Aaron Saray

open source programmer,
web developer

entrepreneur, author
and musician

My Blog

contains PHP, Web and business/entrepreneurial related content. Please join in the conversation!

Monthly Archives: March 2009

Why the Boss makes YOU make a List or Proposal

From time to time, I’ve been asked to make a list of my design ideas, or to develop a better proposal for an idea I have. This really irritated me: didn’t he believe me? Didn’t he trust my ideas? But … Continue reading

Posted in professional tips | Tagged | Leave a comment

Another example of CSRF – in CSS

Just saw this really cool example get submitted on one of my websites testing for CSRF: ?View Code CSS1 #logo{background:url(deletepost.process.php?id=12345&userID=12345); Just another great example of why you should 1) not use GET for irreversible changes 2) filter filter filter! (I … Continue reading

Posted in CSS, javascript, security | Tagged , , | 1 Comment

My Progression through Forgot Passwords

I thought I’d take some time to look at the 3 main ways that I’ve handled forgotten passwords on my websites, why I did them that way, and if there was anything wrong. Disclaimer: there is a lot of bad … Continue reading

Posted in PHP, programming, security | Tagged , , | Leave a comment