Mukesh Choudhary

Set up a MySQL ODBC Driver

2015-04-29T10:23:00.001+05:30

After you have created a repository on your MySQL database, you set up the MySQL ODBC driver so that you can connect to a project on that repository from Enterprise Architect.

Prerequisites

Install:

•	MySQL DBMS and repository

•	MySQL ODBC driver software version 5.1.5

Set up the ODBC Driver

Step

Action

If you are using a 32-bit operating system:

•	Select the WindowsTM Control Panel \| Administrative Tools \| Data Sources (ODBC) option

If you are using a 64-bit operating system:

•	Enterprise Architect requires 32-bit ODBC drivers to connect to a repository through ODBC; to set up the ODBC configuration on 64-bit clients, run the 32-bit ODBC Data Source Administrator fromC:\Windows\SysWOW64\odbcad32.exe

•	You can quickly load the correct 32-bit ODBC Data Source Administrator by selecting Tools \| ODBC Data Sources in the Enterprise Architect menu bar

The ODBC Data Source Administrator window displays.

Click on the Add button.

The Create New Data Source dialog displays, enabling you to add a new DSN.

Select MySQL ODBC 5.1 Driver from the list.

Click on the Finish button.

The MySQL Connector/ODBC dialog displays.

Enter the following configuration details:

•	A data source name for the connection

•	A description (optional)

•	The host address of the DBMS server

•	User name and password

•	The database name on the selected server

To set the advanced options, click on the Details>> button.

Select the following checkboxes (where provided):

•	Return matched rows instead of affected rows (Connection or Cursors/Results tab)

•	Allow big result sets (Connection tab)

Click on the Test Connection button to confirm that the details are correct.

If the test succeeds, click on the OK button to complete the configuration.

If the test does not succeed, review your settings.

Your MySQL driver is now available to connect to the repository from Enterprise Architect.

How to Secure Linux Servers

2015-04-27T13:25:00.000+05:30

Basic Linux Server Security

Install Firewall (APF or CSF Firewall with BFD)
ModSecurity (Web application firewall)
ModEvasive (Prevent DDOS attacks)
Harden SSH server
Fix Open DNS Recursion
Install RKhunter
Install ClamAV (Antivirus)
XInet Servers Hardening (Disable Telnet/Finger or unwanted services)
Securing PHP
PortsEntry (tool to detect portscans)
Harden host.conf (against IP spoofing)
Check User Uploaded files
Secure /tmp Folders (noexec, nosuid)

This tutorial guide covers only basic linux server security tips intended for linux learners, and assuming that you are running Centos 5 or later versions.

Install Firewall

The very first first step on securing a server is installing a firewall (atleast IP tables based) to close all unused or unwanted ports. Once the firewall is installed it is often considered 50% of work done. You can install CSF firewall or APF firewall. Often BFD (brute force detection) utilities comes with firewall.
We will install CSF (Config security firewall) as it is easy to install with plenty of features and easily integrated to CPanel (if you are running)

wget http://www.configserver.com/free/csf.tgz
tar zxf csf.tar.gz
sh /csf/install.sh

Follow the installer and once installed, you can start the firewall.

csf -s
// start the firewall
csf -r
// restart the firewall
csf -f
// flush the rules or stop the firewall.

You can see the full installing tutorial here

Harden SSH server

Very often you will see SSH attacks from various bots trying to get access to your server by connected to port 22 with unlimited number of login attempts to break in to your system. Imagine attacks coming from different IPs can put lot of load in you server. You can trace those failed attempts by checking your log file

cat /var/log/secure
cat /var/log/messages

To harden your SSH server,

Run SSH on other port rather than default port 22
Disable Root login
Use only protocol 2
Enable Public key authentication.

You can see the full SSH hardening tutorial here

Disable Telnet & Other Unused Services

You may want to disable services like telnet, finger and other unwanted services running on your server with xinet.

nano /etc/xinetd.d/telnet
// OR
nano /etc/xinetd.d/krb5-telnet

look for lines disable=no and change to disable=yes

chkconfig telnet off

Hardening PHP for Security

PHP is the most popular scripting language for apache and mysql. You will need to disable system level functions in the php configuration file.

nano /usr/local/lib/php.ini

Look for the lines and make sure you have the lines as below..

disable_functions = exec,system,shell_exec,passthru
register_globals = Off
expose_php = Off
magic_quotes_gpc = On

It is best to keep magic_quotes to on as otherwise you forms using POST may be used for SQL injection attacks.

Disable Open DNS Recursion (DNS Server)

If you are running bind DNS server, then you might want to check your dns server statistics with dnstools.com. You dont want to allow recursive lookups to performed on your server other than local IP. It can also slowdown your server.

nano /etc/named.conf

Under Options { place a line

Options {
recursion no;
.....

Then restart the bind

service named restart

You will also need to restrict zone transfers and notifications if you are running Bind 9.

Install Mod_Security

ModSecurity is a free open source web application firewall which can help you to guard against LFI (local file inclusion attacks) and SQL injection vulnerabilities.
CPanel Installation:
Just go to Cpanel WHM > Plugins > Enable Mod_Security > Save
Source Installation:
That should install mod security in your cpanel. Under apache it should show under installed modules if you run test.php with phpinfo() in it. Try adding some mod security rules. Installing mod_security could be sometimes complicated. Dont use apxs for compiling mod_security as it causes number of problems.
Note: Mod_security needs libxml2 and http-devel libraries before it can be installed. It also requires mod_unique_id enabled in apache modules. To install mod_unique_id, you have to place
LoadModule unique_id_module modules/mod_unique_id.so
in your httpd.conf file.

yum install libxml2 libxml2-devel httpd-devel

Download the latest version of mod_security for apache2 from http://www.modsecurity.org

wget http://www.modsecurity.org/download/modsecurity-apache_2.1.7.tar.gz
tar zxf modsecurity-apache_2.5.4.tar.gz
cd modsecurity-apache_2.5.4
cd apache2

Then
If you cannot find ./configure then you will need to edit Makefile and make change to top_dir = /usr/lib/httpd (for centos)

make
make install

Next, copy the rule files depending on which you want (you can also select minimal rules file which comes with source). Make a directory named modsecurity under /etc/httpd/conf and copy all the modsecurity rules there. Finally include those files in the httpd.conf file
# /etc/httpd/conf/httpd.conf

LoadModule unique_id_module modules/mod_unique_id.so
LoadFile /usr/lib/libxml2.so
LoadModule security2_module modules/mod_security2.so
Include conf/modsecurity/*.conf

Then

/etc/init.d/httpd restart

Log Files
Watch for log files to detect any errors or intrusion activity
/var/log/httpd/modsec_audit
/var/log/httpd/error_log
If you get any errors, i have compiled a list of errors while compiling.

Install Mod_Evasive

ModEvasive module for apache offers protection against DDOS (denial of service attacks) in your server.

wget http://www.zdziarski.com/projects/mod_evasive/mod_evasive_1.10.1.tar.gz
tar zxf mode_evasive-1.10.1.tar.gz
cd mod_evasive

then run the following command for apache2...

> /usr/sbin/apxs -cia mod_evasive20.c

Once mod evasive is installed, place the following lines in your /etc/httpd/conf/httpd.conf

<IfModule mod_evasive20.c>
DOSHashTableSize 3097
DOSPageCount 2
DOSSiteCount 50
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 10
</IfModule>

Follow the instructions in the README for more tuning of mod_evasive. This will compile, install and activate the module in your server.

Install RkHunter (Rootkit)

RkHunter is a rootkit scanner scans for vulnerabilities, insecure files, backdoors in your system and reports it so that you can further harden the server. Installing RkHunter is very easy!

yum install rkhunter

To run checks in your system

rkhunter --checkall
OR
rkhunter -c

You can find what command options are available under rkhunter by issuing this help command

> rkhunter --help

Install PortsEntry

Portsentry is a tool to detect port scans and log it. Download the sorce package of portsentry from sourceforge.net

wget http://path/to/portsentry-1.2.tar.gz
tar zxf portsentry-1.2.tar.gz
make linux
make install

If you get errors like while compiling

make linux
SYSTYPE=linux
Making
gcc -O -Wall -DLINUX -DSUPPORT_STEALTH -o ./portsentry ./portsentry.c \
./portsentry_io.c ./portsentry_util.c
./portsentry.c: In function 'PortSentryModeTCP':
./portsentry.c:1187: warning: pointer targets in passing argument 3 of 'accept' differ in signedness
./portsentry.c: In function 'PortSentryModeUDP':
./portsentry.c:1384: warning: pointer targets in passing argument 6 of 'recvfrom' diffe r in signedness
./portsentry.c: In function 'Usage':
./portsentry.c:1584: error: missing terminating " character
./portsentry.c:1585: error: 'sourceforget' undeclared (first use in this function)
./portsentry.c:1585: error: (Each undeclared identifier is reported only once
./portsentry.c:1585: error: for each function it appears in.)
./portsentry.c:1585: error: expected ')' before 'dot'
./portsentry.c:1585: error: stray '\' in program
./portsentry.c:1585: error: missing terminating " character
./portsentry.c:1595: error: expected ';' before '}' token
make: *** [linux] Error 1

To fix:
Open portsentry.c and look for the following line. There will be a extra carriage return breaking the line and you have to delete the carriage return and make single line. It should look like below.

printf ("Copyright 1997-2003 Craig H. Rowland <craigrowland at users dot sourceforget dot net>\n");

Then run make and make install. That should fix it!
To launch portsentry

/usr/local/psionic/portsentry/portsentry -stcp
/usr/local/psionic/portsentry/portsentry -sudp

check the log files /var/log/secure on what portsentry is active or not.

Prevent IP Spoofing

IP spoofing is a security exploit and can be prevented from placing nospoof on in host.conf file. Edit the host.conf file and place the following lines. If you run dns bind, give it preference.

order bind,hosts
nospoof on

Install ClamAV

Antivirus protection is the last thing you need for your security to protect against worms and trojans invading your mailbox and files! Just install clamav (a free open source antivirus software for linux). More information can be found on clamav website

yum install clamav

Once you have installed clamav in your centos…here are some of the basic commands using the software..

1. To update the antivirus database

> freshclam

2. To run antivirus

clamav -r /home

3. Running as Cron Daily Job
To run antivirus as a cron job (automatically scan daily) just run crontab -e from your command line. Then add the following line and save the file.

02 1 * * * root clamscan -R /var/www

This will run the cron job daily @ 1.02 AM by scanning the public html. You can change the folder to whatever you want for mail etc.

Thats it! Always keep an eye for log files for any attacks or error messages!

Hardening Security Tips for Linux Servers

2015-04-27T13:18:00.000+05:30

Everybody says that Linux is secure by default and agreed to some extend (It’s debatable topics). However, Linux has in-built security model in place by default. Need to tune it up and customize as per your need which may help to make more secure system. Linux is harder to manage but offers more flexibility and configuration options.

Securing a system in a production from the hands of hackers and crackers is a challenging task for a System Administrator. This is our first article related to “How to Secure Linux box” or “Hardening a Linux Box“. In this post We’ll explain 25 useful tips & tricks to secure your Linux system. Hope, below tips & tricks will help you some extend to secure your system.

1. Physical System Security

Configure the BIOS to disable booting from CD/DVD, External Devices, Floppy Drive in BIOS. Next, enable BIOS password & also protect GRUB with password to restrict physical access of your system.

2. Disk Partitions

It’s important to have different partitions to obtain higher data security in case if any disaster happens. By creating different partitions, data can be separated and grouped. When an unexpected accident occurs, only data of that partition will be damaged, while the data on other partitions survived. Make sure you must have following separate partitions and sure that third party applications should be installed on separate file systems under /opt.

/
/boot
/usr
/var
/home
/tmp
/opt

3. Minimize Packages to Minimize Vulnerability

Do you really want all sort of services installed?. It’s recommended to avoid installing useless packages to avoid vulnerabilities in packages. This may minimize risk that compromise of one service may lead to compromise of other services. Find and remove or disable unwanted services from the server to minimize vulnerability. Use the ‘chkconfig‘ command to find out services which are running onrunlevel 3.

# /sbin/chkconfig --list |grep '3:on'

Once you’ve find out any unwanted service are running, disable them using the following command.

# chkconfig serviceName off

Use the RPM package manager such as “yum” or “apt-get” tools to list all installed packages on a system and remove them using the following command.

# yum -y remove package-name

# sudo apt-get remove package-name

4. Check Listening Network Ports

With the help of ‘netstat‘ networking command you can view all open ports and associated programs. As I said above use ‘chkconfig‘ command to disable all unwanted network services from the system.

# netstat -tulpn

5. Use Secure Shell(SSH)

Telnet and rlogin protocols uses plain text, not encrypted format which is the security breaches. SSH is a secure protocol that use encryption technology during communication with server.

Never login directly as root unless necessary. Use “sudo” to execute commands. sudo are specified in /etc/sudoers file also can be edited with the “visudo” utility which opens in VI editor.

It’s also recommended to change default SSH 22 port number with some other higher level port number. Open the main SSH configuration file and make some following parameters to restrict users to access.

# vi /etc/ssh/sshd_config

Disable root Login

PermitRootLogin no

Only allow Specific Users

AllowUsers username

Use SSH Protocol 2 Version

Protocol 2

6. Keep System updated

Always keep system updated with latest releases patches, security fixes and kernel when it’s available.

# yum updates
# yum check-update

7. Lockdown Cronjobs

Cron has it’s own built in feature, where it allows to specify who may, and who may not want to run jobs. This is controlled by the use of files called /etc/cron.allow and /etc/cron.deny. To lock a user using cron, simply add user names in cron.deny and to allow a user to run cron add in cron.allow file. If you would like to disable all users from using cron, add the ‘ALL‘ line to cron.deny file.

# echo ALL >>/etc/cron.deny

8. Disable USB stick to Detect

Many times it happens that we want to restrict users from using USB stick in systems to protect and secure data from stealing. Create a file ‘/etc/modprobe.d/no-usb‘ and adding below line will not detectUSB storage.

install usb-storage /bin/true

9. Turn on SELinux

Security-Enhanced Linux (SELinux) is a compulsory access control security mechanism provided in the kernel. Disabling SELinux means removing security mechanism from the system. Think twice carefully before removing, if your system is attached to internet and accessed by the public, then think some more on it.

SELinux provides three basic modes of operation and they are.

Enforcing: This is default mode which enable and enforce the SELinux security policy on the machine.
Permissive: In this mode, SELinux will not enforce the security policy on the system, only warn and log actions. This mode is very useful in term of troubleshooting SELinux related issues.
Disabled: SELinux is turned off.

You can view current status of SELinux mode from the command line using ‘system-config-selinux‘, ‘getenforce‘ or ‘sestatus‘ commands.

# sestatus

If it is disabled, enable SELinux using the following command.

# setenforce enforcing

It also can be managed from ‘/etc/selinux/config‘ file, where you can enable or disable it.

10. Remove KDE/GNOME Desktops

There is no need to run X Window desktops like KDE or GNOME on your dedicated LAMP server. You can remove or disable them to increase security of server and performance. To disable simple open the file ‘/etc/inittab‘ and set run level to 3. If you wish to remove it completely from the system use the below command.

# yum groupremove "X Window System"

11. Turn Off IPv6

If you’re not using a IPv6 protocol, then you should disable it because most of the applications or policies not required IPv6 protocol and currently it doesn’t required on the server. Go to network configuration file and add followings lines to disable it.

# vi /etc/sysconfig/network

NETWORKING_IPV6=no
IPV6INIT=no

12. Restrict Users to Use Old Passwords

This is very useful if you want to disallow users to use same old passwords. The old password file is located at /etc/security/opasswd. This can be achieved by using PAM module.

Open ‘/etc/pam.d/system-auth‘ file under RHEL / CentOS / Fedora.

# vi /etc/pam.d/system-auth

Open ‘/etc/pam.d/common-password‘ file under Ubuntu/Debian/Linux Mint.

# vi /etc/pam.d/common-password

Add the following line to ‘auth‘ section.

auth        sufficient    pam_unix.so likeauth nullok

Add the following line to ‘password‘ section to disallow a user from re-using last 5 password of his or her.

password   sufficient    pam_unix.so nullok use_authtok md5 shadow remember=5

Only last 5 passwords are remember by server. If you tried to use any of last 5 old passwords, you will get an error like.

Password has been already used. Choose another.

13. How to Check Password Expiration of User

In Linux, user’s passwords are stored in ‘/etc/shadow‘ file in encrypted format. To check password expiration of user’s, you need to use ‘chage‘ command. It displays information of password expiration details along with last password change date. These details are used by system to decide when a user must change his/her password.

To view any existing user’s aging information such as expiry date and time, use the following command.

#chage -l username

To change password aging of any user, use the following command.

#chage -M 60 username
#chage -M 60 -m 7 -W 7 userName

Parameters

-M Set maximum number of days
-m Set minimum number of days
-W Set the number of days of warning

14. Lock and Unlock Account Manually

The lock and unlock features are very useful, instead of removing an account from the system, you can lock it for an week or a month. To lock a specific user, you can use the follow command.

# passwd -l accountName

Note : The locked user is still available for root user only. The locking is performed by replacing encrypted password with an (!) string. If someone trying to access the system using this account, he will get an error similar to below.

# su - accountName
This account is currently not available.

To unlock or enable access to an locked account, use the command as. This will remove (!) string with encrypted password.

# passwd -u accountName

15. Enforcing Stronger Passwords

A number of users use soft or weak passwords and their password might be hacked with a dictionary based or brute-force attacks. The ‘pam_cracklib‘ module is available in PAM (Pluggable Authentication Modules) module stack which will force user to set strong passwords. Open the following file with an editor.

16. Enable Iptables (Firewall)

It’s highly recommended to enable Linux firewall to secure unauthorised access of your servers. Apply rules in iptables to filters incoming, outgoing and forwarding packets. We can specify the source and destination address to allow and deny in specific udp/tcp port number.

17. Disable Ctrl+Alt+Delete in Inittab

In most Linux distributions, pressing ‘CTRL-ALT-DELETE’ will takes your system to reboot process. So, it’s not a good idea to have this option enabled at least on production servers, if someone by mistakenly does this.

This is defined in ‘/etc/inittab‘ file, if you look closely in that file you will see a line similar to below. By default line is not commented out. We have to comment it out. This particular key sequence signalling will shut-down a system.

# Trap CTRL-ALT-DELETE
#ca::ctrlaltdel:/sbin/shutdown -t3 -r now

18. Checking Accounts for Empty Passwords

Any account having an empty password means its opened for unauthorized access to anyone on the web and it’s a part of security within a Linux server. So, you must make sure all accounts have strong passwords and no one has any authorized access. Empty password accounts are security risks and that can be easily hackable. To check if there were any accounts with empty password, use the following command.

# cat /etc/shadow | awk -F: '($2==""){print $1}'

19. Display SSH Banner Before Login

It’s always a better idea to have an legal banner or security banners with some security warnings before SSH authentication. To set such banners read the following article.

20. Monitor User Activities

If you are dealing with lots of users, then its important to collect the information of each user activities and processes consumed by them and analyse them at a later time or in case if any kind of performance, security issues. But how we can monitor and collect user activities information.

There are two useful tools called ‘psacct‘ and ‘acct‘ are used for monitoring user activities and processes on a system. These tools runs in a system background and continuously tracks each user activity on a system and resources consumed by services such as Apache, MySQL, SSH, FTP, etc. For more information about installation, configuration and usage, visit the below url.

21. Review Logs Regularly

Move logs in dedicated log server, this may prevents intruders to easily modify local logs. Below are the Common Linux default log files name and their usage:

/var/log/message – Where whole system logs or current activity logs are available.
/var/log/auth.log – Authentication logs.
/var/log/kern.log – Kernel logs.
/var/log/cron.log – Crond logs (cron job).
/var/log/maillog – Mail server logs.
/var/log/boot.log – System boot log.
/var/log/mysqld.log – MySQL database server log file.
/var/log/secure – Authentication log.
/var/log/utmp or /var/log/wtmp : Login records file.
/var/log/yum.log: Yum log files.

22. Important file Backup

In a production system, it is necessary to take important files backup and keep them in safety vault, remote site or offsite for Disasters recovery.

23. NIC Bonding

There are two types of mode in NIC bonding, need to mention in bonding interface.

mode=0 – Round Robin
mode=1 – Active and Backup

NIC Bonding helps us to avoid single point of failure. In NIC bonding, we bond two or more Network Ethernet Cards together and make one single virtual Interface where we can assign IP address to talk with other servers. Our network will be available in case of one NIC Card is down or unavailable due to any reason.

24. Keep /boot as read-only

Linux kernel and its related files are in /boot directory which is by default as read-write. Changing it to read-only reduces the risk of unauthorized modification of critical boot files. To do this, open “/etc/fstab” file.

# vi /etc/fstab

Add the following line at the bottom, save and close it.

LABEL=/boot     /boot     ext2     defaults,ro     1 2

Please note that you need to reset the change to read-write if you need to upgrade the kernel in future.

25. Ignore ICMP or Broadcast Request

Add following line in “/etc/sysctl.conf” file to ignore ping or broadcast request.

Ignore ICMP request:
net.ipv4.icmp_echo_ignore_all = 1

Ignore Broadcast request:
net.ipv4.icmp_echo_ignore_broadcasts = 1

Load new settings or changes, by running following command

#sysctl -p

If you’ve missed any important security or hardening tip in the above list, or you’ve any other tip that needs to be included in the list. Please drop your comments in our comment box. TecMint is always interested in receiving comments, suggestions as well as discussion for improvement.

Installing SSL Certificate in Centos 6 with Zpanel and Mod_SSL

2015-04-25T15:35:00.000+05:30

This will be a straight forward tutorial on how to install a SSL certificate in Centos 6 operating system. There are many tutorials out there which will show you how to achieve this. So why did I bother adding the same tutorial? Well, I tried installing a SSL certificate recently and ended up in all sorts of problems and there was no tutorial online which mentioned the steps required to achieve my goal. when you have zpanel installed in centos it becomes slightly complicated as locations of the files are slightly different.

This tutorial assumes that you will NOT be generating your own certificate. Although, the steps are not that different even if you are going down that route.

Lets begin Installing SSL Certificate in Centos 6 with Zpanel

first step… Install mod_ssl

1
yum install mod_ssl openssl

Next, Go to certs folder in centos 6

1
 cd /etc/ssl/certs/

Next step generate a key and CSR with following command.

1
penssl req -nodes -newkey rsa:2048 -keyout namhuy_net.key -out namhuy_net.csr

Now you need a certificate. you can either create your own with open SSL which is not the best way to do it or you can buy a premium one. They are cheap these days and won’t break your bank. I would recommendhttps://www.globessl.com/ (for $9/year)

Once you have the certificate most likely sent to you via email, copy these certificates in certs folder as above

You should receive your certificate as well as a crt bundle. We will need to merge these two and create a .pem file

So in vim create a new file xyz_cert.pem (make sure you are in location /etc/ssl/certs/)

1
touch xyz_cert.pem

Now these are the important steps, specially, if you have zPanel installed like me.

Now go to the location /etc/zpanel/configs/apache

and open file httpd-vhosts.conf in text editor

find a block similar to the one below for your domain in this file

1
2
3
4
5
6
7
8
9
10
11
12
13
&lt;VirtualHost *:80&gt;
DocumentRoot "/var/zpanel/hostdata/zadmin/public_html/website"
ServerName your-website.com
ServerAlias www.your-website.com
ErrorLog /var/log/httpd/website.com-error_log
CustomLog /var/log/httpd/website.com-access_log common
&lt;Directory "/var/zpanel/hostdata/zadmin/public_html/website"&gt;
        Options Indexes FollowSymLinks
        AllowOverride all
        Order allow,deny
        allow from all
&lt;/Directory&gt;
&lt;/VirtualHost&gt;

copy this block and paste immediately below it and make few changes as below.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
&lt;VirtualHost *:443&gt;
DocumentRoot "/var/zpanel/hostdata/zadmin/public_html/website"
ServerName your-website.com:443
ErrorLog /var/log/httpd/website.com-error_log
CustomLog /var/log/httpd/website.com-access_log common
&lt;Directory "/var/zpanel/hostdata/zadmin/public_html/website"&gt;
    Options Indexes FollowSymLinks
    AllowOverride all
    Order allow,deny
    allow from all
&lt;/Directory&gt;
 
SSLEngine on
SSLOptions +StrictRequire
SSLCertificateFile /etc/ssl/certs/xyz_cert.crt
SSLCertificateKeyFile /etc/ssl/certs/xyz_cert.key
SSLCertificateChainFile /etc/ssl/certs/xyz_cert.pem
&lt;/VirtualHost&gt;

Now restart apache

1
service httpd restart

When you try to restart apache you may receive an error similar to one below:

1
default_ virtualhost overlap on port 443

———————————————————————————————————————

Only If you receive an error as above. Follow these steps:

solution is to edit ssl.conf file in /etc/httpd/conf.d and remove the entire virtual host definition.
make sure you back your ssl.conf file before editing.
you can use this command to make a copy of your ssl.conf file and call it ssl.conf.bak file:

1
cp ssl.conf ssl.conf.bak

What to edit in ssl.conf?

open you ssl.conf file in vim

find a very long block that reads

</Virtualhost>

and comment out everything in between above block. Every single line that is not commented needs to be commented and there are many of them so be patient. (***reminder*** Back up your ssl.conf before doing this as you may regret not backing it up later)

now finally restart the apache.

Enable website preview in Zpanel

2015-04-22T12:12:00.002+05:30

Hi Linux techs and zpanel users now we can implement Website preview feature in zpanel without having to use a domain name.
With this settings user can preview there hosted website at zpanel without DNS pointing.
After setting below access all the accounts at http://IP/~username

open the /etc/zpanel/configs/apache/httpd.conf file and add below code in the file.

# Add Alias for DNS-Less Previews
<VirtualHost *:80>
ServerName [b]ServerIP[/b]
DocumentRoot /etc/zpanel/panel/
AliasMatch ^/~([a-zA-Z0-9]+)/?(.*) /var/zpanel/hostdata/$1/public_html/$2
<Directory /var/zpanel/hostdata>
Options FollowSymLinks Indexes
AllowOverride All
Order Allow,Deny
Allow from all
DirectoryIndex index.php index.html index.htm
<IfModule mod_php5.c>
AddType application/x-httpd-php .php
php_flag magic_quotes_gpc Off
php_flag track_vars On
php_flag register_globals Off
php_admin_value upload_tmp_dir /var/zpanel/temp
</IfModule>
</Directory>
</virtualhost>

Note: - Please change ServerIP above with your IP.

Save the file and restart webserver.
# service httpd restart
http://IP/~username
for zadmin accounts preview URL will be.
http://IP/~zadmin/rootdirectory

CCavenue integration in php

2012-02-24T14:49:00.000+05:30

<?php
$Merchant_Id = "your_merchantid";//This id(also User Id) available at "Generate Working Key" of "Settings & Options"
$Amount = "amount";//your script should substitute the amount in the quotes provided here
$Order_Id ="orderid";//your script should substitute the order description in the quotes provided here
$WorkingKey = "working_key";//Given to merchant by ccavenue
$Redirect_Url ="http://www.yoursite.com/ccavenue_returndata.php";
$Checksum = getCheckSum($Merchant_Id,$Amount,$Order_Id ,$Redirect_Url,$WorkingKey); // Validate All value
?>
<p align="center" style="font-family:Calibri; font-size:18px;"><img src="http://www.example.com/images/loader.gif" alt="loader"></p>
<p align="center" style="font-family:Calibri; font-size:24px;color:#3670A7;">Processing to CCAvenue..............</p>
<form id="form2" method="post" action="https://www.ccavenue.com/shopzone/cc_details.jsp">
<input type=hidden name="Merchant_Id" value="<?php echo $Merchant_Id; ?>">
<input type="hidden" name="Amount" value="<?php echo $Amount; ?>">
<input type="hidden" name="Order_Id" value="<?php echo $Order_Id; ?>">
<input type="hidden" name="Redirect_Url" value="<?php echo $Redirect_Url; ?>">
<input type="hidden" name="Checksum" value="<?php echo $Checksum; ?>">
<input type="hidden" name="billing_cust_name" value="yourname"> 
<input type="hidden" name="billing_cust_address" value="123 Green Acres,West Eden">
<input type="hidden" name="billing_cust_country" value="India"> 
<input type="hidden" name="billing_cust_state" value="AP">
<input type="hidden" name="billing_cust_city" value="Kakinada"> 
<input type="hidden" name="billing_zip" value="533002"> 
<input type="hidden" name="billing_cust_tel" value="9999999999"> 
<input type="hidden" name="billing_cust_email" value="test_test@yahoo.com"> 
<input type="hidden" name="delivery_cust_name" value="delivery_name"> 
<input type="hidden" name="delivery_cust_address" value="123 My Colony, jaipur">
<input type="hidden" name="delivery_cust_country" value="India">
<input type="hidden" name="delivery_cust_state" value="AP">
<input type="hidden" name="delivery_cust_tel" value="9999999999">
<input type="hidden" name="delivery_cust_notes" value="Testing ccav">
<input type="hidden" name="Merchant_Param" value="">
<input type="hidden" name="billing_zip_code" value="302015">
<input type="hidden" name="delivery_cust_city" value="Jaipur">
<input type="hidden" name="delivery_zip_code" value="302015">

<input type="submit" value="Proceed to Buy Now" />
</form>
<?php

function getchecksum($MerchantId,$Amount,$OrderId ,$URL,$WorkingKey)
{
$str ="$MerchantId|$OrderId|$Amount|$URL|$WorkingKey";
$adler = 1;
$adler = adler32($adler,$str);
return $adler;
}

function verifychecksum($MerchantId,$OrderId,$Amount,$AuthDesc,$CheckSum,$WorkingKey)
{
$str = "$MerchantId|$OrderId|$Amount|$AuthDesc|$WorkingKey";
$adler = 1;
$adler = adler32($adler,$str);

if($adler == $CheckSum)
return "true" ;
else
return "false" ;
}

function adler32($adler , $str)
{
$BASE = 65521 ;

$s1 = $adler & 0xffff ;
$s2 = ($adler >> 16) & 0xffff;
for($i = 0 ; $i < strlen($str) ; $i++)
{
$s1 = ($s1 + Ord($str[$i])) % $BASE ;
$s2 = ($s2 + $s1) % $BASE ;
//echo "s1 : $s1 <BR> s2 : $s2 <BR>";

}
return leftshift($s2 , 16) + $s1;
}

function leftshift($str , $num)
{

$str = DecBin($str);

for( $i = 0 ; $i < (64 - strlen($str)) ; $i++)
$str = "0".$str ;

for($i = 0 ; $i < $num ; $i++)
{
$str = $str."0";
$str = substr($str , 1 ) ;
//echo "str : $str <BR>";
}
return cdec($str) ;
}

function cdec($num)
{

for ($n = 0 ; $n < strlen($num) ; $n++)
{
$temp = $num[$n] ;
$dec = $dec + $temp*pow(2 , strlen($num) - $n - 1);
}

return $dec;
}
?>

May this helps you

GOD IS THE GREATEST MYSTERY

2012-02-04T09:52:00.005+05:30

All the religions talk about God.What is unique is that every religion has it's own God.Gods of all of them are different from each other.God of one religion is greater than the other religion.They fight for their Gods.They undertake jihad and crusade in the name of God.
One wonders whether there is God!People who claimed that they knew God dont speak the same language.Their descriptions of God differ from each other.Why so?
In Hindu phylosophy one of the names of God is Anant, which means infinite.If God is infinite then how can an finite know God?That is why nobody knows Her completely.It's an infinite process to know God.Only infinite can know God and no body can be infinite.That's why i say God is the gretest mystery.

A river can merge in the ocean and by merging itself in the ocean it can know what the ocean is.Same way a human being can know God by merging in God.The contradiction is that when one merges in God it doesn't have a separate identity,it becomes God.When an infinite merges in infinite it also becomes infinite.By doing that you will lose your separate identity.That is the only criterion to know God.

Foot- prints of a great king

2012-02-04T09:52:00.002+05:30

There is a story about Lord Buddha.Those days Buddha was living by the side of a river near Gaya in Bihar.After taking bath in the river He went to his ashram.These were summer days.While walking to his ashram,his foot-prints were visible in the sands near the river.After Buddha left the river,a great astrologer of those days also reached to the same spot where Buddha took bath.The astrologer saw the foot prints of Buddha,he was amazed.He was able to tell the fortune of a person by seeing the person's foot prints also.He knew by seeing the foot prints those should be of a great king.So he followed the foot prints and reached the ashram of Buddha,he found that there was none except Buddha,so now he was sure that the foot prints were of Buddha.He was now shocked.Buddha asked him-O brahmana,why are you looking shocked?The astrologer replied-"I am considered the greatest astrologer of the time and according to my knowledge the man,whose foot prints are those, should be a great king,but here i am finding you,who is just like a beggar.So i think all my knowledge is worthless."Buddha replied-"no,your knowledge is not worthless but there are some people who go beyond Astrology or any other wordly knowledge." The point is that though astrology is true in some extent but when it comes the matter of spiritual path,astrology fails.This is not the fault of astrology,but it has some limitations.You are what you are,the result of your past karma.When you do sadhana,your karmas burn in the fire of sadhana.You go beyond the rules of astrology.In normal cases predictions based on astrology may be true.Even in normal cases also, the predictions are not true.Before the election results,you will find that many astrologers claiming the victory of different political parties.Certainly all of them cant be true.Although all of those astrologers make predictions on the basis of almost same type of books.

Four steps to God realization

2012-02-04T09:51:00.005+05:30

In Tantra there is a shloka-UTTAMO BRAHMA SADBHAV MADHYAMA DHYAN DHARANA,JAPASTUTISYADADHAMA MURTIPUJADHADHAMA.It literally means-feeling oneself as Brahman is best,meditating is mediocre,chanting and prayers are lower and idol worshiping is lowest in nature.
As i understand this shloka,it just describes the four stages to God realisation.On spiritual path one starts with idol worshipping,then he starts chanting some mantra,then meditating and at last he feels that he/she has become God.That is Brahma sadbhav.One can't just leap to that stage.
No stage is superior or inferior.They are just stages through which a seeker passes.Without going through the first stage,if one will just try to be in Samadhi, s/he won't get any real success.If you have not gone through idol worshiping you won't be able to realize the formlessness of God.You will just become a hypocrite.Like followers of some religions who say they don't believe in idol worshiping,but what they do is nothing but idol worshiping.One hand they go on denying that they are not idolaters but if you watch seriously their religious activities ,you will find that they are just doing idolatry .
Hindus are idolaters and idol breakers too.They use idols for worshiping and later when they find that God is not only in the idol,but is present in everything,the idol becomes of no use to them .People following Semitic religions can't understand this contradiction.It's their fault not Hindus'.

How to love

2012-02-04T09:51:00.002+05:30

One Christian missionary was asked to say the teaching of Jesus christ in a single sentence.He said-"Love your neighbor as yourself."But people don't love themselves,then how will they love their neighbor?They will not love their neighbor at all.Actually we don't know what love is.Love is such a great thing,that you can experience but can't define what it is.Like when a dumb person eats sweet,he can experience the sweetness but would not be able to say what sweetness is.Even we can't define what sweetness is.Can we?So we can't define Love.We don't even experience the real love.If the love is unconditional,then only it is real love.That love is rare.People,who are enlightened,who are calm inside,who have compassion for all the creature,they only know that love.You can also have the glimpses of that love.A single glimpse of that love will change you.You will not be the same again.To have the glimpses of love you will have to be calminside.Be meditative.In meditation you can feel the true love.When you feel that love,then you will be able to love yourself.When you love yourself then the fragrance of love come out of you.Whoever will come in your contact will have a different kind of pleasure.This is the way to love.Your love will be unselfish.

Religion of the new world

2012-02-04T09:50:00.005+05:30

The new world needs a religion which can give true freedom to everybody.It should not say what to do and what not to do.The only thing it should do is to make people enlightened,so that people can be able to take right decisions.This religion should give some techniques to the people so that they can become enlightened .Actually people are already enlightened,but they are not awake,so they think that they are ignorant.God creates everybody enlightened.Therefore this religion should awake the people.
At the same time if some people don’t follow this religion,then they should not only be just tolerated but accepted also.Everybody should have the freedom to follow one’s own form of religion.
Now which existing religion can fit in these criteria?Which religion can give us complete freedom?Which religion can give us techniques to be awakened?Which religion can accept the liberty of others to follow their own form of religion?
If you think the answer of above mentioned questions is Hinduism,you are 100% correct.Only Hinduism has the potential to become the world religion.Hinduism is the most liberal religion on this planet.

Threat to Hinduism

2012-02-04T09:50:00.002+05:30

Every religion except Hinduism can be defined in a definite set of terms.But the case with Hinduism is not so.In Hinduism everybody is free to define it in one’s own way.Hinduism gives us such a freedom.Everybody may have his/her own idea of Hinduism.As many as Hindus are there so many definitions of Hinduism can be there. One can say that Hinduism is undefinable.This is the beauty of Hinduism.Nobody can say that his form of Hinduism is true while other’s is false.On one point every Hindu will agree that everybody has the right to choose one’s own path.
That’s why almost all the major religion flourished in India.Hindus respected the existence of other religions.Now if other religions would try to convert Hindus in their own folds,what should Hindus do?To save the uniqueness of Hinduism Hindus must be aggressive.Don’t hesitate to reply them who tries to eliminate the existence of Hinduism.

Love Jihad ,a great threat

2012-02-04T09:49:00.005+05:30

Love jihad has appeared as a major threat to Hinduism.Although it’s a big problem for Christians too.But here we have to think about the Hindus only.Muslims are all out on a mission for jihad.Some are fighting this so called holy war by weapons like bombs and AK 47s,while others are doing everything to convert non Muslims.For these people who are not taking some lethal weapon,love is their weapon.
By feigning love they want to convert innocent Hindu girls.For this they are funded by some Muslim organizations from home and abroad.They show generosity towards poor Hindu girls to trap them.They show that they are seculars.After the girl falls in their trap they start showing their true character.They force the girl to convert to Islam.Once the girl is converted to Islam ,their mission is accomplished.Then they are rewarded by Muslim organizations.
Now what Hindus should do to solve this problem?I don’t think that there is any peaceful way to solve this problem.

Food and Dharma

2012-02-04T09:49:00.002+05:30

In modern Hinduism many people give too much stress on the food.They say certain things should be eaten while certain things are never to be eaten, then only you are a true Hindu.In my view your food makes hardly an effect on being your Hindu.It’s your personal matter that what you eat and what you don’t eat.Yes,certainly food makes an effect on your mental state, not more.If you take vegetarian food,it helps to keep your mind calm.But only vegetarian food is not going to help you attain enlightenment.If vegetarian food could get you enlightenment,then all the vegetarian animals would have got enlightenment.I am not saying that take non- vegetarian food.Again i will repeat that it’s your personal choice what to eat or what not to eat.
The important thing on the path of Dharma is Sadhana or spiritual practice.Whatever you eat ,if you do spiritual practice,you will attain enlightenment sooner than later.

HOW TO BE SUCCESSFUL

2012-02-04T09:48:00.003+05:30

Everybody wants to be successful in life.People set some goal and then try to achieve that goal.Some of them achieve and some of them don’t.People who achieve their goal feel satisfied,but only for a short period.They get bored with their achievement and then set some other goal.What does that mean?That means his/her previous goal was not worth achieving!So they can’t be said successful.Now the most important question arises-what is success?

Success means differently to different people.For some it is to aquire a lot of wealth,for some it is fame,for some it may be to aquire knowledge.For some it may be to be powerful-physically,mentally,economically or politically.But all these are the games of an egoistic mind.Egoistic mind never satisfies.Without satisfaction you cant be happy.So real success means to be happy,that too not temporarily but permanently. If you achieved all the power,all the knowledge,all the fame and all the wealth but you are not satisfied,not happy and not calm and peaceful within, then what is the use of that so called success?That success is futile.

So real success means you should change internally not externally.That is possible only if you accept who you are,how you are and where you are.You will be calm,happy and peaceful.

What is Hinduism:some thoughts

2012-02-04T09:48:00.000+05:30

When there was no other religion on earth,Hinduism was still there it was known as Sanatan Dharma which means eternal religion.A religion consists four things-1.a fixed set of rules and rituals 2.a holy text 3.founder of the religion 4.people following that religion.If this criterion is applied,then Hinduism can’t be called a religion and that may not be wrong.Because Hinduism is not like any other religion.Hinduism doesn’t have a fixed set of rules and rituals,there is not only one holy book rather there are many holy books.Hinduism is the only religion on earth which was not founded by somebody,it’s an eternal religion.Hinduism is from the beginning of the civilization on the earth.
Now the question is how will you define Hinduism.A great Hindu thinker of last century sri V.D.Savarkar says-Asindhu sindhu paryanta yasya Bharatbhumika pitribhu-punyabhumischa Hinduritismrtah means-People who live between river Sindhu and The Indian ocean,who think India as their fatherland and holy land are Hindus.Very nice definition of the Hindu.Although i almost adore V.D.Savarkar for his contribution to Aggressive Hinduism,but i don’t agree with his definition of the Hindu.There are Hindus living out of India,whose fatherland is not India and they may not consider India as their holy land,but they are no less Hindus than we are.
One definition of The Hindu is-who believes in God,Vedas,existence of soul and rebirth are Hindus.This definition is also good but not correct.There are some sects in India who don’t believe in God like-Jains and Buddhists.For Sikhs Gurugranthsahib is the holy book not The Vedas.In olden days Charvaks were there who did not believe in soul even.
One definition is -Hinanam dushyati,sah Hindu means who dispels the inferior qualities is a Hindu.This is a wonderful definition.Whoever is on the path can be called a Hindu by this definition.

Nude picture episode

2012-02-04T09:47:00.003+05:30

The world is male dominated.In the beginning it was not so.Male and female were interdependent.Both used to give respect to each other.Both were valuable on invaluable for each other.There are three words in English language.valuable,precious and invaluable.Valuable means the thing which has value or some price,precious means which has much price and invaluable means which has too great a value or price to measure.
Then the second faze came when male power or masculinity got importance.Those days were the days of hunting.People would hunt some animal and eat them.As you know hunting needs power,in which naturally male is dominant.That period of civilization made female dependent on male.Females became powerless.They were subordinate to men.And exploitation of women started.In these days the seeds of women being just an object were sown.
Women are trying to let themselves free from this humiliating condition.But they don’t know how to get freedom.So whichever way they can express they express their desire to get that freedom.Some think that by imitating males they can liberate themselves,some think by being moralist they can get power to get freedom,some follow austerity.Some rebellion females express themselves by breaking social etiquette. Pakistani actress Veena Malik is using the this technique only.By giving a nude pose she has rebelled against male dominated society.Islam is the worse kind of male dominated society.In Islam women has almost no power.Males have all the power.They consider woman just an object.Women has almost no right.Veena Malik is revolting against that concept by posing nude for a magazine.In a society where women can’t even go out of home without covering their faces, Veena Malik’s nude picture is a sign of women-revolt against male dominance.

VICTORY OF THE TRUTH

2012-02-04T09:47:00.000+05:30

There is a saying in India-Only the truth triumphs.The decision of the Russia court to reject the plea to ban Bhagvadgita As It Is again proves that saying.
Bhagvadgita As It Is is the translation and commentary of the original text Bhagvadgita by Ac Bhaktivedant Prabhupada.Bhaktivedant Prabhupada was the founder of International Society for Krishna Consciousness popularly known as ISKCON or Hare Krishna Movement.
I have read Bhagvadgita As It Is and i don’t find anything in it which can be called extremist in nature.But the Russian Orthodox Church wanted to get Bhagvadgita As It Is banned in Russia saying it preaches religious tolerance
Fortunately the Siberian Court has rejected the plea to get it banned.The good sense prevailed.
As Sanjaya rightly concludes Bhagvadgita with his opinion that,
Where there is vision and acumen (Yogeshwara Krishna) along with readiness to act with conviction (Dhanurdharaha Partha) there would be wealth, success and justice.

Re- incarnation:just a belief or truth ?

2012-02-04T09:46:00.005+05:30

One of the major beliefs of Hinduism is re incarnation.Hindu Gods and Godesses have re incarnated.In Bhagvadgita Lord Krishna says to Arjuna- You and me have taken many births,but i remember those births and you don’t.
If you believe in the Law of Evolution ,then you must agree that everything evolves,whether it is a Being or the consciousness.In everything there is consciousness.Only the percentage differs.In a stone the percentage of consciousness is very less almost negligible,in tiny creatures it is more and in developed beings it is more than tiny beings.In human beings the percentage of consciousness is highest but not hundred percent.Although human beings have the potential to achieve hundred percent consciousness.Lord Krishna and some other highly developed souls achieved hundred percent consciousness.So the possibility to have hundred percent consciousness is there.Every creature will attain that hundred percent consciousness.Some creatures will need millions of years to get that.But their life span is not so long.No living being has that much life span.So after the death to evolve more in consciousness every creature must have to take another birth.Therefore the re- incarnation.

What is Yoga?

2012-02-04T09:46:00.002+05:30

In the west and even in some section of India people think that yoga is just doing some physical postures and breathing exercises.No doubt postures and breathing exercises are useful for keeping mind and body fit but they only can’t be called Yoga.They are just two steps of yoga.Now what is Yoga?
In his Yogsutra Patanjali said yoga is the cessation of mind.When the thoughts stop and you are in the state where there is no thought,that state is called Yoga.
Yoga is a Sanskrit word which means to unite.Uniting the soul with God is Yoga.When the soul is united with God,all the thinking stops,you are in the present moment .That’s why so much stress is given to being in the present moment.One either thinks about the past or do some planning about future.But when one is completely in the present moment,s/he doesn’t think anything.In the beginning you can’t stay for a long time in that state.But after practicing meditation for some years you can stay more in that state.

Time Conversion (EST to IST)

2012-01-19T16:34:00.000+05:30

PHP interview questions and answers

2011-12-27T17:55:00.000+05:30

What does a special set of tags <?= and ?> do in PHP? - The output is displayed directly to the browser.
What’s the difference between include and require? - It’s how they handle failures. If the file is not found by require(), it will cause a fatal error and halt the execution of the script. If the file is not found by include(), a warning will be issued, but execution will continue.
I am trying to assign a variable the value of 0123, but it keeps coming up with a different number, what’s the problem? - PHP Interpreter treats numbers beginning with 0 as octal.

Would I use print "$a dollars" or "{$a} dollars" to print out the amount of dollars in this example? - In this example it wouldn’t matter, since the variable is all by itself, but if you were to print something like "{$a},000,000 mln dollars", then you definitely need to use the braces.
How do you define a constant? - Via define() directive, like define ("MYCONSTANT", 100);
How do you pass a variable by value? - Just like in C++, put an ampersand in front of it, like $a = &$b
Will comparison of string "10" and integer 11 work in PHP? - Yes, internally PHP will cast everything to the integer type, so numbers 10 and 11 will be compared.
When are you supposed to use endif to end the conditional statement? - When the original if was followed by : and then the code block without braces.
Explain the ternary conditional operator in PHP? - Expression preceding the ? is evaluated, if it’s true, then the expression preceding the : is executed, otherwise, the expression following : is executed.
How do I find out the number of parameters passed into function? - func_num_args() function returns the number of parameters passed in.
If the variable $a is equal to 5 and variable $b is equal to character a, what’s the value of $$b? - 100, it’s a reference to existing variable.
What’s the difference between accessing a class method via -> and via ::? - :: is allowed to access methods that can perform static operations, i.e. those, which do not require object initialization.
Are objects passed by value or by reference? - Everything is passed by value.
How do you call a constructor for a parent class? - parent::constructor($value)
What’s the special meaning of __sleep and __wakeup? - __sleep returns the array of all the variables than need to be saved, while __wakeup retrieves them.
Why doesn’t the following code print the newline properly?    <?php
            $str = ‘Hello, there.nHow are you?nThanks for visiting TechInterviews’;
            print $str;
    ?>
Because inside the single quotes the n character is not interpreted as newline, just as a sequence of two characters - and n.
Would you initialize your strings with single quotes or double quotes? - Since the data inside the single-quoted string is not parsed for variable substitution, it’s always a better idea speed-wise to initialize a string with single quotes, unless you specifically need variable substitution.
How come the code <?php print "Contents: $arr[1]"; ?> works, but <?php print "Contents: $arr[1][2]"; ?> doesn’t for two-dimensional array of mine? - Any time you have an array with more than one dimension, complex parsing syntax is required. print "Contents: {$arr[1][2]}" would’ve worked.
What is the difference between characters 23 and x23? - The first one is octal 23, the second is hex 23.
With a heredoc syntax, do I get variable substitution inside the heredoc contents? - Yes.
I want to combine two variables together:
```
$var1 = 'Welcome to ';
 $var2 = 'TechInterviews.com';
```
What will work faster? Code sample 1:
```
$var 3 = $var1.$var2;
```
Or code sample 2:
```
$var3 = "$var1$var2";
```
Both examples would provide the same result - $var3 equal to "Welcome to TechInterviews.com". However, Code Sample 1 will work significantly faster. Try it out with large sets of data (or via concatenating small sets a million times or so), and you will see that concatenation works significantly faster than variable substitution.
For printing out strings, there are echo, print and printf. Explain the differences. - echo is the most primitive of them, and just outputs the contents following the construct to the screen. print is also a construct (so parentheses are optional when calling it), but it returns TRUE on successful output and FALSE if it was unable to print out the string. However, you can pass multiple parameters to echo, like:
```
<?php echo 'Welcome ', 'to', ' ', 'TechInterviews!'; ?>
```
and it will output the string "Welcome to TechInterviews!" print does not take multiple parameters. It is also generally argued that echo is faster, but usually the speed advantage is negligible, and might not be there for future versions of PHP. printf is a function, not a construct, and allows such advantages as formatted output, but it’s the slowest way to print out data out of echo, print and printf.
I am writing an application in PHP that outputs a printable version of driving directions. It contains some long sentences, and I am a neat freak, and would like to make sure that no line exceeds 50 characters. How do I accomplish that with PHP? - On large strings that need to be formatted according to some length specifications, use wordwrap() or chunk_split().
What’s the output of the ucwords function in this example?
```
$formatted = ucwords("TECHINTERVIEWS IS COLLECTION OF INTERVIEW QUESTIONS");
 print $formatted;
```
What will be printed is TECHINTERVIEWS IS COLLECTION OF INTERVIEW QUESTIONS.
ucwords() makes every first letter of every word capital, but it does not lower-case anything else. To avoid this, and get a properly formatted string, it’s worth using strtolower() first.
What’s the difference between htmlentities() and htmlspecialchars()? - htmlspecialchars only takes care of <, >, single quote ‘, double quote " and ampersand. htmlentities translates all occurrences of character sequences that have different meaning in HTML.
What’s the difference between md5(), crc32() and sha1() crypto on PHP? - The major difference is the length of the hash generated. CRC32 is, evidently, 32 bits, while sha1() returns a 128 bit value, and md5() returns a 160 bit value. This is important when avoiding collisions.
So if md5() generates the most secure hash, why would you ever use the less secure crc32() and sha1()? - Crypto usage in PHP is simple, but that doesn’t mean it’s free. First off, depending on the data that you’re encrypting, you might have reasons to store a 32-bit value in the database instead of the 160-bit value to save on space. Second, the more secure the crypto is, the longer is the computation time to deliver the hash value. A high volume site might be significantly slowed down, if frequent md5() generation is required.

HTTP Status Code

2011-11-21T15:57:00.000+05:30

Whenever you visit a web page, your computer will request data from a server through HTTP. Even before the requested page is displayed in your browser, the web server will send the HTTP header that has the status code. The status code provides information about the status of the request. A normal web page gets the status code as 200. But we do not see this as the server proceeds to send the contents of the page. It’s only when there is an error, we see the status code 404 Not Found.

Origin of Status Codes

As a part of the HTTP 0.9 specifications, the World Wide Web Consortium (W3C) established HTTP status codes in 1992. Tim Berners-Lee, who invented the web and the first web browser in 1990, defined the status codes.

List of Status Codes

A brief overview of HTTP status codes is given below.

Code	Meaning	Description
100	Continue	Confirms the client about the arrival of the first part of the request and informs to continue with the rest of the request or ignore if the request has been fulfilled
101	Switching Protocols	Informs the client about the server switching the protocols to that specified in the Upgrade message header field during the current connection.
200	OK	Standard response for successful requests
201	Created	Request fulfilled and new resource created
202	Accepted	Request accepted, but not yet processed
203	Non-Authoritative Information	Returned meta information was not the definitive set from the origin server.
204	No Content	Request succeeded without requiring the return of an entity-body
205	Reset Content	Request succeeded but require resetting of the document view that caused the request
206	Partial Content	Partial GET request was successful
300	Multiple Choices	Requested resource has multiple choices at different locations.
301	Moved Permanently	Resource permanently moved to a different URL.
302	Found	Requested resource was found under a different URL but the client should continue to use the original URL.
303	See Other	Requested response is at a different URL and can be accessed only through a GET command.
304	Not Modified	Resource not modified since the last request.
305	Use Proxy	Requested resource should be accessed through the proxy specified in the location field.
306	No Longer Used	Reserved for future use
307	Temporary Redirect	Resource has been moved temporarily to a different URL.
400	Bad Request	Syntax of the request not understood by the server.
401	Not Authorized	Request requires user authentication
402	Payment Required	Reserved for future use.
403	Forbidden	Server refuses to fulfill the request.
404	Not Found	Document or file requested by the client was not found.
405	Method Not Allowed	Method specified in the Request-Line was not allowed for the specified resource.
406	Not Acceptable	Resource requested generates response entities that has content characteristics not specified in the accept headers.
407	Proxy Authentication Required	Request requires the authentication with the proxy.
408	Request Timeout	Client fails to send a request in the time allowed by the server.
409	Conflict	Request was unsuccessful due to a conflict in the state of the resource.
410	Gone	Resource requested is no longer available with no forwarding address
411	Length Required	Server doesn’t accept the request without a valid Content-Length header field.
412	Precondition Failed	Precondition specified in the Request-Header field returns false.
413	Request Entity Too Large	Request unsuccessful as the request entity is larger than that allowed by the server
414	Request URL Too Long	Request unsuccessful as the URL specified is longer than the one, the server is willing to process.
415	Unsupported Media Type	Request unsuccessful as the entity of the request is in a format not supported by the requested resource
416	Requested Range Not Satisfiable	Request included a Range request-header field without any range-specifier value
417	Expectation Failed	Expectation given in the Expect request-header was not fulfilled by the server.
422	Unprocessable Entity	Request well-formed but unable to process because of semantic errors
423	Locked	Resource accessed was locked
424	Failed Dependency	Request failed because of the failure of a previous request
426	Upgrade Required	Client should switch to Transport Layer Security
500	Internal Server Error	Request unsuccessful because of an unexpected condition encountered by the server.
501	Not Implemented	Request unsuccessful as the server could not support the functionality needed to fulfill the request.
502	Bad Gateway	Server received an invalid response from the upstream server while trying to fulfill the request.
503	Service Unavailable	Request unsuccessful to the server being down or overloaded.
504	Gateway Timeout	Upstream server failed to send a request in the time allowed by the server.
505	HTTP Version Not Supported	Server does not support the HTTP version specified in the request.

Meaning of 404

When we expand the code 404, the first digit “4” represents a client error. The server indicates that you did a mistake like misspelling the URL or requesting for a page that is no longer available.
The middle digit, 0 represents a general syntax error and could indicate a spelling mistake.
The last digit, 4 refers to a specific error in the group of 40x.
The World Wide Web Consortium (W3C) states that 404 Not Found should be used in cases where the server fails to find the requested location and is unsure of its status. Whenever a page has been permanently removed, the status code used must be 410. But hardly have we seen a 410 page. Instead, 404 Not Found page has become popular and the most commonly used error page.

Content of a 404 Error Page

A 404 response code is always followed by a human readable reason phrase as per the HTTP specification. Generally, a web server issues an HTML page that has the 404 code and the “Not Found” phrase by default. You can configure a web server to display a branded page with a better description and a search form. But the protocol level phrase requires no customization as it is hidden from the user.

Soft 404s

Soft 404 errors are actually “Not Found” errors returned by a web server as a standard web page with a 200 Ok response code. In an automated process of discovering a broken link, the soft 404 errors are problematic.
The BT Group of UK has a clean feed content blocking system that returns a 404 error to the requests for content identified as illegal by the Internet Watch Foundation. Even when the user tries to access the Government censored websites, a fake 404 error will be returned.

404 Error Percentages

A sample web trends’ summary report by ARCHIVI shows the client error details for 404 Page.

Client Errors
Error	Hits	% of Failed Hits
000 Incomplete / Undefined	29,164	69.62%
404 Page or File Not Found	12,651	30.2%
400 Bad Request	57	0.13%
18745 Incomplete / Undefined	5	0.01%
18747 Incomplete / Undefined	4	0%
401 Unauthorized Access	4	0%
Total	41,885	100%

Although the web statistics generally vary from month to month, based on the strategy used to eliminate 404 errors, and how active the website is, the percentage of 404 errors varies. Most active websites that have frequently changed or added content generally experience a higher number of Page Not Found errors. But there are many large and busy sites that achieve zero percent 404 errors over a period. On an average, around 7% of visits to any given web site will result in a 404 error page.

Tracking and Preventing 404 Errors

Log Files - Web Server log files help in tracking the 404 errors. These standard log files are just ASCII text files that have each HTTP protocol transaction, whether completed or not, recorded in them. Most of the HTTP errors are recorded in the transfer log and the error log files. If you have access to the log files of your website, you can observe the HTTP status code field. This field gives you an idea about the occurrence of 404 errors, their frequencies, consistencies, and also the referred document that led to the errors. Also find out the existence of any broken link on your site and the misspelled URL that led to the error. When you know all these information, you can easily correct the link and prevent 404 errors on your website.
Redirects – If you find a page that is consistently getting a 404 error, you can create a redirect page using the .htaccess file that automatically takes the users from an older page to its newer replacement. You can use Permanent and Temporary Redirects to "catch" old referrals from other sites and send the visitors to their intended information.
Robots File - If you have a section of your site with pages that are frequently changed, you can block the search engines from indexing them in their databases using robots.txt file so that you can prevent 404 errors.

Zend Launches PHP Development Cloud / Adobe Flash exploit allows websites to access your webcam without permission

2011-10-21T17:25:00.000+05:30

Zend Launches PHP Development CloudPHP developers, the world's fourth-largest developer group, now have an option enjoyed by other leading languages: they can collaborate on new software in the cloud, then deploy it to the cloud.Microsoft illustrated the value of software development in the cloud when it made Visual Studio tools available for collaborative use on Windows Azure. Popular platforms as a service Heroku and Engine Yard did the same..

Adobe Flash exploit allows websites to access your webcam without permission
Your webcam can be a powerful tool for communicating with loved ones or even having a conversation with a world-famous luminary. But when that power is put into someone else's hands, it can have ..

Oracle India to recruit 3,500 employees by May 2012
Oracle India has the highest number of employees outside of its Redwood Shores headquarters in California. To add to the already existing huge manpower base in India, Oracle today announced an aggress..

Tata Teleservices ties up with NEC to backhaul mobile broadband traffic
NEC Corporation has inked an agreement with Tata Teleservices Limited (TTL) to deploy NEC’s iPASOLINK platform for the transformation of TTL’s backhaul mobile transport network. The iPASOL..

BranchOut Adds Tools To Let Recruiters Go Trolling on Facebook
RecruiterConnect is the first software product for businesses ever built on top of Facebook. Finding the right candidates to fill open positions is a perennial recruiting problem. LinkedIn ..

New Version of Gmail Coming Soon
A new version of Gmail featuring a revamped look, redesigned conversation threads and improved search is slated for pending released, according to an official video that was mistakenly posted to Googl..

DoT hangs up on 11-digit plan
The proposal to move to 11-digit mobile numbers has been shelved for good. The telecom department has accepted the short-term solution from Telecom Regulatory Authority of India (Trai) to create addit..

NaapTol Raises $25 mn from NEA, Canaan and SVB; to invest in hiring and supply chain
NaapTol Online Shopping Pvt Ltd, which operates shopping site NaapTol.com, has raised $25 million (Rs 123 crore) in an all cash deal, led by New Enterprise Associates (NEA). Earlier inv..

Amazon Throws A Minor Curveball With HTML5-Powered Kindle Format 8
Amazon has announced an update to the Kindle file format integrating many HTML5 tags and CSS attributes. Many expected a concession by Amazon in the form of an EPUB-compatible upgrade, and this comes ..

SoundCloud and Last.fm APIs Mashed Up into New Music Discovery App
A music discovery app for iOS that went live recently shows just what's possible when digital music services open up their libraries and functionality via powerful APIs. Twist Radio&nbs..

BlackBerry maker accused of infringing BBX trademark
BBX, the operating system thatResearch In Motion is counting on to revive its floundering BlackBerry franchise, has run into trouble even before the company could install the system in its smartp..

Clouds Vs. Outsourcing: The Next Battleground
IBM, HP, and other established vendors entering cloud computing are often already outsourcing partners to the firms that are now frequently looking for an infrastructure service provider.

Informatics Assistant (Suchna Sahayak) IA Exam 2011 Answer Key

2011-08-28T14:49:00.000+05:30

The Answer Key Of Informatics Assistant (Suchna Sahayak) Will Be Available .The Answer Key Of IA Exam 2011 Declare By DOIT&C Department.DOIT&C Department Conduct This Exam.

Answer Key Of Series A:

1B 2B 3C 4D 5C 6B 7D 8B 9D 10D 11B 12C 13A 14D 15A 16C 17B 18B 19B 20A
21B 22B 23C 24D 25B 26A 27C 28C 29C 30D 31A 32C 33C 34A 35A 36B 37B 38B 39D 40C
41D 42A 43D 44D 45B 46B 47A 48C 49D 50D 51B 52C 53B 54B 55D 56B 57A 58D 59B 60B
61A 62C 63C 64A 65D 66B 67C 68 69B 70B 71D 72C 73A 74D 75D 76A 77C 78D 79B 80D
81C 82C 83C 84A 85B 86C 87A 88A 89D 90B 91D 92A 93B 94D 95A 96B 97A 98A 99A 100D

Answer Key Of Series B:
1B 2C 3B 4B 5C 6D 7B 8A 9C 10C 11C 12D 13B 14B 15C 16D 17C 18B 19D 20B 21D 22D 23B 24C 25D 26D 27A 28C 29B 30B 31D 32D 33A 34C 35D 36B 37D 38C 39B 40C 41B 42B 43C 44A 45A 46C 47AorC 48C 49A 50B 51D 52A 53B 54A 55A 56A 57A 58A 59C 60B 61A 62A 63B 64B 65B 66C 67C 68D 69A 70D 71D 72B 73B 74A 75C 76D 77D 78B 79C 80B 81B 82D 83B 84A 85D 86B 87D 88A 89C 90C 91A 92CorD 93B 94C 95C 96B 97A 98D 99C 100A.

Answer Key Of Series C:

1D 2B 3A 4D 5B 6C 7A 8D 9A 10C 11B 12B 13B 14C 15B 16B 17C 18D 19B 20A 21C 22C 23C 24D 25B 26B 27C 28D 29C 30B 31A 32C 33A 34D 35B 36C 37B 38B 39D 40B 41A 42D 43B 44D 45A 46C 47C 48A 49B 50B 51C 52A 53B 54D 55D 56C 57A 58D 59D 60A 62C 63B 64D 65C 66D 67C 68A 69B 70C 71A 72A 73D 74A 75A 76A 77B 78D 79A 80B 81A 82A 83A 84D 85A 86C 88A 89A 90B 91B 92B 93C 94C 95D 96A 97D 98D 100a

plz Suggest, if u see any mistake that happen.I will update the key

Information Assistant (Suchna Sahayak) Exam 2011 (Rajasthan)

The Exam Was Conduct At 10am To 1pm At Many Centers.The Admit Card Of Informatics Assistant (Suchna Sahayak) Exam Is Available At http://oasis.rkcl.in/doitc. This Is The Official Website Of IA Exam.