I’m aware I left templates “manipulation” out, and I still won’t care for it yet. It is not the time to bother with such fancy features if I don’t have a solid extension base to work with. I’m seriously hoping to pull this one off. I want to get STARTED to code more, but I can’t code blindfolded with just ideas on mine and no blueprint to guide me, which is why I analyze, design, implement, test (you should know what I’m talking about :) ).

Extensions in a bulletin board is hard to see, I mean, there is so MUCH data to process. So many “events” to place, like on the one I placed “prePostLoop” which if injected, instead of calling my default model, all the raw data will be gone to your extension for you to process. Of course, you don’t have choose “prePostLoop” to just change ONE thing, there will be of course, other events to be placed.

Yet, a bigger problem to overcome is making the extension database layer and choosing the right database user, and also determining the extension’s “templatebits”, “routes”. It all requires a lot of “injections” to routes, doctrine (yes, I chose Doctrine ORM), views. One thing for sure is that, in the end you will have to place your function in the template. That’s a no brainer for many people, but I’m attempting to do something else.

To be honest, while it looks overwhelming for me. I still know I can do it if I keep my mind cool. I mean, it’s not HARD, like it was for me that I had to take a few days off after I designed how ACL (Access lists), ACL_Roles, ACL_Roles_Whitelist, ACL_Items. All I know is that the initialization of the board is going to be quite heavy.

To end this post, talking about events made me think of “Sections” as in “Link sections”. Where everyone want to keep it nice and neat. The problem with link sections is that I have to take care of administration pages and other things. It means, many and “Iterate” object comes to mind, such an eventful semester, I’m hoping it gives good results :)

0 people like this post.

Like 

It is exciting in a way to get new concepts, and just yesterday I start to get a new one that I will immediately implement.

The plan is the following, probably nothing new to many seasoned programmers, but on current projects it is rarely seen, especially in PHP. We usually use a database storage, probably MySQL. MySQL provides the feature to allow multiple users to share one database, with different permissions. Quite a nice feature isn’t it? It’s hard to imagine how useful this is in programming, because well, installing PHP scripts just relies on the usual “SELECT, CREATE, INSERT, DELETE, DROP, UPDATE, ALTER”. We don’t usually THINK why MySQL users exists and many installers just tells you “Hey! Just write your database, database user, password, port if there is any and we’ll do the rest!” And that’s the worst mistake and you’ll see why:

I layered OpenType Threads administration concept in two, the master, the user. The master user has the following privileges :

Master user:

• INSERT
• DELETE
• UPDATE
• SELECT
• CREATE
• ALTER
• INDEX
• DROP

The user:

• SELECT
• INSERT
• DELETE
• UPDATE

Now, where do we usually use the “master user”? The answer lies in administration panel, imagine if you use wordpress, wordpress plug-ins usually need to CREATE/DROP/ALTER/INDEX a table, INSERT, DELETE, UPDATE, SELECT data. It’s perfect for the admin section.

Now why would I want to use two users, sharing the same database? The answer lies in SQL exploits. I won’t pretend this will take care of all injections, that depends mostly on your sanitation of inputs in your web application. It will certainly stop aggressive ones, like, for example:

- a malicious user attempts to DROP the database, everything will be lost in just one command.
- One of your administrator’s “betrays” you and attempt tries to delete tables, again the DROP command will be unavailable.

Now as we see, using a the “normal user” will certainly be helpful. Yet it leaves kind of a gap, we can’t do much with the “DELETE” command, actually we can if you rethink your application. Lets say that in your articles table you have the usual (artID, artContent, artTitle) lets add one more column (artState(ENUM(‘publish’,'delete’,'draft’))). We have enumerated three options, publish, delete and draft. The usual “publish” will just show the article to the users viewing your site.

Now, instead of using the DELETE command to delete the record, it will hide the record and add it to a “trash can” which will be ONLY be deleted when you access the administration panel so it carries the “master user”.

Issues like “what if I get my admin login stolen?”, “what if the malicious user steals the user, password of the master user?”. Well, those issues depends on the security of your web application, it has nothing to do with the TRANSACTIONS made. And of course, sanitize all inputs.

I don’t believe it hurt to try this because so far it’s just another measure to take. Infact I’m not taking the measure with just using TWO MySQL users. I’m also throwing in Foreign Keys Constraints, to stop any user deleting data that is related in another table. The introduction of Foreign keys constraints, it’s useful, but also can turn into a double edged blade if you overuse it.

Well, there is still a lot to learn :) I’m still lurking in MySQL documentation to get more ideas (but I should stop, implementing all unneeded features will just put a hole in your goal). Yet I’ll just do this one to see how it goes, it’s a gamble after all. I need to see the impact it will cause and what benefits will be gained.

Why did I start re-factoring now? Good question! It had something to do with OpenType Threads, working on my prototype has taught me a lot of things about classes, design patterns and a better problem solving skill. So when I looked at my wrapper class, I said to myself “hmmm… maybe we should do this one more time”. Yet, while this is still a hobby, one of my goal of why to re-factor the code was to allow me a better manipulation with JavaScript. I know I can use XML in JavaScript but well, we’ll see how it goes :)

So it’s time to pay a visit to Bing’s API documentation and delete old code without thinking twice.

What about OpenType Threads and the BING API PHP Library? One is of course far from being released and another is around 70% done (BING PHP Lib). OpenType Threads on the other hand is begin written from the very scratch, as it is not based from any web application. OpenType Threads is a challenge to re-invent bulletin boards internally. Quite a daring and exhausting challenge because structuring each OBJECT and folder structures for future extensions and re-usability of objects; not to mention the communication between objects.

Vacation was the key! I’ve enjoyed it very much and I’ve finished clearing my mind. It has come with a little drawback that is coming back to write PHP it makes you feel a little lost when you leave something in the middle for a long time then come back to resume. That said, it feels joyful to get going with a clear mind and fresh energy.

I’ll post some photos soon! We encountered savage monkeys, a friendly horse, some cows, etc :)

0 people like this post.

Like 

The purpose of my project is to provide rich flexibility to developers and users.

- MVC Design (Model-View-Controller): The application itself is a framework, yet I must warn you that it is not a framework. The choice of the MVC design is to eliminate the use of template engines. I believe PHP is not a tough language to learn, so please web designers, learn the basics.

So, is it really a framework or not? Hard to say buddy! It feels like one, but it’s not one.

- URL Routing: Oh so glorious clean urls (a.k.a pretty urls, friendly urls). This is what makes it feel a framework. OpenType Threads provides the option to create new routes: Regular Expression routes, Static, Route. So! When a developer creates an extension, they don’t need to bother with links at all. This is certainly a must-mention. OpenType Threads does not attempts to be a framework, but a solution. Sure, you can create portals with it, probably. It will be always a message board, no buts.

- Database: Wait? I’m going to be discussing about database? Naw! I’ll be using Doctrine ORM to be the main layer to manage the database. Why?

1. You can use Oracle, Firebird, Microsoft SQL Server, etc. Through PDO
2. Prevention of SQL Injections
3. Creation of multiple connections (which is very useful if I want to import, lets say… phpBB, IceBB)

- Re-usability: OpenType Threads tries it hardest to become independent of some objects. That means that if I use a e-mail validation filter, you can also use it painlessly for your extensions.
- Extensions: This is the toughest part, there are design patterns that will probably help. Yet I don’t want to create a system that will overkill the server. There are many things that happens in a bulletin board, INTERNALLY. And really, I don’t want it to be a wordpress, because it may be pretty externally, but internally it’s one ugly thing to maintain. (really, how can they keep their sanity!)

- License: This product is under a proprietary license. See why later on :)

Anyway that should give you an idea of this web application. I know there are frameworks out there I could have based my application on. It is not because I feel like “but man I hate learning other systems, I prefer writing my own!” or “php frameworks are so over-engineered”. I have been using PHP for years, on my way learning Java. See, this project is not a popularity contest. This is me wanting to learn more about design patterns, this is me becoming a better php developer, and this is me providing my knowledge to users.

What can I say? Don’t expect things to come to you. Go for it, life is a bitch, and while it sounds unprofessional, it’s a tough one! I’ve been hesitant for quite a long time in starting a project, always thinking the negative sides of creating one. Take joy in what you create, take joy in what you can vision. Don’t worry about “what if people don’t like it” , “what if my creation sucks”, “what if I won’t be able to support others”, “there are other alternatives”. Really, don’t worry, be happy. Part of the learning process is that sometimes you learn with others.

About the “there are other alternatives”. And you know what? sometimes they stick with the same features for years, same look, same logic. No re-factoring, no features. A product that has an standard set of features DOES NOT limit you to be creative. I can think of a dozen ways how a message board should act, how can it look. Really, take joy in what you can create and envision.

Another personal thought: I started this project because I can’t stand the solutions out there. I will not name any of them because if I do I will sound more like a person with anger management problems.

A few more things about the project: What about Polls, private message system, etc etc? Hey guys, I’m only one person. I take action with present needs. I don’t want to go create something half done then jump onto the other. The world will not end! So, baby steps, we’ll get there :)

Oh yea, about the proprietary license, no no, the project will be licensed under the Lesser General Public License (LGPL)

I know some companies will love me for choosing the LGPL, don’t worry, the love is equal. And guys, OpenType Threads is PHP Powered!

How! I’m introducing a new class called ResultSet_Manager which will take the decisions on which class to use (pretty much like factory pattern but not quite since it doesn’t follow some of the standards). The Manager can be turned on optionally to maintain an independance and if it’s on it will call the classes starting with ResultSet_SourceType_(SourceType). Let’s take a look at how it would work:

    // // Notes: Spell query must be urlencode, REQUIRED
    $search->query('which+is+better+tweetdeck+or+seesmic')
           ->setSources('Web')
           ->setFormat('xml')
           ->setResultManager(TRUE); # Required to be boolean

    // Contains the search
    $results = $search->getResults();
   echo $results->Total;
   echo $results->Get->WebResult[1]->Title;
   echo $results->QueriedTerm;

As you see, it is slightly shorter than the previous:

$ThumbURL = $ImageResultSet->Image->Results->ImageResult[$i]->Thumbnail[0]->Url;
$ThumbWidth = $ImageResultSet->Image->Results->ImageResult[$i]->Thumbnail[0]->Width;
$ThumbHeight = $ImageResultSet->Image->Results->ImageResult[$i]->Thumbnail[0]->Height;
$ThumbSite = $ImageResultSet->Image->Results->ImageResult[$i]->Url;

Now you notice quite a difference, although it’s not the same query we originally ran you should see that the code has been reduced.

While the goal to make everything more simple remains a priority. The ResultSet Manager and the SourceType classes (e.g ResultSet_SourceType_Web) are independant of Bing API PHP. Meaning that you can use it without calling Bing API PHP.

For example (example has not been tested in dev environment):

<?php
$XML = file_get_contents('http://api.search.live.net/xml.aspx?AppId=APPID&Query=Guitars&Sources=Image');
require_once 'SourcesManager/ResultSet_SourceType_Image';
$ImageSet = new ResultSet_SourceType_Image($XML);
$ImageSet->Get->ImageResult[1]->Title;
?>

All SourceTypes classes have and property called “Get” which holds the Result. In Multiple sources, while not yet developed. My other idea is to do something nearing to:

$MultipleSets->Get->ImageResult[1]->Title;
$MultipleSets->Get->WebResult[1]->Title;
$MultipleSets->Get->VideoResult[1]->Title;

Anyway! The next version will provide a experimental support of SOAP. That’s about it for today, see you next time.

- Removed urlencode from the library, you must use urlencode when querying since it won’t do it automatically

- Removed setProxy and added something more flexible, that is setCurlArray(array()), check the php.net manual on what to put in the array.

- Added setHighlightFormat() as I explained before this helpful function will aid you with bing.com’s highlight unicode chars (U+E000 and U+E001)

- Another addition is getRequestedQueryURL. This is something I needed most when I was querying the server, this will return you something similar to this: http://api.search.live.net/xml.aspx?AppId=YOUR APP ID&Query=da&Sources=Image&Image.Count=20&Image.Offset=0&Image.Filters=Size:Small&Adult=Moderate&Options=EnableHighlighting

- Now another function is resetHighlight($source), bing.com returns your search with extra characters in the title, this will help you remove them. Optional function.

Download Now | Check Bing API Documentation | Developers API Key

After this post, there is a next one coming in a few hours showing examples of this library and SimpleXML and more.

Here is the following fixes of the library
- URL Encode added
- cURL RETURN TRANSFER added

Now it’s very stable, yet I want to point out the following things:

According to one of the Microsoft’s BING API developer. PHP SOAP is currently having problems with Bing API Service. I haven’t tried it out because I’m still working on the implementation.

Download the newest fix | Examples

Get the new updates at the project homepage in codeplex.

Well, since the opening of bing.com I’ve been playing with the API and some of the options it provides. Certainly I was getting annoyed since I had to rebuild each of my queries if I wanted something so I search for a library that could do this for me which I couldn’t find and I ended up writing my own.

Requirements: PHP5 and cURL

How to use this API? Here is a simple demonstration

// Include the Bing API PHP Library
require_once 'library/BingAPI.php';

// Simply start the class with your AppID argumented
$search = new BingAPI('YOUR APPID KEY');

// Build your query easily
/* To use multiple resources simply do ->setSources('Web+Image') ,
   it must match the source type
   bling.com provides */
$search->query('gimp')
       ->setSources('Web')
       ->setFormat('xml') /* Also you can try: xml, soap or json */
       ->setOptions(
             array(
                  'Web.Count' => '10',
                  'Web.Offset' => '0',
                  'Adult' => 'Moderate',
                  'Options' => 'EnableHighlighting')
    );
/* Check the API documentation in bing.com for more information */

/* This will give you a raw output */
echo $search>getResults();

I’d hope this little library makes your life easier :) Soon there’ll be a tracker if there are problems with it or you can comment here.

Download it now | Check the documentation | Get a Developer API Key

Heads up: There will be soon a better way to issue bugs

Any issues: http://bingapiphp.codeplex.com/WorkItem/List.aspx
Project Homepage

About SOAP Implementation

It seems I have made silly mistake with SOAP, there is actually no current SOAP implementation and it will be supplied soon.