 to see what ports are open and responding on your local machine (doing this on a remote machine is just asking for trouble).
</p>
<p>
Their full example defines some of the common ports in an array and loops to check on their status. It sets out a base you can build on top of with things like their suggestions - logging scan results, repoting downtime and running a service-specific task.
</p>]]></description>
      <pubDate>Wed, 08 Apr 2009 08:49:21 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[NETTUTS.com: Scanning Folders with PHP]]></title>
      <guid>http://www.phpdeveloper.org/news/11403</guid>
      <link>http://www.phpdeveloper.org/news/11403</link>
      <description><![CDATA[<p>
The NETTUTS.com site has posted <a href="http://nettuts.com/videos/screencasts/scanning-folders-with-php/">a new PHP-related screencast</a> that covers a simple script to scan over the contents of folders in PHP. To illustrate, they create an image gallery script that mirrors the filesystem structure.
</p>
<blockquote>
Let's imagine that you want to build a page that will display snapshots of your latest work. [...] In such instances, the best solution is to make PHP scan your "portfolio" folder and dynamically create the code for you. If you want to update your page with a new snapshot, all that you need to do is drag the image, and its respective thumbnail, into the appropriate folders - and PHP will do the rest. Let's build it now! 
</blockquote>
<p>
The screencast comes complete with <a href="http://nettuts.s3.amazonaws.com/120_screencast/scanFolders.zip">the entire source</a> and a <a href="http://nettuts.com/demos/018_screencast/featured.php">link to a demo</a> to show the end result.
</p>]]></description>
      <pubDate>Thu, 13 Nov 2008 14:18:28 -0600</pubDate>
    </item>
    <item>
      <title><![CDATA[Developer Tutorials Blog: Port Scanning and Service Status Checking in PHP]]></title>
      <guid>http://www.phpdeveloper.org/news/10376</guid>
      <link>http://www.phpdeveloper.org/news/10376</link>
      <description><![CDATA[<p>
The Developer Tutorials blog has <a href="http://www.developertutorials.com/tutorials/php/port-scanning-and-service-status-checking-in-php-8-06-06/page1.html">posted a new tutorial</a> covering how to scan ports and checking a remote service's status with PHP.
</p>
<blockquote>
Having access to the current status of public servers can empower your applications to make decisions and respond to problems automatically. Acknowledging a service is offline can also save endless support emails. In this tutorial, I'll show you how to keep track of your server status by scanning ports on your server with PHP.
</blockquote>
<p>
They show how to check a remote instance (a socket open with a timeout) and how to run through a list of ports, looping from one to one-thousand and running an fsockopen on each. They make a sample script to show these two combined - a simple page that loops through the common protocols (HTTP, FTP, SSH, etc) and checks to see if the remote machine is running something on that port.
</p>]]></description>
      <pubDate>Tue, 10 Jun 2008 08:46:08 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[PHP Security Blog: A Trio of Javascript Issues]]></title>
      <guid>http://www.phpdeveloper.org/news/6810</guid>
      <link>http://www.phpdeveloper.org/news/6810</link>
      <description><![CDATA[<p>
On the PHP Security Blog, there's three new posts that <i>Stefan Esser</i> has written up that demonstrate some of the more destructive uses of Javascript that he's found:
<ul>
<li><a href="http://blog.php-security.org/archives/54-JavaScriptHTML-Portscanning-and-HTTP-Auth.html">JavaScript/HTML Portscanning and HTTP Auth</a>
<li><a href="http://blog.php-security.org/archives/56-Bruteforcing-HTTP-Auth-in-Firefox-with-JavaScript.html">Bruteforcing HTTP Auth in Firefox with JavaScript</a>
<li><a href="http://blog.php-security.org/archives/55-JavaScript-Scanning-and-expose_phpOn.html">JavaScript Scanning and expose_php=On</a>
</ul>
</p>
<p>
While the first two are interesting, it's the last of these that most directly applies to PHP. He gives a simple "proof of concept" that checks to see if the embedded image is the correct "size" to be related to a webserver running PHP with the expose_php setting set to "on".
</p>]]></description>
      <pubDate>Fri, 01 Dec 2006 13:22:28 -0600</pubDate>
    </item>
    <item>
      <title><![CDATA[David Coallier's Blog: Free PHP Security Scan]]></title>
      <guid>http://www.phpdeveloper.org/news/6707</guid>
      <link>http://www.phpdeveloper.org/news/6707</link>
      <description><![CDATA[<p>
<i>David Coallier</i> <a href="http://blog.agoraproduction.com/index.php?/archives/8-Free-PHP-Security-Scan.html">has posted</a> about his ideas for an Open Source, free PHP security scanner:
</p>
<blockquote>
The idea of this project is quite simple, I was thinking that offering this service to anyone who requests it could be a very nice idea. Offering to run the scan is the only way I could ensure that people are not using this scanner against any website.
</blockquote>
<p>
Basically, <a href="http://blog.agoraproduction.com/index.php?/archives/8-Free-PHP-Security-Scan.html">his idea</a> is to offer this service free of charge, but still restrict it to avoid malicious use. It would involve validation via an md5 hash to ensure that the website has been authorized to run it. Check out the blog entry for more details on how the scan would be run.
</p>]]></description>
      <pubDate>Wed, 15 Nov 2006 07:06:07 -0600</pubDate>
    </item>
  </channel>
</rss>
