how the Injection flaws overcome in drupal

Previously i was in the domain of ASP.net .Now i have moved to PHP-CMS based technologies in the open source environment.Now the CMS i was using was Drupal.
 As i had some experience with ASP.net and MSSQL, i know how it overcomes injection problem as we pass parameters into it to solve the injection problem in ADO.net. I also have a doubt how my Drupal CMS handles SQL injection in its DBs

If  we login as in the above process the query will be in the form of

SELECT uid FROM users WHERE  name=“Admin”  OR uid=1 OR “1”=“1” AND  password=“xxxxxxxxx” 

The sql query runs in the above format if we login through the admin previlages.

But drupal actuallly provides built in sql injection attack prevention

db_query family of functions will take care of escaping user input for you as long as you pass them as parameters to the function and don't include them as part of your SQL statement.It is not possible to inject arbitrary SQL.

Drupal provides  functions to process URLs and SQL arguments, making security for users.Drupal7 have more complex code to overcome regard insecure database..

how to install lamp and phpmyadmin 3.2.2.1 in centOS 5.3

After reffering some sites and blogs at last i got LAMP and phpmyadmin-3.2.2.1 installed correctly in my centos 5.3
If you want to install LAMP, first you need to install php and mysql .
To do this use the following commands in your terminal

#yum install php
#yum install php-gd
#yum install php-mbstring
#yum install mysql
#yum install mysql-server
#yum install php-mysql

The default version of php on  centOS5.3  is php-5.1, if you have to work with the phpmyadmin you need to upgrade it for 5.2 or higher version

Below command shows the existing php version
#php -v

To upgrade or install  5.3 version first install 5.1 by the above methods to get rid of php-mbcrypt problems and some errors. And i suggest you to install php 5.1 first and then follow the below steps.I found some repos on some sites it would fairly work for you also...

To install, first you must tell rpm to accept rpm’s sign

#rpm --import http://repo.webtatic.com/yum/RPM-GPG-KEY-webtatic-andy

Then add the yum repository information

#cd /etc/yum.repos.d/
#wget http://repo.webtatic.com/yum/webtatic.repo
 
 Install php
 
#yum --enablerepo=webtatic install php
 
And then install webserver apache
 
#yum install httpd
 
Now, start the Apache/httpd server
 
# /etc/init.d/httpd start
# chkconfig httpd on    (to run apache automatically when system runs)
 
After that test it in browser by typing http://localhost/
 
If we get apache welcome page webserver is installed correctly.
 
Now to  test php go to file system var/www/html
 

 
Create a file and name it as info.php and give permission to acess it i,e access i,e chmod 777 info.php (for testing)
Type the following lines in info.php
 

phpinfo();
?>
 
and save the file
 
Open your webbrowser and you can acess it by by typing http://localhost/info.php and you can find the version number in a blue screen and mysql details
 
And coming to mysql  first
 
#mysql
 
we get the following error as ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock'
 
To fix:

First start the mysql daemon, then type mysql

#/etc/init.d/mysqld start

#mysql
it comes in terminal as
>mysql

by default mysql has no password and To update mysql root password

mysql> USE mysql;
mysql> UPDATE user SET Password=PASSWORD('new-password') WHERE user='root';
mysql> FLUSH PRIVILEGES;

then to exit
mysql>exit;

To test it
#mysql -u root -p
#Enter password : new-password
it takes to mysql and exit from there

To install phpmyadmin

#cd /var/www/html

If not avial able the below link as phpmyadmin go to link http://sourceforge.net/projects/phpmyadmin/files/ and browse the version you want and download.

#wget http://nchc.dl.sourceforge.net/sourceforge/phpmyadmin/phpMyAdmin-3.2.2.1-english.tar.gz
#tar zxvf phpMyAdmin-3.2.4-english.tar.gz
#mv phpMyAdmin-3.2.4-english phpmyadmin
#cd phpmyadmin
#cp config.sample.inc.php config.inc.php

Edit config.inc.php file


#nano config.inc.php    and go to line and modify if you wish you can keep blowfish secret also

$cfg['Servers'][$i]['auth_type'] = ‘http‘; # default is cookies

Restart your apache webserver for updating the setting

# /etc/init.d/httpd restart
# /etc/init.d/mysqld restart

To keep always apache on when system is rebooted

#chkconfig httpd on
#chkconfig mysqld on

You can test  phpmyadmin by http://localhost/phpmyadmin

Give the user name as root and passord  (new-password) in popup

Hope that all works fine..

Website design ideas

1.Go through as many as example sites and do the layout work
2.Build the webite on the lowest screen resolution and build your wesite on this resolution.
3.Use Dhtml menus ,graphics and flash in eye caching manner.
4.Use tables creatively in html and measure them in percentages.
5.Insert images and content and test your site in different resolutions.