Adam Barrett has been developing in PHP for about 10 years. Working for such internet giants as Overstock.com, GrabTakeOut.com, and most recently SOSStaffing.com, Adam has developed a little of everything including blogs, large scale ecommerce sites, intranets, mass email management systems, and PDF generating invoicing systems.

It’ll cover some of the basics of web application security, such as Cross Site Scripting (XSS), Cross Site Request Forgery (XSRF), SQL injection and some tips for their prevention and becoming more security conscious. There will be some demonstrations of all the topics with some suggested solutions. We’ll also see a demonstration of the simplistic Browser exploitation Framework (BeEF) project from bindshell.net , which presents an interesting take on potentials of XSS and XSRF within the browser.

A little about Eric:

I’ve been a programmer since I was age 12, back in the days of TI-83 graphing calculators and the lot. From there, I learned to develop through a combination of languages including Visual Basic, Delphi, and C/C++ with mostly security and personal firewall penetration testing applications that performed on the Windows platform. I learned substantially about the Windows API framework and developed most of my system level programming skillsets from this focus. I’m coming up on my senior year of my Bachelor’s degree program at Weber State University and work almost exclusively with web development technologies, such as PHP, (X)HTML, CSS, Javascript, AJAX, etc.

For the past year, I’ve worked at Code Greene, a web development company based in downtown Salt Lake City; I’ve worked on backend medium to large scale integration projects as well as custom PHP and CakePHP web frontends and sites, though my preferences are towards integration and API projects. While I know CakePHP best, I have looked at other PHP frameworks, such as Code Igniter and Zend Framework. In terms of my computer preferences, I don’t have a lot of time for gaming so a Linux distro, such as Ubuntu or Kubuntu, with some quality hardware usually suits me well. I don’t like Windows much anymore, as in the past year I have migrated all but one of my home systems to Ubuntu and only have to use Windows minimally at the university. Honestly, either way works if I can get the job done without too many runarounds, and you know…button clicks.

Eric can be followed on twitter at xtrementl (Extreme-NTL)

Lonnie Olson aka. fungus is a long time Linux/BSD administrator with a love of programming, networking, and security. Infrequent postings can be found at http://lonnieolson.com/ or on twitter @fungus.

Open Source Bridge is run entirely by volunteers who believe in the need for an open source conference that focuses on the culture of being an open source citizen, regardless of where in the stack you choose to code. All proceeds from conference registration and sponsorship go directly to the costs of the conference.

Sessions and events will share in-depth knowledge about using, creating and contributing to open source as citizens of a greater community. You’ll find relevant information whether you write web apps for the cloud, tinker with operating system internals, create hardware, run a startup, or blog about technology. They are still seeking proposals—and just extended the deadline to April 10th—so submit yours before time runs out. Some examples of our proposals so far: Brian Aker on Drizzle, a reboot of MySQL designed “for the cloud”; Linux Kernel hacker Greg K-H about how Linux manages development; Ward Cunningham, inventor of the wiki, about what’s next in collaboration; Amber Case, an anthropologist living in both the physical and virtual worlds, about Cyborg Citizenship.

In addition to regular conference sessions, they are holding an unconference day for free-form sessions, and host a 24-hour dedicated “hacker lounge” at the top of the Portland Hilton. In addition to hosting the hacker lounge, the Hilton has offered Open Source Bridge attendees steeply discounted room rates, starting at $139/night.

Visit opensourcebridge.org to learn more about the conference, see our session proposals, and register to attend.

UPHPU members can get $100 off registration with a registration code obtained by contacting Victor or Wade. They have also given us one free conference pass to raffle off at our meeting on 16 April.

If I have stepped on anyone’s toes in doing this [setting up the UPHPU twitter user], it was unintentional. I just wanted to grab it up before some other organization out there decided that the acronym fit their needs. :) Please, if there is any stubbed toes by my actions, please email me privately and we’ll mend the wound. :)

Of course, any interested twitter users among us should feel free “follow” @uphpu. I really think it would be another great “feed” of communication.

Oh, and feel free to follow me [@thinbegin] too as I post about PHP, amongst other things, regularly. Micro-blogging FTW!!! :)

eggyknap, known in meatspace as Josh Tolley, is a database administrator by day and, time permitting, a PostgreSQL hacker by night, who infrequently publishes items of occasional value at http://eggyknap.blogspot.com.

Joseph will be presenting on WordPress APIs, XML-RPC & AtomPub. WordPress has two sets of APIs available for third party clients, XML-RPC and AtomPub. We’ll cover the background and details about both, how OAuth may fit in the future and then dive into PHP examples of how to use XML-RPC to manage your WordPress blog.

Joseph is a California native, living in Utah with his wife and two daughters. He got hooked on email when it meant dialing into a BBS with a 2400 baud modem and ended up memorizing way too much of the AT command set. Access to the Internet changed all that and going to work for an ISP cemented that shift. It also exposed to him to the world of open source, starting with FreeBSD in 1996. From there he spent a number of years in IT doing a little bit of everything.

It’s that time again to start up Geek Lunches for this year, and we’ve decided to kick them off by having one in Utah County! (I have been sorely chastised for not having more events in Utah County – and look to amend that this year!)

This month’s Geek Lunch is going to be at The Smokehouse Pizza and BBQ in Orem.

The event will be Feb 20 at 12:30p.

Address below:

The Smokehouse Pizza and BBQ
214 East University Parkway
Orem, Utah 84058 United States

PLEASE PLEASE RSVP @ http://upcoming.yahoo.com/event/1819312/