Blog for Php Developers

Sugar CRM - Problem with IMAP

2010-12-27T22:27:00.000-08:00

Hi All

Another small but very important update for Open source like SugarCRM and other application where we have IMAP mail function, I saw 100 of posts for SugarCRM IMAP problem with strange "undefined" value. This problem is very small and the root cause is outbound port is not open from your hosting company.

So the solution is just call your hosting company and approach to allow outbound port, like for GMAIL - 993.

Once this is done either from "putty" or from "Live Technical Help Support" you test the same in your SugarCRM backend, and I am sure there will be smile in your face :)

I am sure this post will help all my Sugar Community.

Regards,
Prashant Kumar

HOW GOOGLE / YAHOO / MSN E-MAIL SERVICE CAN IMPROVE?

2010-09-09T11:04:00.000-07:00

Hi,

Imagine, e-mail accounts giving you the ultimate data portability. You may travel without your notebook even on most business trips. It gives you a secured access to your data from anywhere and using any e-mail accessing device!

Struggling each time to find your resume in your computer hard drive for making an online job application? Do you go mad searching for the files in your notebook when asked for an urgent presentation by your boss?

We all know that modern e-mailing technology can actually be much more than a mere electronic replacement of the snail mail. But, if you are looking for the next generation e-mailing experience, click on to the article to find out what you should be expecting from your e-mail provider in the near future…

E-mail providers like Google, Yahoo and MSN already provide huge mail & attachment storing facilities which are almost unlimited. But, till now we are highly dependent on our personal computers or various storage devices to access files for mailing as attachments. Even files which are frequently accessed for mailing as attachments need to be retrieved from your computer or old mail attachments. Moreover, there are loads of restrictions on file size and type for using them as mail attachments.

A mind blowing solution to all these problems - an all new attachment folder feature within your e-mail account! The folder would contain files which are frequently used as attachments or uploaded by users for future use. A simple drop down menu allows one to select attachments from the folder or sub-folders, thereby, saving on the uploading time irrespective of your internet connection speed. And last but not the least, the feature lets one instantly use various types of file , categorize them into sub-folders and deal with huge file sizes just at the cost of a few clicks.

So, your e-mail account with Google / Yahoo / MSN can soon become the next generation storage technology!!

Please favor me so we will have the same in next few weeks!!

Thanks
Prashant Kumar

How to drive traffic in my brand new website?

2010-09-04T03:45:00.000-07:00

How To Drive Traffic To The Website

Most products nowadays are featured online so to make your business grow on the web the very first thing that is required is to launch a great website. Creating a good design is very important to attract potential customers online. To begin with the website should be simple and consumer friendly. You don’t want your visitors to find it hard to shop a product on your web page, do you? So the best way is to resort to a proper and effective web page presentation. There are numerous website developers on the web who are really inexpensive and can help you through the process.

Once your website is on the internet its time that people get to know about it. Now how will someone know about your website unless you promote it? There are numerous ways to make your web presence felt. Say for example, once your website is done and is tested alright; make a press release but submitting your URL there. Next you can announce PPC Campaigns on your site, the best way to allow sustainable traffic to flow into your website. This may sound pretty simple but is not. The arena of web marketing is large and with so much competition around it becomes really difficult to cast an impression on the web in your niche. Everyday hundreds of new websites are being launched online with each one of them looking for ways to promote their business effectively.

In addition to the tips mentioned above, you can also create and launch a free or low cost blog. This will ensure that you have a fixed amount of traffic flowing in which can be redirected to your website. Submitting website to different directories in the internet can also help you to get the site marketed. You can automatically reach to those looking to market their products in the same niche as yours. So you can create a mutual bonding to ensure that the page rank of your website also increases when the popularity of the other site elevates. The more you can optimize your promotion techniques the more your presence can be felt is various search engines.

If the estimate per day for your PPC is like 200 USD in search engines like Google, Bing and Msn, then with such a budget you can easily aim at increasing traffic in an area, zone or even a region and very rapidly drive in at least 10% to 20% of customers to your website.

Usage of eBay or Google for product feed can be great way to present your products and bid them online. Even Buy.com is a great place to make money out of your products.

Even implementing SEO techniques can be of immense help so that they keep reaching millions of surfers online and hence get optimum presence. You can trust these methods to easily climb up the ladder of many search engines. This way all your business keywords can get enlisted on the web and get to feature on the top of the charts.

Getting your web pages address listed in affiliated networks can prove to be of great help, like www.cj.com / www.affiliatewindow.com etc. Also promoting your business or products through viral videos, in various websites such as YouTube is getting much popularity nowadays.

Social Media Marketing is a nice and friendly way to promote your business. You can market through Facebook Profile, Facebook Application, Facebook Events, MySpace Profile etc.

Through effecting marketing techniques you can easily enhance the popularity of your website. If you are looking to earn money or to achieve popularity, a website cannot drive in visitors unless you use more and more techniques to promote your business. After all, every one’s looking to create their impression and make the most out of online businesses.

In addition to the tips mentioned above, all SEO EXPERTS suggest Organic SEO for long term online business gain.

What is Organic SEO?

Using organic SEO for your website’s promotion is the best way to drive traffic to your site. It is a combination of complex methods and strategies. It uses the technique of process of optimizing search engines to attain higher search rankings and also depends on off page methods to ensure quality and relevance of incoming links to your site.

With so much competition in the advertising market now only large companies can afford to bid at a higher cost. With techniques such as PPC only a little amount of visitor is acquired while most of the cash goes out in advertising. Organic SEO is a great way to allow visitor into your website without the necessity of PPC Campaigns or any other off page technique.

What is On / Off page SEO?

The time required for an on/off page SEO is almost 3-4 months. This will include on page optimization, internal links, alt tags, keyword density, prominence, and frequency, content, and site navigation improvisation to name a few of the long checklist.

Off the page factors include press release distribution, link building techniques, and other paid inbound link programs. Using black hat techniques or link farming can ban your site all together so it is not recommended Organic or Natural Search Engines Strategies should be the only technique through which SEO should take place for a website.

Marketing costs can be easily reduced using ad campaigns search engines like Google etc. hundreds of Pay Per Click Search Engines offer you innumerable amount of traffic which you can buy. You can choose from a list of traffic providers like Google AdWords, Yahoo! Search Marketing etc.

Organic SEO helps your website to appear on the search result pages for a long period of time since search engines are always on a look out for relevancy. This is something that just cannot be achieved by paying alone. The content featured on your site should be informative and relevant to your niche. It reflects on the point that you haven’t just set up a business to make money but also to deliver information to the masses.

Thanks,

Prashant Kumar

DZOIC Handshakes Customization tutorial.

2010-08-26T07:11:00.000-07:00

What is DZOIC Handshake?

Social networking software at its best! If you dream to start your own profitable social networking website like myspace, facebook, friendster, hoverspot, and others, look no further. DZOIC Handshakes is your complete solution!

What is DZOIC ClipHouse?

Start your own YouTube clone with DZOIC ClipHouse! Packed full of the best video site features, ClipHouse is your complete solution for creating your own profitable video site, or integrating into your existing website.

Though this is really a good open source but customizing this software is a real challenge and this required lots of experience. We have worked for our several clients and our pool of Developers are ready to make any kind of custom design using DZOIC software.

We are writing this BLOG because we want others to know how DZOIC work so here I am listing DZOIC file structure because this is what really first needs to be very clear :-

New Page Creation

Design à Page Composer à (Select Theme for editing and select page)/(Click Create New Page for new page creation) à Click header and enter “header.tpl” in right text box (Click apply changes everytime) à Click footer and enter “footer.tpl” in right text box (Click apply changes everytime) à Add Item à Column (width 100%) à Add Item à Cell à Add Item à Block à Add Item à Template à Enter “pages/(your created tpl file)” (Click apply changes everytime) à When you are done, click save page.
Customize à Menus à Go to “Menus” à Edit “Mainbar” à Move newly created page to Menu Pages list à Click Update. Do same with “Top” menu.
Link to menu à go to respective menu or submenu like submenu11, submenu12. à Edit the menu add new item and give index.php?page=”your page name”.

New Form Creation

Go to themes/network_dzoic/forms folder.
Open any file and copy code from here. You can refer multiple files if needed.
Copy it and modify and name it as per your situation (your name “.inc.php”).
Open the tpl file from pages folder and paste the given code to include the form required.

{include file="boxes/simple.tpl"}
{include file="forms/simple.tpl" form="(your form name without ‘.inc.php’)"}
{include file="boxes/simple_close.tpl"}

Remember to give a valid file name for handler in form hidden field value. This file must exist in modules folder in the root.
Go to modules folder and open the handler file and write function as need to handle the form inputs.

Folder & File Structure

Community folder is the root of the site.
Administrator: This folder is for handling entire admin section.
Ads: The banners uploaded from Get Paid section of admin are saved in this folder. Rarely used by programmer.
Blogs: All the member blogs are saved here in form of individual folders named on the basis of blog id and member id. Rarely used by programmer.
Classes: The classes and their methods which are to be reused for various pages are here. These classes include mail class, database class and member class.
Classifieds: All the member classifieds are saved here in form of individual folders named on the basis of classified id and member id. Rarely used by programmer.
Clubs: All the member clubs are saved here in form of individual folders named on the basis of club id and member id. Rarely used by programmer.
Crons: Never Used.
Ecards: Similar to Blogs and Clubs.
Events: Similar to Blogs and Clubs.
Feeds: Contains xml feeds like news.
Functions: Contains core functions used to handle internal functionality of the site. The functions common and can be used for any section of the site. For example, building page, handling string, authentication handling.
Import: Never used
Includes: Contains configuration files and other similar files like version file
Jscript: Contains javascript files required for different pages.
License: License files.
Logs: Log files
Media: Audio files saved here
Moderator: similar to administrator section only difference is the limitation in access.
Modules: Very important folder. All the functions used for individual pages as per requirement is kept in different files which are named according to the page name files are associated with.
Photos: Member photos saved here
Plugins: Never used.
Profiles: Similar to Blogs and Clubs. Member profiles saved here.
Psystems: Payment systems integrated here like paypal, optimal.
Public: Settings for blogs, clubs etc.
Resources: Documents kept here like .doc, .pdf etc.
Savant2: Never used.
Smarty: Smarty installation files.
Swf: SWF files related to chat system on site.
Temp: Never Used
Templates: Templates for blogs, clubs, profiles etc.
Themes: Very important folder. Current theme folder is network_dzoic.
Videos: Videos uploaded here.

Important Folders & Files

Classes

This folder contains all the major class files.

Mail.class.php: If you want to find out how mails are being sent. Open this file and if required make changes but carefully.

DB.class.php: All the functions for handling DB like execution of query are here.

Functions

This folder contains all the major common functions required to run the handshakes script.

auth_functions.php: This file deals with authentication for a particular page or section whether it should be allowed for visitor without logging in or not.

build_functions.php: Very important file. This file deals with functions like building page, building profile of a member ready to view etc.

mbstring_functions.php: This file deals with string handling. An example is to shorten a long string, or wordwrap.

Includes/config

This folder contains configuration file for entire site.

config.inc.php: This is of course the most important of all. Configuration like root path and db connection credentials are given here.

Modules

This folder contains module functions for separate pages/sections. Every php file in this folder is working for a particular section/page.

Explaining all the files is not possible and is a waste of time. I have explained a couple of files which are mostly used. Others are following the same concept.

account.php: This file is used for updating account settings while and after registration.
recent.php: This file has got functions for showing recent events, blogs etc. on homepage.
join.php: This file contains functions used in the process of registration and its various steps.
videos.php: This file is related to video module and is handling the view and uploading of videos.

Psystems

This folder contains the payment system files, previously paypal and now also optimal.

Paypal/config.inc.php: This file contains the email address of the site administrator which is registered with paypal account.

Optimal: This folder contains files related to optimal payment system.

Templates

This folder contains templates for blogs, events, profiles, etc. Please note that this is not by any way related to main site template. So if you need to change something in the individual template, then only you need to come here and go to respective tpl file.

Themes

This folder, as mentioned earlier, contains the themes available for main site. Currently there are 4 themes.
Our current theme is “network_dzoic”. We need to work only in this folder named “network_dzoic”.
We now enter this folder (network_dzoic) and see the structure.
Config: This folder contains settings.inc.php file for general settings which can be managed from admin section, so not to touch this file.
Forms: Whenever a form is created a *.inc.php file is to be created in this folder which is discussed earlier in this doc.
Gfx: Very important folder. The main css file (style.css) is stored here. Also all the front end images are also in this folder. This folder can be directly used in a tpl file by using a smarty variable {$root}.
Layout: Whenever a page is created, a *. inc.php file is created here automatically. No manual work here. Only make sure that this folder should have write permission.
Menus: As name suggests, menus created from backend are stored in files here. Rarely used.
Modules: Main settings are here for blogs, profiles etc. Important when making a new clone site because then you need to change the paths here.
Options: Whenever you add a “select” box or combo box in a page, you need to add options from here special when creating forms.
Profiles: This folder contains the basic settings for display of 3 kinds of profile namely, business, social and personal.
System: This is another important folder and contains success messages and error messages with respective ids. Can also be changed from admin section but if you need to add a new message then enter this folder. Important files are messages.inc.php, completes.inc.php and errors.inc.php.
Templates: This folder contains all the tpl files for front end. Only one folder is to be worked upon. The folder is “source”. Let us enter source.
..Source: Two files common and only these two files are to be used, header.tpl and footer.tpl. Use of these two files is when a new page is created. Procedure mentioned earlier.
….pages: I used only this folder in source. The reason being, all the tpl files for all the pages in front end are stored here. To be specific, whenever a page is edited, make changes in the relevant tpl file in pages folder or if a new page is created, one must create a new tpl file here.

Newsletter

For creating and sending newsletters there is a separate folder in root. This folder is “db”. It contains files required for sending newsletter and creating or editing newsletters.
The files in this folder are simple php files and can be easily edited as and when required.
Example link for this section is: http://www.network_dzoic.com/db/

Thanks,
Prashant Kumar

E-COMMERCE QUESTIONNAIRE

2010-08-22T02:07:00.000-07:00

Answer in detail as many of the questions as are applicable.

1. How many products do you have (how many SKU or product variations)? How many
categories/subcategories? Will the categories change or grow in number? How is categorization applied—by an existing database structure, or will it be done only at the site?

2. What type of products? In what quantities are they usually sold?

3. Who will do fulfillment? (shipping, returns, etc?) How will your information get to fulfillment channels (via file upload, fax, email, full system integration?) Describe your normal offline
process, and indicate how much integration will be necessary.

4. What type of reporting is required? (total sales, status of order, etc.) Where this information be displayed/stored?

5. What types of payment (PO, credit card, online or offline payment)? Which cards? (Visa/MC? American Express?)

6. Do you have an existing Internet Merchant Account for processing credit cards directly into your Bank account, and can it be used for Internet usage? (Some banks will not allow this, or will
charge higher fees because of the high return/cancellation percentage.)

7. How many individual transactions do you “realistically” expect per day in the first year? Second year? Fifth year? What is average sale total normally?

8. Who can order on your site? Anyone? Do they fill out a profile that is saved in the database for future access to them? What type of password authentication and security do you need? Standard SSL + Web password? What other information do you want to store in user profiles?

9. Will you offer multiple levels of pricing? (wholesale, retail, bulk, international?) How many levels?
What about “special” customers who have a negotiated pricing? How will the site handle them?

10. Taxes - How many states do you operate in, and does your sales tax vary according to city or state pricing? What internal tax system or accounting software do you use for calculating and
reporting? Do we need to integrate? How often will you need to pull reports?

11. Do you need the sales information to be automatically dumped into an existing
database/mainframe? What type of database/mainframe is it? Give details of hardware and software, including any accounting packages.

12. Do you need inventory levels to be returned into the Web database periodically from your internal
system, and what type of database/mainframe is it? How frequent is the inventory exported to
site?

13. Do you intend to host this yourself? Or, do you want to set it up on its own server and co-locate it at an ISP so that you are not “sharing” with any other sites? (Some ISPs offer software sharing so that you can take advantage of someone else’s software license and server configuration.)

14. Is this a mission-critical site? That is, is it worth paying extra for redundancy on different servers
for backup, a development server for making changes so that you don’t endanger the live site,
frequent server monitoring and daily backup, etc. so that you are not down for one single minute
of any day?

15. If you sell software, do you intend to offer immediate download or email a location after payment is cleared? Manual or automatic email? Will there be demos for free? How large is the file size on
your software? What reporting system will you require (total downloads, successful/partial
downloads)?

16. Who will maintain the product database and the site content? What level of expertise do these administrators have? Do you need a Web-based administration for catalog? Page content? How many administrators, and do they have to have separate passwords and different levels of access?

17. Will new product data be imported from internal server or mainframe? How often? Will internal data need to be supplemented by additional data per item (i.e. thumbnail photos, long descriptions, cross selling information, etc.)

18. Will you want cross-selling capability to associate products with each other? How will these relationships be defined, on your internal server or at the Web server?

19. What other areas of content on the site will need to be developed? Please quantify in number of ‘pages’ (interfaces), and specify which of them need to be content -managed by non-technical
personnel. We can build custom forms for updating select content, or put in place a full Content Management System if the requirements are larger or more complex.

20. How will you market the site? Will you be providing XML feeds of your database to any search engines via a “paid inclusion” program?

Thanks
Prashant Kumar

All about .htaccess - How to use.

2010-08-14T13:34:00.000-07:00

Hi,

The .htaccess file will allow us to include the following features in our server:-

1. Error Documents

ErrorDocument [number] [path to document location]

ErrorDocument 404 /errors/404.php

2. Password protection

.htaccess -

AuthUserFile /var/html/outside_www_path/.htpasswd
AuthType Basic
AuthName " Login"

.htpasswd -

username:password

3. Enabling SSI (Server Side Includes)

We can try and enable SSI via .htaccess file -

# Tells the server, files it should parse as having SSI
AddType text/html .shtml
# handler that actually parses the SSI files
AddHandler server-parsed .shtml
Options Indexes FollowSymLinks Includes

4. Deny users by IP

#stop a specific user from accessing site
order allow,deny
deny from 203.200.1.1
# section of the IP address
deny from 121.314.51.
allow from all

5. Change default directory page

# Will cause filename.html to be the default page , so site would not go to index.html, but to abc.html.
DirectoryIndex abc.html

6. Redirects

# Will re-directed to the newfile
Redirect /olddir/old.htm http://google.com/newdir/new.html

7. Block .htaccess from viewing

order allow,deny
deny from all

8. Adding MIME types

# to serve certain file types
AddType application/x-shockwave-flash swf

9. Preventing hot linking of your images

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?mydomain.com/.*$ [NC]
RewriteRule \.(gif|jpg)$ - [F]

10. Preventing directory listing

# block all files from directory listing
IndexIgnore *
# block the pdf and swf from directory listing
IndexIgnore *.pdf *.swf

Thanks & Regards,
Prashant Kumar

How to make your eBay | Amazon store a success

2010-08-07T10:58:00.000-07:00

Here's how to make your eBay Store a success:

Clean but elegant design
Open for e-commerce and easily affordable
Flexible search navigation
Focus on building trust with the customers
Eminent branding and internet marketing options
Brings up the total sales of the companies

eBay doesn’t fob the customers. Instead eBay uses fully tested techniques so that the clients remain happy with their service.

Professional eBay storefront design services include:

Complete eBay store design and administrative setup.
Custom store logo.
Professional eBay store header design.
eBay store category and keyword (META tag) setup.
eBay store inventory and auction setup. (Prices vary according to size)
Extra eBay store about me or custom page design.
Optional regular eBay auction listings.
Optional eBay custom listing template.
Unlimited customizations available.

Few companies offer a separate advertising team and help you to get a custom eBay store designed and setup for efficaciously absorb your target customers and sell your products.

Amazon Stores contributes to sell the products online and it also offers you a spot to get registered your personal domain with it along with all the facilities it has to offer. That is the reason you can be able to pull a lot of customers for your products & services. This is an extensive solution for putting your products online for sale.

If you want the solutions for attracting more customers for your specific site, you may sign up with Amazon Stores. Amazon claims to be one of the largest shopping portals for online users. Using Amazon store, you will be able to attract a number of customers by offering them a wide range of products. This shows an evidence for products management, safe & secure online shopping and also flexibility of displaying of the products itself.

Thanks,
Prashant Kumar

Affiliate Marketing

2010-08-01T05:44:00.001-07:00

Magnetize your potential customers online to your website with an expertly designed affiliate program and raise your business to new heights.

What is affiliate marketing?

Affiliate marketing is a strategically designed delicate online marketing method of generating visitors to your website through a network of web partners. It follows a “pay for performance” model, so the merchant will only have to pay if results are accrued. With an ever rising Internet usage graph, affiliate marketing holds a very good chance of replacing all the traditional marketing techniques as the most efficient means of brand promotion.

Wikipedia says -

Affiliate marketing is a marketing practice in which a business rewards one or more affiliates for each visitor or customer brought about by the affiliate's marketing efforts. Examples include rewards sites, where users are rewarded with cash or gifts, for the completion of an offer, and the referral of others to the site. The industry has four core players: the merchant (also known as 'retailer' or 'brand'), the network, the publisher (also known as 'the affiliate'), and the customer. The market has grown in complexity to warrant a secondary tier of players, including affiliate management agencies, super-affiliates and specialized third parties vendors.

There are three ways to earn money through affiliate marketing:

1. Pay Per Click

2. Pay Per Sale

3. Pay Per Lead

5 Best Affiliate Programs -

1. Amazon

2. eBay

3. Google

4. Microsoft

5. Yahoo

Thanks
Prashant Kumar

How to secure oscommerce from Hackers.

2010-08-01T03:59:00.000-07:00

Hi All,

Once again I am here with new topic :How to secure oscommerce code.

Few things can and should be done:

1. Rename the admin directory with administrator_projectname

After rename the directory you will have to change two lines -

renamed_admin_directory/includes/configure.php:-

define('DIR_WS_ADMIN', '/renamed_admin_directory/');
define('DIR_FS_ADMIN', '/your/path/to/directory/renamed_admin_directory/');

2. .htaccess protection to the renamed_admin_directory (.htaccess cannot be used on a Windows server) -

Steps are

a. Create a new file - authentication.php under admin/includes -

if(!isset($HTTP_SERVER_VARS[PHP_AUTH_USER]))
{
    header('WWW-Authenticate: Basic realm="' . TITLE . '"');
    header('HTTP/1.0 401 Unauthorized');
    echo $SERVER_NAME . ' Authorization Required.';
    exit;
}
else
{    if (($HTTP_SERVER_VARS[PHP_AUTH_USER] != ADMIN_USERNAME) || ($HTTP_SERVER_VARS[PHP_AUTH_PW] != ADMIN_PASSWORD))
    {
        header('WWW-Authenticate: Basic realm="' . TITLE. '"');
        header('HTTP/1.0 401 Unauthorized');
        echo $SERVER_NAME . ' Authorization Required.';
        exit;
    }
}

?>

        b. Open admin/configure.php

            // define admin user/password for HTTP Authentication
            define('ADMIN_USERNAME', 'admin');
   define('ADMIN_PASSWORD', 'admin');

          c. Open application_top.php

                a. add new line just after require('includes/configure.php');

                         // HTTP Authentication is required before anything.
   require(DIR_WS_INCLUDES . 'authen.php');

                b. find something like     $current_page = basename($PHP_SELF); replace few lines with the below -

                if (($current_page == FILENAME_LOGIN) && !tep_session_is_registered('redirect_origin')) {
       $current_page = FILENAME_DEFAULT;
       $HTTP_GET_VARS = array();
                }

       if ($current_page != FILENAME_LOGIN) {
              if (!tep_session_is_registered('redirect_origin')) {
       tep_session_register('redirect_origin');
       $redirect_origin = array('page' => $current_page,
                                 'get' => $HTTP_GET_VARS);
      }

         // try to automatically login with the HTTP Authentication values if it exists

               if (!tep_session_is_registered('auth_ignore')) {
               if (isset($HTTP_SERVER_VARS['PHP_AUTH_USER'])
                        && !empty($HTTP_SERVER_VARS['PHP_AUTH_USER'])
                        && isset($HTTP_SERVER_VARS['PHP_AUTH_PW'])
                        && !empty($HTTP_SERVER_VARS['PHP_AUTH_PW']))
             {
                     $redirect_origin['auth_user'] = $HTTP_SERVER_VARS['PHP_AUTH_USER'];
                     $redirect_origin['auth_pw'] = $HTTP_SERVER_VARS['PHP_AUTH_PW'];
             }
       }
      $redirect = true;
    }
    if ($redirect == true) {
//      tep_redirect(tep_href_link(FILENAME_LOGIN));
      tep_redirect(tep_href_link(FILENAME_LOGIN, (isset($redirect_origin['auth_user']) ? 'action=process' : '')));
    }
    unset($redirect);
}

             c. Open login.php and add the below line -

                     if (tep_not_null($action)) {
      switch ($action) {
        case 'process':
       //$username = tep_db_prepare_input($HTTP_POST_VARS['username']);
          //$password = tep_db_prepare_input($HTTP_POST_VARS['password']);

       if (tep_session_is_registered('redirect_origin') && isset($redirect_origin['auth_user'])) {
           $username = tep_db_prepare_input($redirect_origin['auth_user']);
            $password = tep_db_prepare_input($redirect_origin['auth_pw']);
    } else {
              $username = tep_db_prepare_input($HTTP_POST_VARS['username']);
             $password = tep_db_prepare_input($HTTP_POST_VARS['password']);
                        }

                             case 'logoff':
       tep_session_unregister('selected_box');
          tep_session_unregister('admin');
       if (isset($HTTP_SERVER_VARS['PHP_AUTH_USER'])
                              && !empty($HTTP_SERVER_VARS['PHP_AUTH_USER'])
                              && isset($HTTP_SERVER_VARS['PHP_AUTH_PW'])
                              && !empty($HTTP_SERVER_VARS['PHP_AUTH_PW']))
       {
                  tep_session_register('auth_ignore');
                  $auth_ignore = true;
                unset($HTTP_SERVER_VARS[PHP_AUTH_USER]);
               unset($HTTP_SERVER_VARS[PHP_AUTH_PW]);
          }

Once these setting are in place anyone can login in OSCommerce Admin panel with single HTTP Authentication login.

3. Delete admin/filemanager.php and associated links, Delete file_manager.php from catalog/admin

4. Ensure that your folder permissions are never set higher than 755

5. Delete admin/define_language.php and associated link in the "Tools" box,

open admin/includes/boxes/tools.php and delete the line:

' . tep_href_link(FILENAME_FILE_MANAGER) . '" class="menuBoxContentLink">' . BOX_TOOLS_FILE_MANAGER . '
' .



It is also known that admin/define_language.php is vulnerable to the same hacks as filemanger, so should also be 
removed.

6. Some security addons has to be installed -

            a. You can prevent any injection attacks with Security Pro http://addons.oscommerce.com/info/5752
           b. You can monitor sites for unauthorised changes with SiteMonitor http://addons.oscommerce.com/info/4441
          c. You can block elicit access attempts with IP trap http://addons.oscommerce.com/info/5914
          d. You can add htaccess protection http://addons.oscommerce.com/info/6066
          e. You can stop Cross Site Scripting attacks with Anti XSS http://addons.oscommerce.com/info/6044
          f. You can add http://addons.oscommerce.com/info/6134 to assist with permission settings.


7. BACKUPS:

To be safe you should make backups of your dBase and site files, saves a great deal of time & effort cleaning up should anything nasty happen.

I recommend you use AutoBackup Database in Admin AND Database backup manager also Backup of all store files in zip format.

8. FORMS:

Security Pro cleans the query string, however any forms using $_POST are un-affected, if you have any forms using the post method you would be advised to do the following on pages accepting $_POST vars.

after: require('includes/application_top.php');

add:

// clean posted vars
reset($_POST);
          while (list($key, $value) = each($_POST)) {
                   if (!is_array($_POST[$key])) {
                          $_POST[$key] = preg_replace("/[^ a-zA-Z0-9@%:{}_.-]/i", "", urldecode($_POST[$key]));
                } else { unset($_POST[$key]); } // no arrays expected 
          }

 
This does not allow for arrays, additional code is needed if they are used.

I am sure this POST will help you.

Regards,

Prashant Kumar

Php: preg_match & preg_match_all, parse a website.

2010-07-30T11:52:00.000-07:00

Screen Scraping is a great skill that every PHP developer should have experience with. Basically it involves scraping the source code of a web page, getting it into a string, and then parsing out the parts that you want to use. A simple application of screen scraping could be to build a database of all the NFL teams complete with player details.

Screen scraping has been around on the internet since people could code on it, and there are dozens of resources out there to figure out how to do it (google php screen scrape to see what I mean). I want to touch on some things that I’ve figured out while scraping some screens. I assume you have php running, and know your way around Windows.

To call curl just write a function like this. This is so much easier than using the php commands, but you probably don’t want to use a shell_exec command on a web server where someone can put in their own input. That might be bad. I only use this code when I run it locally.

function GetCurlPage ($pageSpec) {
    return shell_exec("curl $pageSpec");

OR

$url = "http://www.nfl.com/teams/sandiegochargers/roster?team=SD"; $raw = file_get_contents($url);

The easiest way to do pattern matching I have found is without newlines. Here is how I remove them from the raw html before I start parsing out the data I want to scrape.

$newlines = array("\t","\n","\r","\x20\x20","\0","\x0B"); $content = str_replace($newlines, "", html_entity_decode($raw));

So now you have the source code of the page as a string variable, you need to parse out the results. Tis is where each scraping application will differ. Depending on the page structure and what elements you want to retrieve, you will have to alter the regular expression matching. You can view the source and see that the roster data you want is in a nice table with class name "standard_table". I also notice that this class name is unique to the page. So the next step is to get the start and end string positions for this table, and then extract just the table from the content:

$start = strpos($content,'); $end = strpos($content,'

',$start) + 8; $table = substr($content,$start,$end-$start);

Now we have just the table containing the roster data, and we need to parse out the rows and cells. The easiest way to do this is with preg_match_all. If this code is not clear, you can print_r and die() in the loop to see what the rows and cells arrays contain.

preg_match_all("||U",$table,$rows);
foreach ($rows[0] as $row){
if ((strpos($row,')===false)){

preg_match_all("||U",$row,$cells);

$number = strip_tags($cells[0][0]);

$name = strip_tags($cells[0][1]);

$position = strip_tags($cells[0][2]);

echo "{$position} - {$name} - Number {$number}
\n";

}
}

So now we have parsed all the data for a given team from the official NFL site. To do all the teams, wrap this in a loop and as a final step, write all the data to a database table and voila, you have a database of all team rosters for the NFL.

This simple scraping example is just to illustrate the basic concept. Also keep in mind that if the source structure of the page you want to scrape changes, you will need to adjust your pattern matching. You should always scrape the page once and save the results in a file, then read that file into your code for development testing to minimize the hits to the live server.

My personal opinion is that anything that is publicly accessible via the internet should be able to be scraped. What is the difference if you were to copy and paste it, basically that is what you are doing but doing it programmatically. You can definitely get into trouble if you misuse some data that you scraped, you could probably violate copyrights or whatever. Please scrape responsibly :)

scraping screen scraping web scraping website scraping php scrape

Tuning PHP

2007-11-21T04:28:00.000-08:00

Here is my compilation of tips on how to optimise Apache on Linux for PHP and CGI programs. These tips can also apply to Perl and Python. Links will open in a new window.
Also read my essay Optimizing PHP for a more in depth coverage of these issues with case studies.
To tune well, you need to benchmark your Web server. You can get some benchmark figures using ApacheBench (ab) or httperf. If you are an OS agnostic like me, I recommend using Microsoft's excellent free Web Application Stress Tool (WAST - requires M'soft Windows). WAST is more flexible than ab because it allows you to define different GET parameters for each thread. This is important because it allows you to simulate multiple PHP sessions via the PHPSESSID GET parameter. Avoid benchmarks involving PHP sessions when using ab as the sessions will become an artificial bottleneck. More info on using WAST with PHP.
To monitor the Apache server, I use the command top d 1 which displays CPU and memory usage of all processes on the machine, and apachectl status.

General rule of thumb for hardware upgrades: For PHP scripts, the main bottleneck is the CPU. For static HTML/images, the bottleneck is RAM and the network. According to Compaq benchmarks in 1999 (the original article is lost due to bitrot), a slow 400 Mhz Pentium can saturate a T3 line (that's 45 Mbps) with static HTML pages.
A PHP script will be served at least 2-10 times slower than a static HTML page by Apache. Try to use more static HTML pages and fewer scripts.
Enable the compression of HTML by putting in your php.ini: output_handler = ob_gzhandler
If you think about it, it might take you 0.1 seconds to generate 40K of HTML in your PHP page. However it probably takes 6 seconds for the user to download the page using a 56k modem without compresson. With compression, the download will probably take 2-3 seconds.
So the time taken for page generation is miniscule in comparison to the transit time of the HTML from the server to the browser. Therefore the biggest speedup you can perform for modem users is using ob_gzhandler! This feature is only recommended for PHP 4.1.0 or later. This point was moved closer to the top of the list on 9 July 2002 when i personally experienced the benefits of compression. More info...
Your PHP scripts are recompiled every time unless the scripts are cached. Install a PHP caching product (I recommend Turck MMCache) to typically increase performance by 25-100% by removing compile times.
Switch from file based sessions to shared memory sessions. Compile PHP with the --with-mm option and set session.save_handler=mm in php.ini. Informal benchmarks suggest that session management time is halved by this simple change. Added 1 Dec 2001. This hint should only be used for PHP 4.2.0 and above as there were bugs before this.
An alternative caching technique when you have pages that don't change too frequently is to cache the HTML output of your PHP pages. Try Smarty or Cache Lite.
Use output buffering (See ob_start). This will speed up your PHP code by 5-15% if you frequently print or echo in your code. Note that output buffering is already enabled if you are using the above ob_gzhandler hint. ASP does this in IIS 5. Added 26 Nov 2001.
On Windows, FastCGI is the highest performance way of running PHP with Apache. Although PHP4 can run in a threaded environment, some global locks prevent it from making full use of threads. Also PHP is not very stable in threaded environments because many common extensions are not thread-safe. Added Feb 2004.
In PHP4, objects and arrays should be passed in and out of functions by reference (with &), and everything else by value. In PHP5, objects are automatically passed by reference. For example the following gives best performance:
```
function &test(&$obj_or_array)
{
return $obj_or_array;
}
$var =& test($obj);
```
Be miserly and sparse with your server and web pages. Don't run X-Windows on the server and other unneeded processes. Apache Today has a guide on how to remove them.
Don't use images when text will do. Reduce your image sizes with a software like Adobe ImageReady or MacroMedia Fireworks. Avoid dithered images as they tend to compress poorly.
Spread the workload. Run your SQL server on another machine. Serve graphics and HTML from another low-end computer. If all static content is served from another server, then you can turn off KeepAlives in httpd.conf on the PHP server to speed up disconnects. 1 Feb 2002: I am currently using tux as the static web server, and have set it to pass all .php files to Apache which resides on the same machine. 15 March 2002: thttpd is another popular static web server.
Use hdparm to tune your hard disk. If you are using a default Linux install, this could speed up your hard disk by 200%. This is mostly useful for IDE hard disks, but some hdparm settings work with SCSI also.
Modify the following httpd.conf parameters to:
```
# disable DNS lookups: PHP scripts only get the IP address
HostnameLookups off 

# disable htaccess checks

AllowOverride none  
```
and turn on follow FollowSymLinks and turn off SymLinksIfOwnerMatch (correction by Joshua Slive) to prevent additional lstat() system calls from being made:
```
Options FollowSymLinks
#Options SymLinksIfOwnerMatch
```
There are many other httpd.conf tips below.
A brief and quite complete set of Apache Tuning Tips by Kurt.
If you are comfortable patching Apache 1.3 sources, try lingerd. Each Apache process currently wastes a lot of time "lingering" on client connections, after the page has been generated and sent. Lingerd takes over this job, leaving the Apache process immediately free to handle a new connection. As a result, Lingerd makes it possible to serve the same load using considerably fewer Apache processes.
Increase SendBufferSize in httpd.conf to the size of your largest Web page. Increase your kernel's TCP/IP write buffer size. See IAgora's tuning hints.
HotWired's: Tuning Apache Web Servers for Speed. An old article: 1997.
Sterling Hughes and Andrei Zmievski have some good advice in their Advanced PHP presentation (don't miss the section on Squid at the end of the slides). Added 13 Aug 2002.
Ron Chmara's advice on tuning Apache when using PHP's persistent database connections: don't set MaxRequestsPerChild too high so idle resources are released quickly.
Caching Tutorial for Web Authors and Webmasters by Mark Nottingham teaches you how to make browsers cache content.
If you are a brave soul, you can also apply Silicon Graphics' Accelerated Apache patches. "This project's aggressive optimizations make Apache/1.3 up to ten times faster and Apache/2.0 up to four times faster on the SPECweb96 benchmark."
Bradley J. Bartram talks about using flood to stress test apache. Also general monitoring and tuning advice. Added 24th Sept 2003.
Tips from the book Professional Apache.
The Official Apache Performance Tuning documentation. Good stuff, but very verbose.
Tips on Web-site Acceleration from SitePoint. Added 11 March 2004.
Sascha Schumann of the PHP development team recommends compiling PHP4 with the following settings
--enable-inline-optimization --disable-debug
Hints on optimizing Linux, more Linux and Solaris.
Set the noatime attribute for frequently accessed files. Otherwise Unix systems will record the last file access time. This is a useful setting for your web pages. Here's how to change in on Linux and Solaris. Added 14 March 2002.
Use a Ramdisk to store your temporary files (e.g. session variable files). Ramdisk howto. Mr Perkins points out that for Linux 2.4/Solaris, rather than creating a ramdisk, using tmpfs is more effective as it won't ask for all the ram straight away, and also if the machine becomes very busy the ram is freed and swap is used. The following command sets up the filesystem over your existing /tmp (where php stores cookie info by default):
mount tmpfs /tmp -t tmpfs -o size=64m
Scaling Apache 2.0 (pdf). Discusses the ftp.heanet.ie website. It serves content via HTTP, FTP and RSYNC all available via IPv4 and IPv6. Includes advice on tuning OS. Added 24 Mar 2006.
Scalable Internet Architectures (pdf), an extensive presentation that was later expanded into a book of the same name by Theo Schlossnagle. Discusses some pretty sophisticated techniques including DNS load balancing and mod_backhand. Added 24 Mar 2006.
HP/Compaq Apache tuning guide in PDF. Very complete and includes benchmarks.
After xenu.net was slashdotted, they published their Apache optimization tips.
I just realised that all the above tips deal with squeezing the maximum performance from a single server. Ultimately if you are successful, the tips won't be enough. Then you will need to switch to using multiple Apache servers (a server farm) with clustering, load-balancing and caching. Using Squid as a proxy cache. Configuring Squid. Rasmus Lerdorf recommends squidGuard (added 30 July 2002).
Deprecated is the recommendation to use Apache 2 with threaded PHP SAPI. Apparently PHP still has some global locks that prevent it from maximizing concurrency with multiple threads. Modified Feb 2004.

PHP Specific Articles
- High Performance PHP presentation by George Schlossnagle given at PHPCon 2002
- Advanced PHP presentation given by Sterling Hughes and Andrei Zmievski at O'Reilly Open Source Conference 2002.
- Optimizing PHP article by John Lim.

Associated Topics

- Security and Apache: An Essential Primer (LinuxPlanet.com)
- Using User Authentication from Apache Week.
- Dirk Brockhausen's tutorials on mod_rewrite part 2 part 3 part 4
- And you thought Apache was fast...

.htaccess on localhost

2007-10-05T01:32:00.000-07:00

The recent problem i faced when i was trying to run .htaccess file in my WAMP configuration. The script was working fine when it was live on server (as basic configuration was already there) but was giving 404 when i tried in localhost.

After googling i found no answer so i want to help others in this small topic.

The solution is very simple :

If its Windows+Apache+Php+MySql (WAMP) type "Web-Developer Server Suite" then you only needs to search for a folder called Apache22. Under this folder we have several folders, the one which we needs to see is CONF. Now open "httpd.conf" in your favorite editor. Now here you needs to see few things :

1. if "#LoadModule rewrite_module modules/mod_rewrite.so " mod is commented then remove the '#' from the beginning.

2. Make sure "#LoadModule alias_module modules/mod_alias.so" is also not commented.

The above two by default not commented so no need to worry for the first two.

3. Now search for a word "AllowOverride" and make sure you have changed it to "AllowOverride All".

4. And you done. Just restart the Apache and will run all fine, if your .htaccess has no error :)

I hope this will be helpful for you all!!

Prashant Kumar
Software Professional

Google Checkout : Failed to Get Basic Authentication Headers

2007-09-27T01:38:00.000-07:00

Google Checkout : Send failed with code: 401. Response body was: Failed to Get Basic Authentication Headers

The most common problem facing php file in Google Checkout is ResponseHandler.php. Many of us really don't know how exactly its working and behave. After few days of my r&d in Google Checkout i have the solution to fix the "Get Basic Authentication Headers" problem.

I started running ResponseHandler.php against Google Checkout running under different situations and I ran into a problem with authentication when PHP was being run as a CGI under Apache. When running as a server module (mod_php) PHP takes care of decoding HTTP basic for you (see HTTP basic authentication in PHP). When a using HTTP basic PHP will automatically populate $_SERVER[’PHP_AUTH_USER’] and $_SERVER[’PHP_AUTH_PW’] variables with the username and password that were provided. IF and ONLY IF PHP is being run as a server module (like mod_php). If you are running PHP as a CGI then those two variables won’t get created at all, ever, even when using HTTP basic authentication. And since you can’t do anything in WordPress via AtomPub without authenticating you are dead in the water. Well, not exactly.
However, there is a workaround available which can make HTTP Auth for PHP working even when in CGI mode.

1. Create one .htaccess file in the folder where your responsehandler.php file is :

.htaccess file:

<<<Start--- AuthName "Google checkout Basic Authentication" AuthType Basic AuthUserFile D:\\\\www\\\\webroot\\\\projectfolder\\\\googlelibraryforcheckout/.htpasswd
require valid-user
---End>>>

2. Create one .htpasswd file in the folder where your responsehandler.php file is :

.htpasswd
$merchant_id:$merchant_key

and now you need to disable few codes from googleresponse.php file :

* googlecheckout/responsehandler.php folowing code will be disabled if
* CGI config is set to True
*
*
[CODE]
//Parse the HTTP header to verify the source.
if(isset($HTTP_SERVER_VARS['PHP_AUTH_USER']) && isset($HTTP_SERVER_VARS['PHP_AUTH_PW'])) {
$compare_mer_id = $HTTP_SERVER_VARS['PHP_AUTH_USER'];
$compare_mer_key = $HTTP_SERVER_VARS['PHP_AUTH_PW'];
}
else {
error_func("HTTP Basic Authentication failed.\n");
exit(1);
}

if($compare_mer_id != $merchant_id || $compare_mer_key != $merchant_key) {
error_func("HTTP Basic Authentication failed.\n");
exit(1);
}
[/CODE]

I hope this article will help you alot to work arround the Google Checkout's "Send failed with code: 401. Response body was: Failed to Get Basic Authentication Headers"

Regards,
Prashant Kumar
(If you have any problem then please write here i will try to solve all queries related to php and google / paypal chekckout)

Its really difficult to decide which framework works best for the project

2007-09-05T08:11:00.000-07:00

Hi All,

When i was googling i found now we have with over 40 frameworks available. So i am sure it's really difficult to decide which framework works best for our project, especially as each framework offers different functionality. So i did some r&d and able to make one table for you so you can decide what exact framework you are searching for. In these 40 framework i was only able to sort 10.

So we can look at ten popular frameworks, and compare them to each other :

Framework	PHP4	MVC1	ORM3	DB Objects4	Templates5	Caching6	Ajax8	Auth Module9	Modules10
Zend Framework	-		-		-		-	-
CakePHP					-				-
Symfony Project	-				-				-
Seagull Framework							-
WACT			-			-	-	-	-
Prado	-	-	-	-
PHP on TRAX	-				-	-		-	-
ZooP Framework			-
eZ Components	-	-	-				-	-
CodeIgniter			-				-	-

#1: Indicates whether the framework comes with inbuilt support for a Model-View-Controller setup.
#2: Indicates whether the framework supports multiple databases without having to change anything.
#3: Indicates whether the framework supports an object-record mapper, usually an implementation of ActiveRecord.
#4: Indicates whether the framework includes other database object, like a TableGateWay.
#5: Indicates whether the framework has an inbuilt template engine.
#6: Indicates whether the framework includes a caching object or some way other way of caching.
#7: Indicates whether the framework has an inbuilt validation or filtering component.
#8: Indicates whether the framework comes with inbuilt support for Ajax.
#9: Indicates whether the framework has an inbuilt module for handling user authentication.

#10: Indicates whether the framework has other modules, like an rss feed parser, PDF module or anything else (useful).

I hope this will help u to decide which one will be helpful for your project.

Cheers!!
Prashant Kumar

Php SetCookie : Reason behind Cannot modify header information - headers already sent by..

2007-08-29T01:57:00.000-07:00

Cannot modify header information - headers already sent by (output started at ...) is a very well known error returned by PHP. You would receive this error if you are trying to set the header of a page after the header has already been sent to the client. There are two main ways of getting around this error.

How it really works: Every file that you request from the Internet comes with a header. This tells the browser how to handle that specific file. For example it could be a page that the browser will display or an executable that it will download. The header will contain information about what type of file this is.

PHP sends the header of the web pages to the client each time a page is requested. If you change that header after it was already sent, PHP will return the "Cannot modify header information" error. Most of the time you change the header by using the header() function, as in the example below:

header("Location: http://www.example.com");

This tells the browser that it should open the URL http://www.example.com (thus get the header from there.) However if you place this line in the code after you already displayed the content, the headers have already been sent to the client. That's simply because even if you don't set your own header, each time you display anything on a page, even a blank space, PHP will send the headers for you. If you make use of the header() function after any such blank space or any other content for that matter, you'll be attempting to send a new header to the client, which is not possible.

The same applies for other functions that attempt to change the header, such as setcookie() which - because the cookie travelers in the header - needs to be placed before any output is sent to the page.

Solution #1 - no output before header(), setcookie() and other header setting functionsThus, the first solution to the "Cannot modify header information" error is to make sure you are not outputting any content at all before the call to the header() function.
Solution #2 - ob_start() The second method consists in calling the ob_start() at the very top of the PHP script like this:

ob_start();

This will turn output buffering on. With output buffering the entire PHP script will be processed before any output is sent to the client. Thus all the PHP script will be aware of all the header changes and it will not send any headers until every line has been processed.ob_start() may appear to slow down the loading time on server intensive pages, because the client will not be presented with any fragment of the page until the page is fully processed.

Prashant Kumar

SEO : What should be the title tag for your business?

2007-07-11T05:47:00.000-07:00

The html title tag of a web page's html header is the single most important "on page" element when it comes to search engine optimization. That being said, is the best use of this valuable real estate served by including your business name in the title? Chances are the answer is a resounding "no!"

The title tag is an html tag which occurs in the header of a web page's code. The first thing I look at when I get a call from a prospective client is their title tag. More often than not, this tag is being used improperly, to the extreme detriment of the client.

Recently SEOMOZ.org released its rankings of the ten most important factors in search engine rankings. The title tag came in at number 1, and this is no surprise to any SEO that has been around for awhile. Google especially pays a lot of attention to title tag content, and uses title tag information heavily to ascertain the relevant keyphrases for which to rank a site. The opinion of search engine experts is unanimous on this one - keyphrase use in the title tag is the number one "on page" factor affecting search engine rankings. This is not disputed, theorized or subject to professional debate. It is a fact.

Given this fact, we must look at how to best use the title tag to optimize our site for search engines. Many sites place the business name in the title tag (or even worse yet leave it blank or with default content such as "untitled document" or "home page"). Any of these variations can be disastrous!

Let's use an example of a company that manufactures widgets. The primary keyphrase for that company would be "widgets", this being the phrase for which the company would like to rank highly for in the search engines. Now let's assume the company name is "ACME Manufacturing Company, Ltd.". Notice that the word "widgets", which is the desired keyphrase, is not extant in the company name.

So the company goes out and builds a wonderful web site to promote their widgets. However, throughout the site the title tag contains the following content: "ACME Manufacturing Company, Ltd." What is the effect of this?

First off, the effect of this is that the site will likely rank highly for the search query "ACME Manufacturing Company, Ltd.". The problem is that nobody is searching for the company name, they are searching for widgets. So all of ACME's competition shows up in the search engines for a widget query, but poor ACME is nowhere to be found. How do we help ACME rank highly for the search query "widgets"? We must optimize the title tag for the search engines by replacing the current title tag content with the desired search query: "widgets".

Generally speaking, the company name should never appear in the title tag unless you actually expect to derive most of your traffic from searches involving your company name. As this is a rare situation, avoid the temptation to put your company name in the title tag - save it for elsewhere on your page. Put your desired search keyphrases in the title tag, and leave it at that.

Following this methodology throughout your site by optimizing title tag content for each page according to the desired search query for that page will be a major step in the right direction for high search engine rankings.

How to configure debugbreak in NuSphere / php

2007-05-13T07:03:00.000-07:00

Hi,
Today i have configured debugbreak for my php programming. I installed it in my Apache server, after googling here and there, i got success within 3 hrs (because lack of information available in Web).

Its really very easy to configure debugbreak in NuSphere. Just follow this simple steps :

Download dbg-wizard.php from here.
Put this downloaded file under www/webroot/ and run from browser : http://localhost/dbg-wizard.php
Follow the simple steps... i am sure you will be able to configure debugbreak very smoothly using this file. Here we need to enter few lines in php.ini(located under c:/windows/php.ini) and need to paste one module from C:\Program Files\nusphere\phped\debugger\server\ to www/php5/ext/

I hope this article will help my juniors to configure debugbreak very quickly and easily.

I need your valuable comment on this post.

Thanks
Prashant Kumar

SEO Help

2007-05-03T02:30:00.000-07:00

Because today i don't have much work so i have gone through with SEO realted stuffs and found it very interesting, so i am sharing all the important issues with you all. These tip will help you to rank your site in google and all other web directories.

What is SEO :

Definition from Wiki Pedia : Search engine optimization (SEO), a subset of search engine marketing, is the process of improving the volume and quality of traffic to a web site from search engines via "natural" ("organic" or "algorithmic") search results. SEO can also target specialized searches such as image search, local search, and industry-specific vertical search engines. SEO is marketing by understanding how search algorithms work and what human visitors might search for, to help match those visitors with sites offering what they are interested in finding. Some SEO efforts may involve optimizing a site's coding, presentation, and structure, without making very noticeable changes to human visitors, such as incorporating a clear hierarchical structure to a site, and avoiding or fixing problems that might keep search engine indexing programs from fully spidering a site. Other, more noticeable efforts, involve including unique content on pages that can be easily indexed and extracted from those pages by search engines while also appealing to human visitors.The term SEO can also refer to "search engine optimizers," a term adopted by an industry of consultants who carry out optimization projects on behalf of clients, and by employees of site owners who may perform SEO services in-house. Search engine optimizers often offer SEO as a stand-alone service or as a part of a larger marketing campaign. Because effective SEO can require making changes to the source code of a site, it is often very helpful when incorporated into the initial development and design of a site, leading to the use of the term "Search Engine Friendly" to describe designs, menus, content management systems and shopping carts that can be optimized easily and effectively.

The basic SEO rules for New Sites:

Go through the Google Webmaster Guidelines.
Optimize your content with keyword. Use this tool to know how much the word is searched in google.
Try to get back links for related site. This will help you to give rank in google.
Put Google Analytics code in your pages to know the user's activity.

Web Master Toolkits :

Analise your Web Pages :

Its important to know the behavior of your visitors. For that its very much important to put some code inside the pages to track the visitors and find out how they are navigating throughout the site. There are too many free web tools available for this, like :

How to Advertise/Earn in/from Google:

Google Advertising Programs

Good Online Tutorials in SEO :

I am sure this will give you the overall about SEO.