Uploading a file to display phpinfo() I was able to ascertain the server was running PHP 5.2.17. But after a bit of searching I found the __DIR__ magic constant was not added to PHP until 5.3.

Ends up if your code is going to run on older installs the best solution is to replace __DIR__ with dirname(__FILE__) this provides the same functionality as using the __DIR__ magic constant but works with versions of PHP from 4.0.2.

They had created a believable enough looking Paypal form asking clueless punters to enter their credit card details in order to avoid having their account being suspended. After playing around with the form for awhile in Firebug I decided to create a quick script to poison their data by submitting a new fake 16 digit VISA number along with random card holder name, CVV number and expiry date every couple of seconds.

After running this script for half an hour I decided that the script while it did the job would be a lot better if the posted data was coming from an anonymous IP address. Here I will run you through the process of setting up TOR & Polipo on a machine to add an element of anonymity to the data being sent and received by your CURL based script using.

Installation & Configuration
I am going to use Debian 6 in my examples although getting everything working on your distro of choice shouldn’t be too complicated.

apt-get update
apt-get install tor polipo

TOR is very easy to use and should straight run out of the box without any configuration, but if you plan on running Polipo on a different box to the TOR service or want to run the service on a different port to the default 9050 you will need to edit the config file at /etc/tor-tsock.conf.

The Polipo configuration is a little more in-depth with a few changes that will have to be made so that the service can forward incoming requests to TOR. Edit the Polipo config file:

pico /etc/polipo/config

Uncomment line 17 with the “proxyAddress” directive and add the external IP address of your machine, mine is set to:

proxyAddress = “192.168.20.123″

Go down to line 23 uncomment the “allowedClients” directive and edit to suit your needs in my case its:

allowedClients = 127.0.0.1, 192.168.20.0/24

Also edit line 40 with the directive “socksParentProxy” and change it to point at your TOR service mine is:

socksParentProxy = “localhost:9050″

Uncomment line 41 with the “socksProxyType” directive and also uncomment lines 115 & 116 for a bit more security.

Restart the Polipo service so your changes to the configuration file take effect:

/etc/init.d/polipo restart

Proxy Testing

Its now time to test the set-up and see if its working correctly. I find this test is performed easiest using a browser, simply configure your browser to use your Polipo proxy and visit the site whatismyip.com. With any luck you will appear to be coming from a completely different IP to your normal network gateway address.

Protip: If you want to use the proxy for anonymous browsing as well, I recommend using the Foxy Proxy plugin for Firefox as it makes switching between your normal gateway and proxies a breeze.

Configuring CURL
By now you should have a configured and tested proxy service now its just a case of fo configuring your script to use the proxy. To use a proxy from CURL you simply need to add the CURLOPT_PROXY option to your script with the IP address and port of your proxy service i.e

curl_setopt($ch, CURLOPT_PROXY, ‘http://192.168.20.123:8123′);

Further Reading:
Polipo Homepage
TOR Homepage

Related Reading:
Installing TOR On Ubuntu 8.04

Source code

[Mon Jul 16 10:17:31 2011] [error] [client 58.96.56.198] PHP Fatal error:
Uncaught SoapFault exception: [sf:INVALID_LOGIN] INVALID_LOGIN: Invalid
username, user not active in /var/www/myapp/includes/thirdparty/developerforce/soapclient/SforceBaseClient.
php:162

Sometimes you may not have permission to edit the php.ini file or don’t want to effect the error reporting for other applications that live on the same box. This leaves you the option of changing the error reporting setting temporarily either in a .htaccess file or in the script itself. Telling PHP to log errors at runtime is very easy to achieve simply add the line below to your script, be warned though this approach is not an optimal solution in most situations, if there is a parse error in your script the directive will not be run and no errors will be logged.

Source code

ini_set("log_errors", 1);

A better option is to set the logging directive in a .htaccess file if your server is configured to allow their use. Simply open up your .htaccess files or create a new one in the directory of your application if you don’t have one already and add a line with the log_errors directive and save:

Source code

php_value log_errors 1

The new release can be downloaded here, and a full list of the changes in this release the change log can be found here.

CakePHP is a PHP open source rapid development framework that was born in 2005, it is distributed under an MIT licence and has a very active community. So of its other features include:

• Compatibility with PHP4 and PHP5
• Integrated CRUD for database interaction and simplified queries
• Model View Controller (MVC) Architecture
• Request dispatcher with good looking, custom URLs
• Built-in Validation
• Fast and flexible templating (PHP syntax, with helpers)
• View Helpers for AJAX, Javascript, HTML Forms and more
• Security, Session, and Request Handling Components
• Flexible access control lists
• Data Sanitation
• Flexible View Caching

In this post i will run the reader through the process of setting up CakePHP and then creating a simple notice board application to demonstrate the simplicity of writing an application with cake.

Installing CakePHP

Download the latest copy of CakePHP from www.CakePHP.org uncompress and place in the root directory of your web server. Check that the Apache <directory> option for the root directory contains the AllowOverride option and it is set to “ALL” i.e

<Directory /mypath/tocakephp/>
Options Indexes FollowSymLinks MultiViews
AllowOverride All
Order allow,deny
allow from all
</Directory>

You must also ensure that Apache is using the rewrite mod to enable this on my Ubuntu based server system i used the command a2enmod rewrite. After all your changes to the Apache configuration have been made restart the Apache service so the changes take affect.

Depending on how you configured Apache you may run into some trouble with the rewrite functionality, have a look at the web server URL in a browser, if the CakePHP page you see is missing its CSS and images something is amiss. You have two options with how you want to move forward from this point, you can uncomment line 40 of the CakePHP config file (app/config/core.php) which will work around the malfunctioning rewrite mod plugin. Or you can look at this page on the CakePHP site, which has some pointers on fixing the problem properly.

Also you must make sure Apache has write access to the app/tmp directory and its sub folders before. A new MySQL database named notice_board will have to be created using PHPmyadmin or similar to hold the data for our sample application.
After this is done the file app/config/database.php.default needs to be renamed to app/config/database.php. Using a text editor the database parameters in the file then need to be changed to match your MySQL setup and the changes saved.

Baking Your First Application

Now the framework is installed we can start work on our first CakePHP application its going to be a simple notice board, it wont have all the bells and whistles but it will show you how quickly, and easily some tasks can be accomplished using cake.
First up you will need to make a table in the database you created earlier to hold our notices.

CREATE TABLE `notice_board`.`notices` (
`id` INT( 10 ) NOT NULL AUTO_INCREMENT ,
`title` VARCHAR( 255 ) NOT NULL ,
`content` TEXT NOT NULL ,
`created` VARCHAR( 30 ) NOT NULL ,
`modified` VARCHAR( 30 ) NOT NULL ,
PRIMARY KEY ( `id` )
);

** Note: it is CakePHP convention to use plural names when naming database tables. All tables should also have a field named “id” as the primary key.

Creating The Model

In CakePHP each database table should have its own model, this model is basically just a class and is used to access and modify the data stored within the table. To create a model for the notices table create a file named notice.php in the app/models folder. In this file enter:

<?php
class Notice extends AppModel {
var $name=’Notice’;
}
?>

You can see from the code above the Entry calls extends the AppModel class, in CakePHP all models extend this class.

**Note: It is also a CakePHP convention that the model class its file name is a singular version of database table name.

Creating The Controller

The controller is a piece of code that decides what has to happen within an MVC application. Every model in an application needs an associated controller. Creating a controller for the notice board application is very similar to creating the model. Just create a new file named notices_controller.php in the app/controllers directory.

In this file enter the following code:

<?php
class NoticesController extends AppController {
var $name = ‘Notices’;
function index() {
$this->set(‘notices’, $this->Notice->findAll());
}
}
?>

The addition of the index function is a method to give our controller some functionality in this case to display all of the notices stored in the database.

**Note: It is CakePHP convention that controller names are plurals of the model name.

Â

Creating A View

We have a model, a database and a controller so now we need a view to display our hard work to the end user. Create a new directory  called notices in the folder named app/views. Now create a file within the newly created directory called index.thtml containing the following code:

<h2>Notice Board</h2>
<p><?PHP echo $HTML->link(‘Add New Notice’, ‘/notices/add’); ?></p>
<div style=”height: 10px;”></div>
<?PHP if(empty($notices)) : ?>
This notice board currently has no notices to display.
<?PHP
else:
foreach ($notices as $notice):
echo ‘<b>Title:</b> ‘ . $notice['Notice']['title'] . ‘<br>’;
echo $notice['Notice']['content'] . ‘<br>’;
echo ‘<b>Created: </b><i>’ . $notice['Notice']['created'] . ‘</i><br>’;
echo $HTML->link(‘Delete’, “/notices/delete/{$notice['Notice']['id']}”, null, ‘Are you sure?’  );
echo ‘<br><div style=”height: 10PX;”></div>’;
endforeach;
endif;
?>

**Note: The 1.2 version of CakePHP will use the file extension .ctp as opposed to the extension .thtml usedfor  “views” in the earlier versions.

Now if you aim your browser at your server’s url with the trailing name “notices” i.e http://mysever.com/notices, you should be able to now see that we are making some positive progress with our app.

Creating New Notices

Since we have laid out the ability to view notices its time to add some functionality to the controller so a user can actually post notices to the board. To achieve this you will need to edit the notices_controller.PHP and append an add function, so the files contents look like this:

<?PHP
class NoticesController extends AppController {
var $name = ‘Notices’;
function index() {
$this->set(‘notices’, $this->Notice->findAll());
}

function add() {
if (!empty($this->data)) {
if ($this->Notice->save($this->data)) {
$this->flash(‘Your notice has been posted.’,'/notices’);
}
}
}
}
?>

Now create a template named app/views/add.thtml with the code below for the user to enter the details of a new notice.

<h2>Create Notice</h2>
<form method=”post” action=”<?PHP echo $HTML->url(‘/notices/add’)?>”>
<div align=”center”>
<p>
Notice Title:
<?PHP echo $HTML->input(‘Notice/title’, array(‘size’ => ’40′))?>
<?PHP echo $HTML->tagErrorMsg(‘Notice/title’, ‘A notice title is required.’) ?>
</p>

<p>
Notice Body:
<?PHP echo $HTML->textarea(‘Notice/content’, array(‘rows’=>’10′)) ?>
<?PHP echo $HTML->tagErrorMsg(‘Notice/content’, ‘Your notice needs some content.’) ?>
</p>

<p>
<?PHP echo $HTML->submit(‘Create Notice’) ?>
</p>
</div>
</form>

Form Validation

Since the application has a form to accept data from a user the entered data will have to be validated, one of CakePHP’s strong points is its built in validation functionality removing a lot of pain for developers.
To handle the validation of our new notice you need to go back and edit the entries model (app/models/notice.PHP) and append a validate array so the file looks like this:

<?PHP
class Notice extends AppModel {
var $name=’Notice’;
var $validate = array(
‘title’ => VALID_NOT_EMPTY,
‘body’ => VALID_NOT_EMPTY
);
}
?>

Deleting Existing Notices

Now notices can be added to the board, it makes sense to add functionality supporting the deletion of a notice. To achieve this we need to add a new function to our controller so the delete link on the index page works properly. Open the controller file back up and add a delete function so the file contents are the same as below:

<?PHP
class NoticesController extends AppController {
var $name = ‘Notices’;
function index() {
$this->set(‘notices’, $this->Notice->findAll());
}

function add() {
if (!empty($this->data)) {
if ($this->Notice->save($this->data)) {
$this->flash(‘Your notice has been posted.’,'/notices’);
}
}
}

function delete($id) {
$this->Notice->del($id);
$this->flash(‘The selected notice has been deleted.’, ‘/notices’);
}

}
?>

You should now be the proud owner of your first working CakePHP web application!

Further Reading

CakePHP (Official Site)
http://www.cakephp.org/

A Run Down On The Conventions In CakePHP
http://book.cakephp.org/view/22/CakePHP-Conventions

Understanding MVC (On the CakePHP site)
http://book.cakephp.org/view/11/Overview

Model View Controller – Background, History etc on Wikipedia
http://en.wikipedia.org/wiki/Model-view-controller

Â

Â