PHP Conference 2009
Here are my notes from the conference. Overall it wasn’t as eye-opening as I’d hoped, no concrete strategies or technologies to consider implementing right now.
Aral Balkan
@aral
http://naklab.com (featuring game of life)
Recommend Book: ‘The Unthinkable’
http://37signals.com
http://flex.org/tour
LUA – Alchemy
Little Moo : make automated responses a bit more friendly
Google AppEngine (cloud) : not perfect
Unity 3D
XNA
SXSW conference Mar 16
BUILD: Architecture, Usability, Speed, Testing
SHARE: Promotion, Create Demand
LISTEN: Technical, Content, Usability
EVOLVE: Strategy, Focus
Scott MacVicar
Namespace
Late Static Binding – static functions compiled in runtime
Garbage Collection
ini handling – user-defined php.ini using FCGI
Limited GOTO
?:
pspell -> enchant
MySQLnd
phar
SQLite3
New Constants – __DIR__, PHP_DEBUG, PHP_MAXPATHLEN, etc.
Slides: http://talks.macvicar.net
David Soria Parra
dsp@php.net
http://blog.experimentalworks.com
Like RAID striping – improved concurrent access, little redundancy
Put all related data on one shard
Scaling: how to add another shard
Works on EC2
Use memcached for reads
Denormalize to solve join issues (since JOINs not allowed)
Search is a big problem
Use pre-caching
MySQL proxy
David Axmark
Sun colleague: Brian Aker
Drizzle: cut-down, modular version of MySQL
ACID compliant
Asynchronous comms
Bad INSERTs cause an error
Less locking
Slave enhancements
Needs more test cases
Hank Janssen
hjanssen@microsoft.com
Microsoft: http://phponws2008.com
http://bizspark.com
http://ilivetocode.com
http://windows.php.net
Mihai Corlan
FLEX Applications
- on Web browser
- needs only HTML, Javascript, CSS, Flex
- REST services/Web services
AIR Applications
- on Desktop
- communicate with PHP Server using remoting (call)
http://www.corlan.org
Chris Shiflett
http://shiflett.org
Observe behaviour, try to accommodate it
Incorporate ambient indicators
Use a login seal (specific to a user) for anti-phishing, eg, Yahoo
Change Blindness: not seeing what has changed on a page, very likely if a page reloads with very similar content.
Handing over 3rd-party password: BAD. Use Facebook Connect (XSS model), OpenAuth (Google + PECL support) or OpenID.
Keep privacy and security options simple.
Provide a feedback mechanism for problem-finding.
Be aware of iframe attacks (eg, Twitter dont-click) to dupe user.
