The highly successful security book returns with a new edition, completely updatedWeb applications are the front door to most organizations, exposing them to attacks that may disclose personal information, execute fraudulent transactions, or compromise ordinary users. This practical book has been completely updated and revised to discuss the latest step-by-step techniques for attacking and defending the range of ever-evolving web applications. You'll explore the various new technologies employed in web applications that have appeared since the first edition and review the new attack techniques that have been developed, particularly in relation to the client side.Reveals how to overcome the new technologies and techniques aimed at defending web applications against attacks that have appeared since the previous editionDiscusses new remoting frameworks, HTML5, cross-domain integration techniques, UI redress, framebusting, HTTP parameter pollution, hybrid file attacks, and moreFeatures a companion web site hosted by the authors that allows readers to try out the attacks described, gives answers to the questions that are posed at the end of each chapter, and provides a summarized methodology and checklist of tasksFocusing on the areas of web application security where things have changed in recent years, this book is the most current resource on the critical topic of discovering, exploiting, and preventing web application security flaws.

This book introduces you to Node, the new web development framework written in JavaScript. You'll learn hands-on how Node makes life easier for experienced JavaScript developers: not only can you work on the front end and back end in the same language, you'll also have more flexibility in choosing how to divide application logic between client and server. Written by a core contributor to the framework, Node: Up and Running shows you how Node scales up to support large numbers of simultaneous connections across multiple servers, and scales down to let you create quick one-off applications with minimal infrastructure. Built on the V8 JavaScript engine that runs Google Chrome, Node is already winning the hearts and minds of many companies, including Google and Yahoo! This book shows you why.Understand Node's event-loop architecture, non-blocking I/O, and event-driven programming Discover how Node supports a variety of database and data storage tools Learn best practices for writing easy-to-maintain code for Node Get concrete examples of how to use the various Node APIs in practice Take advantage of the book’s complete API reference

***This is the updated and corrected edition ofThe iOS 5 Developer's Cookbook.***   The iOS 5 Developer’s Cookbook, Third Edition   Covers iOS 5, Xcode 4.2, Objective-C 2.0’s ARC, LLVM, and more!   In this book, bestselling author and iOS development guru Erica Sadun brings together all the information you need to quickly start building successful iOS apps for iPhone, iPad, and iPod touch. Sadun has thoroughly revised this book to focus on powerful new iOS 5 features, the latest version of Objective-C, and the Xcode 4 development tools.   The iOS 5 Developer’s Cookbook, Third Edition is packed with ready-made code solutions for the iOS 5 development challenges you’re most likely to face, eliminating trial-and-error and helping you build reliable apps from the very beginning. Sadun teaches each new concept and technique through robust code that is easy to reuse and extend. This isn’t just cut-and-paste: Using her examples, Sadun fully explains both the “how” and “why” of effective iOS 5 development.   Sadun’s tested recipes address virtually every major area of iOS development, from user interface design to view controllers, gestures and touch, to networking and security. Every chapter groups related tasks together, so you can jump straight to your solution, without having to identify the right class or framework first. Coverage includes: Mastering the iOS 5 SDK, Objective-C essentials, and the iOS development lifecycle Designing and customizing interfaces with Interface Builder and Objective-C Organizing apps with view controllers, views, and animations featuring the latest Page View controllers and custom containers Making the most of touch and gestures—including custom gesture recognizers Building and using controls from the ground up Working with Core Image and Core Text Implementing fully featured Table View edits, reordering, and custom cells Creating managed database stores; then adding, deleting, querying, and displaying data Alerting users with dialogs, progress bars, local and push notifications, popovers, and pings Requesting and using feedback Connecting to networks and services, handling authentication, and managing downloads Deploying apps to devices, testers, and the App Store

The smart way to build applications with Microsoft® SharePoint® Designer 2010 -- one step at a time! Experience learning made easy -- and quickly teach yourself how to create SharePoint 2010 applications and workflows with Microsoft® SharePoint® Designer 2010. With Step by Step, you set the pace -- building and practicing the skills you need, just when you need them! Design solutions to meet your business scenario -- without code Customize lists, libraries, and SharePoint site pages Use Web Parts to display, edit, and modify list item data Access data from a variety of external sources Create workflows to automate business processes Use master pages and CSS to control how sites work Your Step by Step digital content includes: All the books practice files -- ready to download and put to work. Fully searchable online edition of this book -- with unlimited access on the Web. The print version of this book includes free digital content online. To download, please visit O'Reilly's web site, search for the title of this book to find its catalog page, and click on the link below the cover image (Examples, Companion Content, or Practice Files). Note that while we provide as much of the media content as we are able via free download, we are sometimes limited by licensing restrictions. Please direct any questions or concerns to booktech@oreilly.com. Tips from Microsoft® SharePoint® Designer 2010 Step by Step Microsoft SharePoint Designer 2010 has seen major improvements over its previous version, Microsoft Office SharePoint Designer 2007. It is now the preferred tool for site owners and what Gartner termed as ‘citizen developers’. Using the browser and other what-you-see-is-what-you-get (WYSIWYG) tools such as, SharePoint Designer 2010, InfoPath 2010 and Visio Premium 2010, citizen developers, that is, those users operating outside the scope of IT can create new business applications for consumptions by others. These non-code solutions are successful because citizen developers know what they want to achieve, they understand their business needs and with a bit of SharePoint knowledge they can wire together the business processes or sets of tasks for their organization. Using the book, SharePoint Designer 2010 Step by Step – site owners and citizen developers can build up their SharePoint 2010 knowledge so that they can build citizen developed solutions, and then reuse those solutions as a basis for future SharePoint sites. The book is a step by step tutorial; explaining what you are doing and why, and gives you a good understanding of why. It contains images of commands in the margin so you can easily find them on the ribbon and contains many screenshots so you can confirm that you are following the steps correctly. You can also use the book as a reference as it has an extensive index and glossary. Don’t be put off by its name; this book is not aimed at just web designers - with SharePoint Designer, you can carry out similar tasks to the browser; however, you can now complete more tasks natively, without the need to jump back and forth between SharePoint Designer and the browser. For example, when you first open a site with SharePoint Designer you are presented within the SharePoint Designer workspace with a site’s summary page. This page provides you with the basic information about the site and allows you to change many site settings, manage permissions and create new subsites. You will also notice from the screenshot below, that SharePoint Designer has a redesigned user interface (UI) that uses Microsoft Office Fluent UI. Tip: Once you open a SharePoint 2010 site in SharePoint Designer, you can open individual files, that are not stored within the site. Another reason why you it is easier to complete similar tasks with SharePoint Designer than using the web browser to is the Navigation pane. This replaces the Folder List task pane in SharePoint Designer 2007 and focuses on SharePoint objects and not where the objects are stored. You can then pin each of these object types to show their contents in a mini-gallery, whilst you complete another task in the workspace. Although SharePoint Designer is a wonderful tool, it is not a tool that everyone should use, for example, if you only have contributor rights on a site you will not be able to use SharePoint Designer. In addition to SharePoint Designer’s in-built usage restrictions, IT and site collection owners can limit its usage at either the Web application or site collection level. Therefore you may see different SharePoint objects in the Navigation pane as compared to another user or depending on the site collection where the site is located. Tip: Using the Log In As icon in the SharePoint Designer status bar, you can log in as another user without closing and restarting the program. When you create the top level site in a site collection based on the team site template, then by default - users who are members of the Site Owners and Designers site groups can use SharePoint Designer. However they cannot customize site definition pages, nor can they see the hidden URL structure of a SharePoint site – the hierarchical tree view displayed when you click All File in the Navigation pane, that shows where files are physical or virtually located in a site. When you create a site collection using the Publishing Portal site template, then site owners and designers have no such limitations. This does make sense. On publishing site collections, you will probably want to delegate the control of content to individuals on a site by site basis. These individuals may need to create their own page layouts and change the branding of their sites. On team sites, you may wish to keep the same look and feel throughout the site collection and prevent all but site collection owners from customizing site definition pages. Tip: Whenever you create a new site collection, check that the SharePoint Designer settings meet your business needs. Microsoft has also addressed the issue that when you saved a site definition page with SharePoint Designer 2007, it would always store a copy of the page in the content database – known as customizing or un-ghosting the page, even when this was not necessary. Now with SharePoint Designer 2010, Microsoft has implemented a "safe by default" approach. When you edit a page you will only be able to amend the code within Web Part zones or within the Wiki page content area. If IT or the site collection owner has allowed you, you can edit the page outside those areas by placing the page in advance edit mode. This will result in customizing or un-ghosting the page – so customizing a page has not gone away, but you don’t always have to do it when editing a page with SharePoint Designer. SharePoint Designer 2010 Step by Step provides you with tips and guidance on how to use SharePoint Designer 2010. It helps you understand the consequences of performing tasks and gives you the skills and understanding for how to best build and modify your solutions to meet your business requirements.

So you've got an idea for an iPhone app -- along with everyone else on the planet. Set your app apart with elegant design, efficient usability, and a healthy dose of personality. This accessible, well-written guide shows you how to design exceptional user experiences for the iPhone and iPod Touch through practical principles and a rich collection of visual examples. Whether you're a designer, programmer, manager, or marketer, Tapworthy teaches you to "think iPhone" and helps you ask the right questions -- and get the right answers -- throughout the design process. You'll explore how considerations of design, psychology, culture, ergonomics, and usability combine to create a tapworthy app. Along the way, you'll get behind-the-scenes insights from the designers of apps like Facebook, USA Today, Twitterrific, and many others. Develop your ideas from initial concept to finished design Build an effortless user experience that rewards every tap Explore the secrets of designing for touch Discover how and why people really use iPhone apps Learn to use iPhone controls the Apple way Create your own personality-packed visuals Ten Tips for Crafting Your App’s Visual Identity Choose a personality. Don’t let your app’s personality emerge by accident. Before you start designing, choose a personality for your app. The right personality for the right audience and features makes an app irresistible and creates a bonafide emotional connection. Tapworthy designs have the power to charm and beguile. Voices (left) has a Vaudeville personality appropriate to a funny-voices novelty app. iShots Irish Edition (right) creates a gritty dive-bar ambience for its collection of drink recipes. Favor standard controls. Because they’re commonplace, the standard set of controls is sometimes dismissed as visually dull. Not so fast: commonplace means familiarity and ease for your audience. Conventions are critical to instant and effortless communication. Before creating a brand new interface metaphor or inventing your own custom controls, ask whether it might be done better with the built-in gadgetry. A coat of paint. Standard controls don’t have to be dreary. Use custom colors and graphics to give them a fresh identity. This technique requires a light touch, however; don’t distract from the content itself or drain the meaning from otherwise familiar controls. Wine Steward uses standard lists (known as table views in iOS) but creates a vintage ambience by draping a backdrop image across the screen. The app adds a parchment graphic to the background of each table cell, making each entry appear to be written on an aged wine label. The burgundy-tinted navigation bar maintains the app’s wine flavor. • You stay classy. Luxurious textures applied with taste increase your app’s perceived value. • Keep it real. Realistic lighting effects and colors create elements that invite touch and create an emotional attachment. They also provide subtle guidance about what your audience can interact with. • Borrow interface metaphors from the physical world. Lean on users’ real- world experience to create intuitive experiences. People will try anything on a touchscreen, for example, that they’d logically try on a physical object or with a mouse-driven cursor. Besides these practical benefits, using an everyday object as an interface metaphor imbues an app with the same associations that folks might have with the real McCoy--a shelf of books, a retro alarm clock, a much-used chessboard, a toy robot. • Don’t be afraid to take risks. Make sure your interfaces are intuitive, sure, but don’t be afraid to try something completely new and different. Designers and developers are hatching fresh iPhone magic every day, and there’s still much to explore and invent. While you should look hard at whether you might accomplish what you need to do with standard controls, it’s also worth asking, Am I going far enough? The app icon is your business card. The icon carries disproportionate weight in the marketing of your app, and it’s important to give it disproportionate design attention, too. Be descriptive more than artistic. Make your app icon a literal description of your app’s function, interface, name, or brand. Use a dull launch image. Disguise your app’s launch image as the app background for a faster perceived launch. Always cultivate the illusion of suspended animation when switching in and out of your app. Be kind to new users. Provide simple welcome-mat pointers for first-timers. Beware of more complex help screens; they’re warning signs of an overcomplicated interface.

With the recipes in this book, you can take full advantage of the vast collection of community-contributed modules that make the Drupal web framework useful and unique. You'll get the information you need about how to combine modules in interesting ways (with a minimum of code-wrangling) to develop a variety of community-driven websites. Each chapter describes a case study and outlines specific requirements for one of several projects included in the book -- a wiki, publishing workflow site, photo gallery, product review site, online store, user group site, and more. With Using Drupal, you will:Get an overview of Drupal concepts and key modules introduced in each chapter, with a bird's-eye view of each module's specialty and how it works Explore various solutions within Drupal that meet the requirements for the project, with details about which modules are selected and why Learn how to configure modules, with step-by-step recipes for building the precise functionality the project requires Get information on additional modules that will make the project even more powerful Be able to access the modules used in the chapter, along with other resources Newcomers will find a thorough introduction to the framework, while experienced Drupal developers will learn best practices for building powerful websites. With Using Drupal, you'll find concrete and creative solutions for developing the exact community website you have in mind.

The #1 WPF Book--Now Updated for WPF 4!   Full Color: Code samples appear as they do in Visual Studio!   Thorough, authoritative coverage, practical examples, clear writing, and full-color presentation make this one of the most widely acclaimed programming books of the last decade.   Windows Presentation Foundation (WPF) is the recommended technology for creating Windows user interfaces, giving you the power to create richer and more compelling applications than you dreamed possible. Whether you want to develop traditional user interfaces or integrate 3D graphics, audio/video, animation, dynamic skinning, multi-touch, rich document support, speech recognition, or more, WPF enables you to do so in a seamless, resolution-independent manner. WPF 4 Unleashed is the authoritative book that covers it all, in a practical and approachable fashion, authored by WPF guru and Microsoft developer Adam Nathan.  Covers everything you need to know about Extensible Application Markup Language (XAML) Examines the WPF feature areas in incredible depth: controls, layout, resources, data binding, styling, graphics, animation, and more Highlights the latest features, such as multi-touch, text rendering improvements, XAML language enhancements, new controls, the Visual State Manager, easing functions, and much more Delves into topics that aren’t covered by most books: 3D, speech, audio/video, documents, effects Shows how to create popular UI elements, such as Galleries, ScreenTips, and more Demonstrates how to create sophisticated UI mechanisms, such as Visual Studio-like collapsible/dockable panes Explains how to create first-class custom controls for WPF Demonstrates how to create hybrid WPF software that leverages Windows Forms, DirectX, ActiveX, or other non-WPF technologies Explains how to exploit new Windows 7 features, such as Jump Lists and taskbar customizations

Those creative professionals seeking the fastest, easiest, most comprehensive way to learn Adobe Flash Professional CS5 choose Adobe Flash Professional CS5 Classroom in a Book from the Adobe Creative Team at Adobe Press. The 10 project-based lessons in this book show readers step-by-step the key techniques for working in Flash CS5. Readers learn what they need to know to create engaging interactive content with Flash CS5. In addition to learning the key elements of the Flash interface, including panels, timelines, and frames, readers learn how to work with graphics, create and edit symbols, modify text, add interactivity with ActionScript 3.0, and incorporate animation and sound into their projects. They also learn how to prepare and export their finished projects for publishing. This completely revised CS5 edition covers the new text engine, Deco drawing tools, Spring feature for inverse kinematics, video enhancements, and more. The companion DVD includes lesson files so readers can work along with the book, as well as 2 hours of video tutorials from 'Learn Adobe Flash Professional CS5 by Video' from video2brain and Adobe Press. “The Classroom in a Book series is by far the best training material on the market. Everything you need to master the software is included: clear explanations of each lesson, step-by-step instructions, and the project files for the students.” –Barbara Binder, Adobe Certified Instructor, Rocky Mountain Training.Classroom in a Book®, the best-selling series of hands-on software training workbooks, helps you learn the features of Adobe software quickly and easily. Classroom in a Book offers what no other book or training program does–an official training series from Adobe Systems Incorporated, developed with the support of Adobe product experts.Note from the publisher:FREE Adobe Flash Professional CS5.5 updates are available for this title. Simply register your product at www.peachpit.com/register and you will receive the updates when they become available.

Do you know how to use Windows PowerShell to navigate the filesystem and manage files and folders? Or how to retrieve a web page? This introduction to the PowerShell language and scripting environment provides more than 430 task-oriented recipes to help you solve the most complex and pressing problems, and includes more than 100 tried-and-tested scripts that intermediate to advanced system administrators can copy and use immediately. You'll find hands-on tutorials on fundamentals, common tasks, and administrative jobs that you can apply whether you're on a client or server version of Windows. You also get quick references to technologies used in conjunction with PowerShell, including format specifiers and frequently referenced registry keys to selected .NET, COM, and WMI classes. With Windows PowerShell Cookbook, you’ll get more done in less time.Take a tour of PowerShell’s core features, including the command model, object-based pipeline, and ubiquitous scripting Learn PowerShell fundamentals such as the interactive shell and fundamental pipeline and object concepts Perform common tasks that involve working with files, Internet-connected scripts, user interaction, and more Solve tasks in systems and enterprise management, such as working with Active Directory, the filesystem, registry, event logs, processes, and services

For too long, developers have worked on disorganized application projects, where every part seemed to have its own build system, and no common repository existed for information about the state of the project. Now there's help. The long-awaited official documentation to Maven is here. Written by Maven creator Jason Van Zyl and his team at Sonatype, Maven: The Definitive Guide clearly explains how this tool can bring order to your software development projects. Maven is largely replacing Ant as the build tool of choice for large open source Java projects because, unlike Ant, Maven is also a project management tool that can run reports, generate a project website, and facilitate communication among members of a working team. To use Maven, everything you need to know is in this guide. The first part demonstrates the tool's capabilities through the development, from ideation to deployment, of several sample applications -- a simple software development project, a simple web application, a multi-module project, and a multi-module enterprise project. The second part offers a complete reference guide that includes:The POM and Project Relationships The Build Lifecycle Plugins Project website generation Advanced site generation Reporting Properties Build Profiles The Maven Repository Team Collaboration Writing Plugins IDEs such as Eclipse, IntelliJ, ands NetBeans Using and creating assemblies Developing with Maven ArchetypesSeveral sources for Maven have appeared online for some time, but nothing served as an introduction and comprehensive reference guide to this tool -- until now. Maven: The Definitive Guide is the ideal book to help you manage development projects for software, web applications, and enterprise applications. And it comes straight from the source.