Lately I've been interested in applying static analysis to PHP projects. Static analysis is the process of analysing software code - in our case PHP source code -, without actually executing the (compiled) result of the source code you're analysing.

He mentions some types of analysis and some of the tools that can be used to measure it. He also talks about issues it can help with (like the potential for harm if a part of code is changed) and a pointer to the Pixy software he used to generate the statistics (and images like this).

suPHP is a tool for executing PHP scripts with the permissions of their owners. It consists of an Apache module (mod_suphp) and a setuid root binary (suphp) that is called by the Apache module to change the uid of the process executing the PHP interpreter.

suPHP runs as an Apache module and works with the local server's permission system to restrict script access to whatever the user's allowances are. He links to this tutorial for more information on setting it up.

Lots of programmers like PHP for its ability to code and develop web applications fast. Code-debugging is a lot easier than with PERL or C. However, there is one thing a lot of developers are puzzled about, "How to run PHP Scripts with crontab?"

He explains how cron can be used effectively to replace including a backend script into another file (bad practice) and how to get started with PHP and cron. He includes how to find if you're using a CGI or Apache version of PHP and how to locate the binary. He takes this knowledge and shows how to apply it and put a sample script into the cron file. You can check out sites like this or this for more information on cron itself.

Just a quick announcement, in an effort to come up with a self scoring contest, I came up with the ridiculously simple concept of robots firing lasers at each other in a fictional arena. Each robot controlled by a different PHP script, and a central arena managing it all. It's basically a turn based game where your robots take turns for you.

You can check out more about the game and its rules over on the Web Bot Battle site. It defines how your bots should act and even has some examples for you to work from.

Do you have multiple Wordpress self-hosted blogs? If so, you've likely run into a scenario where you just can't remember your password. With Wordpress 2.5 and 2.5.1 there's an annoying bug that sometimes generates passwords that don't work when you click the "Forgot Password" option. [...] Wordpress resets the password internally (in the MySQL database) but the link that it sent you to activate that password fails to connect with the database effectively locking you out of your blog. In this scenario, at least for me, all the potentially viable solutions lead to dead ends.

His six step process involves an external script (use with caution, especially before you read the source) that reaches into your WordPress install and updates your admin account and sends out an email with the resulting password.

In the good old days, if you wanted to create re-usable code, you would create a library of related functions or objects. Now, the excitement is all around frameworks. Everyone has one. What is the difference between the two?

He compares a library and a framework, pointing out key differences like how they fit with the application (controlled by or controlling) and dependencies they require. He rounds out his boot sequence, adding a few new parts to the structure of his example application.

However, the phpShield.com home page did not offer the slightest clue who actually is behind that product. [...] It's common practice to whitelabel your solutions and sell them under different brands with different feature sets to different target audiences. However, we always clearly state who is behind the whitelabelled solution.

A little more digging shows an interesting relationship between the company that sells SourceGuardian and the company behind this PHPShield (Inovica). He sees the deception counting against the company and has just "struck one off the list" from his search for encoding methods.

Here's a bit from the press release:

Wicked Cool PHP [...] is a different breed of PHP book. It's made specifically for the developer who wants to know how to get things done without mucking around and wasting a lot of time. This is not a weighty PHP complete reference or bible that threatens to take down your bookshelf and the rest of the bookcase. This is a book for coders to pick up and use, not wade through.

It provides the reader with "76 immediately useful PHP scripts" that do a variety of things like send/receive email notifications, do some web scraping, track users with cookies and sessions and use web services like SOAP.

You can find out more about the book on this page on the O'Reilly website. The book will officially hit the stands February 15th.

When you need to develop a web form with a special design and great effects, you will probably elect to use Flash. But building and programming Flash forms is considerably different from building standard HTML-based forms. [...] To do that though, you need to know how to access data in the Flash form and (sometimes) how to update the Flash form from PHP as well.

They help you build a sample Flash form as a base to work with in the transfer methods including the ActionScript to get the data out of each field. The tutorial shows the two way communication that's possible - pushing the Flash values out to the PHP script via a getURL() call and pulling the results back in with a call to loadVars() from the PHP script's output.

The standard htmlentities() function will encode special characters so that they display OK in the browser. However, sometimes you might want to encode different languages to entities too. I just found a script that will do that in the form of an html encode application.

He includes an example showing how to encode a string of non-english characters out to an easy-to-display HTMLified string.