Watch out for the latest Security Patch to deal authentication bypass for RoR

ror41Ruby on Rails framework developers have been continuously releasing security updates since the last two weeks. Its recent updates like 3.0.20 and 2.3.16 versions were to address the remote code execution vulnerability. This was the third security patch released this month. The developers have mentioned that the updates released are extremely important, and have advised the users of 3.0.x and 2.3.x rails framework to update as soon as possible.

The security update will fix the vulnerability in the Rails JSON code. That allowed the hackers to bypass authentication system and inject random SQL into the application database. It occasionally performed denial-of-service attack too. The rails developers have also pointed out that currently it supports only the 2.3.x, 3.1.x, and 3.2.x versions and might release an update for 3.0.x version.

Most recent vulnerability was identified as CVE-2013-0333, which was patched in the framework on 8th of Jan. The Ruby on Rails developers using Rails 2.3 and 3.0 are also advisable to install the new fixes even if they have installed the fix for CVE-2013-0156 earlier.

 

Brief Summery

  • Affected Versions are: 2.3.x, 3.0.x
  • Unaffected Versions are: 3.1.x, 3.2.x, and applications using yajl gem
  • Fixed Versions are: 3.0.20, 2.3.16

Mobile App Developers Directory For Developers And Project Listing

Many resources have revealed that the current era is the age of smart-phone industries. Consumers are looking for smart devices more than ever, and not just for the platform but because of a huge library of apps that can be installed on the device. So developing mobile applications for the devices has become the new challenge for the mobile app development industry. So companies are in continuous search for mobile app developers to build their application. But finding the right developers is not an easy task.

To get rid of this, Andolasoft has developed ‘Orangegigs’, a free mobile app developer directory, using Ruby on Rails. Objective is to meet the mobile app developers with mobile development companies. The website features simple functionalities with a fresh look and feel to the users.

Never miss an update from us. Join 10,000+ marketers and leaders.

Here the companies don’t have to register to post their requirements similarly the developers can apply for a job without being a member. Companies including individual recruiters across the globe can list their mobile development projects for different mobile platforms such as iPhone, iPad, Android, Blackberry, Windows phone and PhoneGap.

Mobile app developers can easily browse through the listed companies and contact them directly based on the location and the technology platform they work. The website is also integrated with popular social media plug-ins like facebook, twitter and Google+ to share their projects to the social networking sites. It includes couple of filters for location and platform. Also this filter helps to build SEO friendly URLs which are loved by crawlers.

With these feature-rich facilities orangegigs.com evolved into the most preferred mobile app developer directory among the companies. Wanna give it a try? Go ahead and do it at www.orangegigs.com

Validating RSS Feeds in Rails

Rails1FeedValidator is a gem which validates the RSS feeds through SOAP protocol of the W3C Feed Validation service. It helps to find out errors in RSS or ATOM feeds. In Rails app we can do the feed validation by installing the gem.

    Step#1

  • Install the FeedValidator as a gem:
  • gem feedvalidator

    Run the bundler to install the gem
    Step#2

  • Include the require ‘feed_validator’ into your controller
  • Step#3

  • Generate a migration file and edit the file to add the following fields
  • class CreateFeeds < ActiveRecord::Migration
    def self.up
    create_table :feeds do |t|
    t.string :title
    t.timestamps
    end
    end
    def self.down
    drop_table :feeds
    end
    end
    

    Step#4

  • Validate your feed URL in your controller
  • def create
    site_url = params[:feed][:title].sub(/(\/)+$/,'')
    begin
    v = W3C::FeedValidator.new
    if v.validate_url(site_url) && v.valid?
    @feed = Feed.new(:title => site_url)
    @feed.save
    end
    rescue
    # Do nothing
    end
    redirect_to request.referrer
    end

How To Convert Documents To PDF in PHP?

‘Unoconv’ is the tool to convert doc, Docx, ODT to PDF file in PHP.

‘Unoconv’ is a command-line utility that can convert files from any ‘OpenOffice’ supported formats to a different ‘OpenOffice’ supporting the format.

Installation Required:

  • OpenOffice and Unoconv

You can provide one or more files as arguments to convert each of them to the specified output format.

Example:

unoconv -f pdf  example.doc

bove command will convert the example.doc to example.pdf in the current working directory.

Some other commands are:

unoconv -f odt example.doc
unoconv -f doc example.odt
unoconv -f jpg example.odt
unoconv -f xsl example.csv

Merge And Split PDF In PHP Using PDFtk

Merge a group of PDF files to a single PDF file without disturbing the contents using PDFtk.

  • PDFtk runs on a variety of platforms, including Windows, Linux, Mac OSX, FreeBSD, and Solaris.
  • It does not require Acrobat and allows you to manipulate PDF easily and freely.

What All You Can Do in PHP Using PDFtk

  • Merge PDF documents to one.
  • Rotate PDF Pages or documents.
  • Split the pages of the PDF into a new document.
  • Encrypt the output as desired.
  • Decrypt the Input as necessary but requires a password
  • Background watermark or a foreground stamp can be applied
  • Report on PDF metrics can be generated such as metadata, bookmarks, and page labels.
  • Update PDF metadata.
  • Attach numerous files to the PDF document.
  • Compress a PDF document into a single page.

Under the GPL, PDFtk is licensed for the public.

Download Link: https://github.com/bensquire/php-pdtfk-toolkit

Examples:

You can provide two or more PDF files as arguments to create a single PDF file as output.
Merge two or more PDFs into a new PDF file with all the original contents

  • pdftk example1.pdf example2.pdf example3.pdf cat output result.pdf

Rotate the first page of a PDF to 90 degrees clockwise

  • pdftk in.pdf cat 1E 2-end output out.pdf

Rotate all the pages of the PDF document by 180 degrees

  • pdftk in.pdf cat 1-endS output out.pdf

Report on PDF document metadata, bookmarks and page labels

  • pdftk mydoc.pdf dump_data output report.txt

iPhone 4S Has Taken The Market Sales High Compared To iPhone 5

Soon after the release of the iPhone 5, it went on to become the highest-selling iPhone in history, but based on the recent survey, it has shown some reports for which Apple’s investors are alarmed of possible unfavorable events.

According to new research, this suggested that consumer’s interest in Apple’s popular iPhone 5 lineup may have peaked.

But shares of Apple have decreased since the last month from September. The share has decreased over 25% from as high as $705.07, for which investors are now beginning to panic about Apple’s future.

Never miss an update from us. Join 10,000+ marketers and leaders.

UBS analyst Steve Milunovich has estimated for Apple’s fiscal year 2013 and 2014 and has also dropped his price target on Apple shares to $700 from an earlier target of $780.

Milunovich quoted “Some of our Chinese sources do not expect the iPhone5 to do as well as the iPhone 4S”.

Recently consumers in China have also revealed that they would prefer iPhone 4S over the new iPhone5.

The Wall Street Journal wrote over the iPhone5 launch as “arguably the least eventful launch of an Apple device in the company’s four-year history in the Chinese capital”.

Apple’s iPhone 5 demand didn’t show up as expected because of the fact that Apple delivered iPhone 5 with a familiar design and without any exciting features which was much expected by most of the consumers, along with that the malfunctioning iOS6 map apps also played a major part in decreasing iPhone 5 sales this year, even less than the iPhone 4S.

As per the latest survey, it is found that developers still prefer iOS5 over iOS6 for iPhone application development.