DEV Community: Darko Todorić

How to share your "localhost" with the world

Darko Todorić — Wed, 05 Jun 2024 17:00:00 +0000

Whether you're wont to show a friend your latest project, setting up a local server for a NAS (Network-Attached Storage), creating a media player to replace a streaming service, or just play around, today we're discussing how to securely access your local environment from a distance.

What are all options possible?

You've got various options available to safely access your local environment from a distance. Here, we'll explore three notable options, discussing how to set them up, their security implications, as well as their advantages and disadvantages:

Port forwarding
Cloudflare Tunnel
Reverse SSH Tunneling

Port forwarding

Probably the most prevalent option (unfortunately) today is port forwarding. The idea is to open a port on your router to the outside world so that anyone can access it.

How do you open a port on the router?

Before I explain how to open a port on the router, I would just like to say that there is a possibility that the ISP does not allow you to do this because their network uses CGNAT (which means that you share an IP address with several users). If you are not sure, it would be best to contact the ISP first and see if port forwarding is possible, if not, if they can provide you with that option (sometimes it is free, sometimes they will charge you extra if you want this feature).

So let's continue. In most cases, you will have to connect via a cable (not via WiFi), since most routers today have the option to log in to the Admin panel via WiFi.

Open "http://192.168.0.1/" in your browser and log in to the admin panel
Go to the "Port forwarding" page
Enter which port you want to open (and which port to watch when someone enters that open port)
Save the change and that's it. When you go to "http://your-ip:open-port" you should see your localhost

If it does not work for you, it is very possible that your ISP does not support opening ports and you will have to choose another option.

Conclusion

This was straightforward, but... Opening a port through a router means that anyone in the world will be able to access your local machine, potentially resulting in security breaches. From facing DDoS attacks targeting your IP address, which could prompt your IPS to block your internet, to the risk of someone hacking into your local server for network monitoring purposes, the complications are countless. While this option may be the simplest, it's undoubtedly the least secure, and I would not recommend it.

Cloudflare Tunnel

Cloudflare is a web infrastructure and website security company that offers CDN services, DDoS mitigation, internet security, and distributed domain name server services. It serves as a reverse proxy for websites, caching website data, and filtering out threats to enhance website loading speed and defend against attacks.

Cloudflare also provides the option to tunnel a local service through their servers, effectively and securely exposing the local server to the outside world.

It's crucial to understand that using Cloudflare requires you to have a domain set up with them, making it a prerequisite for this functionality to work.

How do you configure Cloudflare Tunnel?

Log in to Cloudflare
Go to the Cloudflare Zero Trust section in your dashboard
Go to "Networks -> Tunnels" page and select "Cloudflare" as connector

4. Enter the name of your tunnel

5. Choose your OS (recommended to use Docker). I will use Docker, so when he selects the option run the tunnel script on your local server

6. Choose which subdomain and domain you want to connect to the localhost port

7. Save and if you did everything like I did, you will see that your tunnel is "healthy" and when you go to the entered subdomain, you should see your localhost

Conclusion

Although owning a domain (typically around $10 per year) is a requirement, using Cloudflare Tunnel remains one of the top choices for most individuals. It offers extensive flexibility, security features, and a wide range of options such as analytics, DDoS protection, and caching, all of which come at no cost.

However, it's essential to be aware that Cloudflare Tunnel does not support streaming, as doing so may lead to Cloudflare banning your account.

It's worth noting that Cloudflare hides your private IP address behind its network, significantly enhancing your security compared to directly opening ports on your router, where your IP address is exposed to everyone.

Reverse SSH Tunneling

Reverse SSH Tunneling is a method used to establish a secure connection from a remote server back to a local machine.

It's worth noting that you'll need a server from a VPS provider (I recommend Hetzner) through which you'll tunnel traffic to your local server. This technique is highly secure because it leverages the fundamental SSH protocol, encrypting all traffic and keeping your local IP address hidden.

How do you configure Reverse SSH Tunneling?

Generate an SSH key on the local server using ssh-keygen
Transfer the public SSH key from the local server to the remote server and append it to the "authorized_keys" file. This enables the local server to connect to the remote server via SSH without requiring a password, as the SSH key serves for authentication
Configure NGINX on the remote server to act as a proxy, redirecting traffic from a specified port or domain to another port. Optionally, you can set up a DNS entry for your domain. Below is an example NGINX configuration:

server {
    listen 80;
    server_name localhost.darkotodoric.com;

    location / {
        proxy_pass http://localhost:1337/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Host $http_host;
    }

    error_log /var/log/nginx/localhost.darkotodoric.com_error.log;
    access_log /var/log/nginx/localhost.darkotodoric.com_access.log;
}

4. On the local server, initiate SSH tunneling with the following command:

ssh -R 1337:localhost:80 remote_user@remote_server_ip

5. Assuming all configurations are correct, traffic from "localhost.darkotodoric.com" should now be forwarded to "localhost:80"

To ensure a stable connection, especially in the event of network interruptions, consider setting up SSH tunneling as a service on Linux. Here's an example of how the service should be configured:

[Unit]
Description=autossh
Wants=network-online.target
After=network-online.target

[Service]
Type=simple
ExecStart=/usr/bin/ssh -o "StrictHostKeyChecking=no" -o "ServerAliveInterval 10" -o "ServerAliveCountMax 3" -o "ExitOnForwardFailure=yes" -T -N -R1337:localhost:80 remote_user@remote_server_ip
Restart=always
RestartSec=10

[Install]
WantedBy=multi-user.target

Conclusion

While requiring your own remote server, "Reverse SSH Tunneling" offers a straightforward, secure, and reliable method to expose your local server to the world without any limitations.

Conclusion

My advice is to avoid "Port forwarding" on the router due to potential security vulnerabilities. When considering the other two options, your choice should be guided by your specific needs and intentions. If you intend to run a local media server for streaming video content, "Reverse SSH Tunneling" is the way to go, as Cloudflare doesn't support streaming (at least not for free) through their platform. However, for any other purpose, "Cloudflare Tunnel" is an excellent solution. It's simpler to set up and comes with a host of features like analytics, security, caching, DNS configuration, DDoS protection, and more, all provided free of charge.

Understanding MySQL Query Optimizer: COUNT(id) vs COUNT(*)

Darko Todorić — Wed, 29 May 2024 18:00:00 +0000

In MySQL, we use "COUNT" functions almost every day to help us calculate the number of rows for a given query. The biggest dilemma of every developer regarding performance is whether it is better to use "COUNT(*)" or "COUNT(id)".

MySQL Optimizer

MySQL optimizer is a critical component of MySQL responsible for determining the most efficient way to execute a given SQL query. This part plays a key role in the dilemma of which "COUNT" is the fastest. So let's explain...

We create the "users" table, which will have an index on the "first_name" column:

CREATE table users (
    id int NOT NULL AUTO_INCREMENT,
    first_name varchar(256) NOT NULL,
    PRIMARY KEY (id),
    INDEX idx_first_name (first_name)
);

We add a few rows and run the following 2 queries:

EXPLAIN SELECT COUNT(id) FROM users;

EXPLAIN SELECT COUNT(*) FROM users;

When you run these 2 SQL queries, you will notice that they use the same index, "COUNT(*)" is not slower at all, the MySQL Optimizer is responsible for that, which finds the index in the table that will give the best performance. In this case, both queries will return data at the same speed, because they use the same index and because the MySQL optimizer decided that that index is the most efficient.

MySQL Optimizer considers many parameters that contribute to choosing the best index key so that the given query returns data as quickly as possible.

Conclusion

The use of "COUNT(*)" is generally recommended because it allows the MySQL Optimizer to choose the most efficient approach, while "COUNT(column_name)" can be specifically useful in situations where it is necessary to count only non-NULL values in a particular column. Understanding how the MySQL Optimizer works and how to use indexes is critical to achieving optimal query performance.

How to configure PHP in Airflow?

Darko Todorić — Thu, 23 May 2024 18:00:00 +0000

Apache Airflow is an open-source platform used for managing complex workflows. It allows users to schedule, monitor, and manage tasks and commands.

In essence, Airflow serves as a powerful alternative to traditional cron-based scheduling systems. While cron (or crontab) is widely used for scheduling repetitive tasks on Unix-like systems, it lacks features for dependency management, monitoring, and dynamic scheduling, which are crucial for managing complex workflows. Airflow, on the other hand, provides a robust framework for defining, scheduling, and executing workflows, making it an ideal choice for data pipelines.

While Airflow is primarily associated with Python, its flexibility allows users to integrate tasks written in other languages, such as PHP. This opens up new possibilities for leveraging existing PHP codebases, libraries, and expertise within Airflow workflows. In this guide, we'll explore how to configure PHP tasks within Airflow, enabling you to harness the power of both Airflow and PHP in your data pipelines.

I'm writing this guide because I couldn't find any tutorials explaining how to set up PHP with Airflow until now.

At the end of the article, you can find my GitHub repository link as an example of how to properly integrate PHP and Airflow. You can skip reading the entire explanation of how everything works if you are only interested in the solution.

Do you really need Airflow?

Do you really need another relatively complex tool that will complicate your infrastructure? It depends... Most projects use "crontab" to schedule commands and it does the job very nicely, but when the number of commands inside crontab exceeds 100, and even 500, the situation starts to become drastically complicated and the management of all those commands through crontab is practically impossible.

Airflow structure

If you're still reading this, you've obviously run into the same problem as me your "crontab" has become too small for the number of commands that are there and you need a more complex solution.

Airflow consists of 5 key services that all work together to ensure that everything runs smoothly. These are the 5 key services:

PostgreSQL: Sets up a PostgreSQL database for Airflow to store metadata
Redis: Provides an in-memory data structure store, used by Airflow for task queue management
Airflow Scheduler: Manages the scheduling of tasks and ensures that they are executed at the right time
Airflow Worker: Executes the tasks scheduled by the Airflow scheduler
Airflow Webserver: Hosts the Airflow web interface, allowing users to monitor and manage workflows through a web browser

Integrating PHP into Airflow

To integrate PHP into Airflow, we need to ensure that PHP scripts are executed where the commands are run, which is within the Airflow worker. The Airflow worker is responsible for executing the tasks scheduled by the Airflow scheduler.

Here's how we can do it:

Modify the Airflow Worker Dockerfile: Ensure that PHP is installed in the Airflow worker's environment. This can be done by modifying the Dockerfile used to build the Airflow worker image.
Install PHP: Add the necessary commands to install PHP and any required extensions in the Dockerfile.
Run PHP Scripts: Use the BashOperator in Airflow to run PHP scripts as tasks within your DAGs. This way, when a task is executed by the Airflow worker, it can invoke the PHP script.

By following these steps, you can integrate PHP into your Airflow environment, allowing you to utilize PHP for various tasks within your workflows.

For a complete example with functional code, you can find the full setup and instructions at https://github.com/darkotodoric/php-in-airflow

Top 22 Websites to Learn New Skills in 2024

Darko Todorić — Tue, 13 Feb 2024 21:08:34 +0000

It has never been cheaper to learn new skills. These 22 sites give you the opportunity to learn various skills from technology, science, business, economy, management, language and similar skills that will change your life in 2024. From the comfort of your home, you can start learning new skills today and change your life from this year! I see no reason to wait any longer!

Coursera

Start, switch, or advance your career with more than 6,900 courses, Professional Certificates, and degrees from world-class universities and companies!

https://www.coursera.org/

Pluralsight

Develop critical tech skills. Cut cycle times. Build happier, healthier tech teams. And innovate smarter using AI!

https://www.pluralsight.com/

Udacity

Learn online and advance your career with courses in programming, data science, artificial intelligence, digital marketing, and more!

https://www.udacity.com/

Treehouse

Expert-led video courses to learn the journey into coding, programming, and design. Perfect for beginners, intermediate, and advanced learners!

https://teamtreehouse.com/

edX

Discover thousands of offerings — from free courses to full degrees — delivered by world-class partners like Harvard, Google, Amazon and more!

https://www.edx.org/

Khan Academy

Learn for free about math, art, computer programming, economics, physics, chemistry, biology, medicine, finance, history, and more. Khan Academy is a nonprofit with the mission of providing a free, world-class education for anyone, anywhere!

https://www.khanacademy.org/

Codecademy

Codecademy is an American online interactive platform that offers free coding classes in 12 different programming languages including Python, Java, Go, JavaScript, Ruby, SQL, C++, C#, and Swift, as well as markup languages HTML and CSS.

https://www.codecademy.com

Skillshare

Skillshare is a learning community for creators. Anyone can take an online class, watch video lessons, create projects, and even teach a class themselves!

https://www.skillshare.com/

Duolingo

Learn languages by playing a game. It's 100% free, fun, and scientifically proven to work!

https://www.duolingo.com/

MasterClass

MasterClass is the streaming platform where anyone can learn from the world's best across a wide range of subjects!

https://www.masterclass.com/

LinkedIn Learning

LinkedIn Learning is an online learning platform that helps your employees develop and build new skills through engaging e-learning and online classes!

https://learning.linkedin.com/

Highbrow

Highbrow helps you learn something new every day with 5-minute lessons delivered to your inbox every morning!

https://gohighbrow.com/

CreativeLive

Online classes in photography, art, design, craft & DIY, marketing, business, and entrepreneurship!

https://www.creativelive.com/

Sololearn

Everyone can learn to code. Sololearn oversimplifies coding by offering interactive bite-sized courses that will make you confident in the latest technologies!

https://www.sololearn.com/

CODE

Code.org is an education innovation nonprofit dedicated to the vision that every student in every school has the opportunity to learn computer science as part of their core K-12 education.

https://code.org/

Dash

Fun and free online course that teaches you the basics of web development through projects you can do in your browser.

https://dash.generalassemb.ly/

Udemy

Online learning and teaching marketplace with over 213,000 courses and 62 million students. Learn programming, marketing, data science and more!

https://www.udemy.com/

Learn to Code

freeCodeCamp.org is a friendly community where you can learn to code for free!

https://www.freecodecamp.org/

Developer Roadmaps

Community-driven roadmaps, articles and guides for developers to grow in their careers!

https://roadmap.sh/

Yousician

Yousician is a fun way to learn the guitar, piano, bass, ukulele or singing. Enjoy thousands of songs with Yousician as your personal music teacher!

https://yousician.com/

Pianu

Pianu is the first interactive online piano that teaches you how to play. Learn how to read music and chords, all while playing your favorite songs!

https://pianu.com/

TED-Ed

TED-Ed celebrates the ideas of teachers and students around the world. Discover hundreds of animated lessons, create customized lessons, and share your big ideas.

https://ed.ted.com/

100 Tips for a Successful Developer Career

Darko Todorić — Thu, 01 Feb 2024 16:28:57 +0000

1. Be a team player

Collaborate effectively, respecting and valuing the contributions of team members to achieve common goals.

2. Stay patient

Patience is key in coding, especially when dealing with complex issues or learning new technologies.

3. Regularly update your skills

Continuously learn and adapt to stay relevant in the ever-evolving tech landscape.

4. Simplify complex problems

Break down complex issues into smaller, manageable parts to find effective solutions more easily.

5. Practice clean coding

Write code that is not only functional but also clean, well-organized, and easy for others to understand.

6. Keep your code organized

Maintain an organized codebase with clear structure and comments for ease of maintenance and collaboration.

7. Respect deadlines

Manage your time effectively to meet project timelines, showing professionalism and reliability.

8. Embrace new technologies

Stay ahead of the curve by embracing and learning new technologies and tools in the tech world.

9. Practice code optimization

Continuously refine and optimize your code for better performance, readability, and maintainability.

10. Develop good listening skills

Listening skills are crucial for understanding project requirements and team communication.

11. Prioritize tasks efficiently

Efficient task management ensures important and time-sensitive projects are completed first.

12. Seek feedback regularly

Regular feedback helps identify areas for improvement and confirms when you're on the right track.

13. Maintain a positive attitude

A positive mindset can significantly impact your work quality and team morale.

14. Keep your workspace organized

An organized workspace enhances focus and productivity, reducing unnecessary stress.

15. Understand client needs

Grasping client requirements is essential for delivering successful, relevant solutions.

16. Learn from mistakes

View mistakes as learning opportunities to improve your skills and decision-making.

17. Value teamwork

Recognize that diverse skills and perspectives in a team lead to stronger solutions.

18. Stay adaptable

Be flexible and open to change, adapting to new challenges and environments quickly.

19. Network with peers

Networking builds relationships and opens up opportunities for collaboration and learning.

20. Avoid burnout

Take regular breaks and maintain a work-life balance to prevent burnout and stay productive.

21. Set achievable goals

Set realistic and clear goals for your personal and professional development.

22. Practice effective communication

Clear and concise communication is crucial in all aspects of software development and team interaction.

23. Stay focused

Minimize distractions to maintain high levels of productivity and quality in your work.

24. Manage stress well

Develop stress management techniques to maintain your health and work efficiency.

25. Be proactive

Take initiative, anticipate potential problems, and act to prevent or solve them early.

26. Follow industry trends

Keeping up with industry trends ensures that your skills and knowledge remain current and relevant.

27. Attend workshops and conferences

Participate in industry events for learning, networking, and staying updated on the latest technologies.

28. Balance perfection and practicality

Strive for high-quality work while being practical about time and resource constraints.

29. Master keyboard shortcuts

Boost your efficiency and speed by mastering keyboard shortcuts in your favorite IDEs and tools.

30. Practice regular refactoring

Regularly revisit and improve your code to enhance its structure, readability, and performance.

31. Develop debugging skills

Effective debugging skills are essential for quickly identifying and resolving issues in your code.

32. Share your knowledge

Sharing your expertise with others not only helps them but also reinforces your own understanding.

33. Stay curious

A curious mind leads to continuous learning and discovery of innovative solutions.

34. Set personal projects

Personal projects allow you to explore new technologies and ideas in a creative, low-pressure environment.

35. Collaborate effectively

Effective collaboration involves clear communication, respect for others' ideas, and a focus on common goals.

36. Learn project management basics

Understanding project management principles can greatly improve your efficiency and effectiveness.

37. Respect others' ideas

Valuing diverse perspectives can lead to more innovative and effective solutions.

38. Practice empathy

Being empathetic improves team dynamics and client relationships, fostering a positive work environment.

39. Develop critical thinking

Critical thinking skills enable you to solve problems more effectively and make better decisions.

40. Embrace diversity

Diversity in teams brings a range of perspectives, fostering creativity and innovation.

41. Practice self-discipline

Self-discipline ensures you stay on track with your goals and commitments, even without external pressure.

42. Build a strong work ethic

A strong work ethic demonstrates reliability and commitment to your craft.

43. Stay organized

Organization helps manage your workload more effectively and meet your responsibilities.

44. Maintain a healthy lifestyle

A healthy lifestyle boosts your mental and physical energy, positively impacting your work performance.

45. Manage your time effectively

Effective time management is key to balancing workload, deadlines, and personal life.

46. Be consistent

Consistency in quality and effort leads to trust and reliability in professional environments.

47. Stay committed

Dedication to your work and goals is essential for achieving long-term success.

48. Learn to say no when needed

Saying no to unrealistic demands helps maintain a healthy workload and professional integrity.

49. Develop resilience

Resilience helps you navigate challenges and recover from setbacks more effectively.

50. Practice gratitude

Recognizing and appreciating what you have can improve happiness and job satisfaction.

51. Seek mentorship

Learning from experienced professionals can accelerate your growth and understanding.

52. Offer help to others

Offering assistance to colleagues not only builds strong relationships but also enhances your own skills.

53. Stay humble

Humility allows you to remain open to learning and receiving feedback.

54. Celebrate small wins

Acknowledging and celebrating small achievements keeps you motivated and focused on your goals.

55. Develop negotiation skills

Negotiation skills are vital in reaching mutually beneficial agreements in various aspects of work.

56. Learn to prioritize

Prioritizing tasks ensures that the most critical and time-sensitive work gets done first.

57. Be detail-oriented

Paying attention to details can significantly improve the quality and accuracy of your work.

58. Practice active learning

Active learning involves seeking out new knowledge and experiences to continuously grow your skills.

59. Stay open to change

Embracing change is essential in the fast-paced tech industry, allowing for growth and innovation.

60. Develop a growth mindset

A growth mindset encourages continuous learning and resilience in the face of challenges.

61. Build meaningful relationships

Cultivating strong professional relationships leads to a supportive network and collaborative opportunities.

62. Stay honest

Honesty builds trust and credibility in professional and personal relationships.

63. Take constructive criticism well

Viewing criticism as an opportunity for growth leads to improved skills and professional development.

64. Develop a personal brand

A strong personal brand differentiates you in the market and highlights your unique skills and experiences.

65. Stay motivated

Keeping your motivation high is key for overcoming challenges and achieving your goals.

66. Practice effective problem-solving

Effective problem-solving involves identifying the root cause of issues and developing practical solutions.

67. Be approachable

Being approachable fosters positive relationships and open communication with colleagues and clients.

68. Develop emotional intelligence

Emotional intelligence enhances your ability to understand and manage your emotions and those of others.

69. Stay creative

Creativity leads to innovative solutions and keeps your work engaging and fulfilling.

70. Be resourceful

Resourcefulness involves finding clever ways to overcome challenges with the resources available.

71. Practice good work-life balance

Balancing work with personal life is crucial for long-term happiness and preventing burnout.

72. Stay confident

Confidence in your abilities allows you to tackle challenges effectively and assert your ideas.

73. Be flexible

Flexibility allows you to adapt to changing circumstances and embrace new opportunities.

74. Develop strong analytical skills

Analytical skills enable you to assess situations and data effectively, leading to better decision-making.

75. Keep learning new things

Continuous learning keeps your skills sharp and your career prospects broad.

76. Manage expectations

Setting and managing realistic expectations prevents misunderstandings and ensures satisfaction.

77. Practice patience

Patience is vital for dealing with complex tasks and long-term projects effectively.

78. Be solution-focused

Focusing on solutions rather than problems leads to more productive and positive outcomes.

79. Maintain professional integrity

Upholding high ethical standards ensures trust and respect in your professional life.

80. Take initiative

Taking the lead on tasks and projects shows your commitment and drive.

81. Stay tech-savvy

Keeping up-to-date with the latest tech advancements ensures your skills remain relevant.

82. Respect confidentiality

Maintaining confidentiality is crucial in building trust and upholding professional ethics.

83. Be reliable

Being dependable and consistent in your work builds trust and credibility.

84. Break big tasks into smaller ones

Dividing large tasks into smaller steps makes complex projects more manageable and less daunting.

85. Continuously improve processes

Regularly seek ways to optimize and enhance work processes for greater efficiency.

86. Stay goal-oriented

Keeping focused on your goals ensures steady progress and achievement in your career.

87. Be a critical thinker

Critical thinking helps in evaluating situations thoroughly and making informed decisions.

88. Manage conflicts effectively

Effective conflict resolution maintains a harmonious work environment and healthy relationships.

89. Develop a personal learning style

Understanding your learning style enhances your ability to acquire and retain new knowledge.

90. Be a good communicator

Good communication is key in expressing ideas clearly and collaborating effectively with others.

91. Understand business fundamentals

Understanding basic business principles can greatly improve your contributions to organizational goals.

92. Be open to feedback

Welcoming feedback demonstrates your willingness to learn and grow professionally

93. Take care of your mental health

Prioritizing mental health is vital for maintaining overall well-being and work performance.

94. Stay calm under pressure

Maintaining composure under stress allows for clear thinking and effective decision-making.

95. Stay passionate

Keeping your passion alive drives motivation, creativity, and satisfaction in your work.

96. Learn from peers

Learning from colleagues provides diverse perspectives and knowledge.

97. Be a quick learner

Quickly assimilating new information and skills keeps you adaptable and competitive.

98. Adapt to different environments

Being adaptable to various work environments demonstrates versatility and resilience.

99. Keep your skills relevant

Staying current with your skills ensures you remain competitive and effective in your role.

100. Enjoy the journey in programming

Find joy and fulfillment in the process of learning and growing as a programmer.

As we conclude, remember that the journey of a programmer is not just about mastering code, it's about continuous growth, embracing change, and building meaningful connections. Keep growing, stay adaptable, and enjoy the continuous journey in the vast and ever-changing world of technology!

Automating comment validation on your website with AI: Easy and (almost) free!

Darko Todorić — Sun, 21 Jan 2024 16:28:36 +0000

Unlocking the potential of AI for web development has become both accessible and budget-friendly. In this article, we'll delve into the simple process of automating comment validation on your website using the ChatGPT API.

It's free, but...

The ChatGPT Moderation API is a powerful OpenAI model designed to help maintain a safe and respectful online environment. This API is currently offered for free though it's important to note that this pricing may change in the future.

It excels in handling content primarily in English, being highly optimized for this language. While it can work with other languages, its performance may not be as accurate or reliable as it is with English text.

The primary purpose of this model is to flag comments or content that may be inappropriate or harmful. It can categorize comments into various categories such as "hate," "harassment", "self-harm," "sexual," and so on.

To acquire a classification for a given comment, initiate a request to the moderation endpoint as exemplified in the following code samples:

curl https://api.openai.com/v1/moderations \
  -X POST \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $OPENAI_API_KEY" \
  -d '{"input": "Comment goes here"}'

So a simple example of how it will look in PHP code:

if($this->openAi->isCommentFlagged($comment)){
  // code here
}

With just a few lines of code, you can automate the majority of your tasks.

What about non-English comments?

To complete this task, we need to utilize the ChatGPT 3.5 API, which is a paid service, but it performs excellently in all languages supported by ChatGPT.

To acquire a classification for a given comment in any language, initiate a request to the ChatGPT API:

curl https://api.openai.com/v1/chat/completions \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $OPENAI_API_KEY" \
  -d '{
  "model": "gpt-3.5-turbo",
  "messages": [
    {
      "role": "system",
      "content": "Check the comment that I will forward to you and see if it falls into one of these categories: '\''hate, harassment, self-harm, sexual, violence'\''. Return me a JSON response in the following format: {'\''flagged'\'': true} or {'\''flagged'\'': false}."
    },
    {
      "role": "user",
      "content": "Comment goes here"
    }
  ],
  "temperature": 1,
  "max_tokens": 256,
  "top_p": 1,
  "frequency_penalty": 0,
  "presence_penalty": 0
}'

Also, for this code, the PHP part will look exactly the same:

if($this->openAi->isCommentFlagged($comment)){
  // code here
}

What about the price?

Well, if we say that the average comment on websites contains about 250 characters (which is quite a long comment), the current price using the "gpt-3.5-turbo-1106" model would be about 0.0001$ per comment, which leads us to the fact that checking 10,000 comments will cost us 1$.

Conclusion

In conclusion, harnessing the power of AI for comment validation can be a game-changer for your business. By automating this process, you not only save valuable time but also enhance the security and user experience, ultimately saving your business money.

Why AI assistants are your new coding superpower?

Darko Todorić — Sun, 21 Jan 2024 16:24:21 +0000

It's been exactly one year since I began my journey with AI assistant tools in software development. This milestone offers a perfect moment to reflect on the transformative impact these tools have had on my coding process and overall workflow.

The emergence of AI in software development

In the rapidly evolving landscape of technology, Artificial Intelligence (AI) has marked its significant presence in various fields, and software development is no exception. The advent of AI-powered coding assistants is not just a fleeting trend but a transformative force reshaping how developers approach coding challenges.

This new paradigm doesn't replace the developer but rather enhances their capabilities, allowing them to focus on more creative and complex aspects of programming. By handling mundane tasks, AI assistants free up valuable time for developers, enabling them to tackle more significant challenges and innovate more effectively.

The benefits of AI assistants for developers

Speeding up the coding process: AI coding assistants drastically reduce the time spent on routine coding tasks. They assist with auto-completing code snippets and providing quick solutions to common problems, allowing developers to focus on more complex aspects of their projects.
Enhancing code quality and efficiency: These assistants help maintain high code quality by detecting errors and suggesting optimizations. This leads to more reliable and efficient software, reducing the likelihood of bugs and improving overall software performance.
Providing real-time problem-solving support: AI assistants excel in offering real-time solutions to coding challenges. They serve as an on-the-spot resource for troubleshooting and problem-solving, aiding developers in overcoming obstacles swiftly and effectively.

My experience with AI coding assistants

Over the last year, I've tried out many AI coding tools. I noticed that most of these tools are pretty similar, offering almost the same level of help with coding. But after using them for a while, I decided to go with Codeium (codeium.com).

What's great about Codeium is that it's free, and I found it to be the best among the tools I used. It's not just about being free, Codeium really helps with my coding in a way that feels simple and effective. It gives me the right suggestions at the right time, which makes my coding easier and more accurate.

So, even though many AI tools are good, Codeium stood out for me. It's a great blend of being user-friendly and really good at what it does, all without costing anything.

The future of AI in programming

The future of AI in software development is poised for significant growth and innovation. We can anticipate further advancements in AI capabilities, leading to even more sophisticated coding assistance, predictive analytics, and personalized developer experiences. These developments will likely streamline the software development lifecycle, making it faster and more efficient.

As AI continues to evolve, it will open new frontiers in programming, from advanced problem-solving to automating more complex aspects of coding. However, this progress also necessitates a continuous dialogue about ethical considerations, security, and the balance between human creativity and AI assistance.

Embracing AI in software development is not just about adopting new tools, it's about adapting to a changing landscape where technology enhances human capability. As developers and tech professionals, staying informed and engaged with these advancements is crucial for shaping a future where AI and human ingenuity work hand in hand to create remarkable software solutions.

10 tools that every PHP developer should use

Darko Todorić — Fri, 19 Jan 2024 19:56:32 +0000

As a PHP developer, the tools you choose can make all the difference in your workflow and productivity. Here's a look at some essential tools that every PHP developer should consider to streamline their development process and enhance code quality.

1. PhpStorm

PhpStorm stands out as a highly sophisticated Integrated Development Environment (IDE) specifically tailored for PHP developers. It offers a comprehensive suite of features including deep code understanding, top-notch coding assistance, and support for all PHP tools and major frameworks. PhpStorm's intelligent code navigation and fast and safe refactoring make it an indispensable tool for writing clean and maintainable code. Additionally, its integration with version control systems and issue trackers streamlines the development workflow, making it a top choice for PHP developers.

Link: https://www.jetbrains.com/phpstorm/

2. Codeium

Codeium is an innovative AI-powered coding assistant that's changing the game for PHP developers. It integrates seamlessly into your development environment, offering real-time, context-aware code suggestions. This tool accelerates coding tasks, helps in maintaining best practices, and ensures your code is efficient and error-free. With its continuous learning from extensive code repositories, Codeium keeps your PHP coding modern and in line with industry standards. It's an invaluable asset for enhancing productivity and coding quality, making it a must-have in every PHP developer's toolkit.

Link: https://codeium.com/

3. DataGrip

DataGrip is a must-have for PHP developers who regularly interact with databases. This database IDE provides a smooth workflow for querying databases, writing and running SQL scripts, and navigating through data sets. Its intuitive interface and powerful features like smart code completion, on-the-fly analysis, and refactoring capabilities make managing databases easier and more efficient, thus enhancing overall productivity.

Link: https://www.jetbrains.com/datagrip/

4. PHPStan

PHPStan focuses on finding errors in your PHP code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be checked before you run the actual line.

Link: https://phpstan.org/

5. PHP Coding Standards Fixer (PHP CS Fixer)

PHP-CS-Fixer is a tool to automatically fix PHP coding standards issues. It is a must-have for maintaining a clean code base and adhering to coding standards like PSR-1, PSR-2, and PSR-12. It can fix many aspects of your code (like line formatting, unused use statements, etc.) and can be integrated into the development workflow to ensure that all code conforms to the defined standards.

Link: https://github.com/PHP-CS-Fixer/PHP-CS-Fixer

6. Docker

Docker has become an essential tool for modern PHP developers. It allows you to create, deploy, and run applications by using containers. This means you can package up an application with all of the parts it needs, such as libraries and other dependencies, and ship it all out as one package. It ensures that your application will run on any other Linux machine regardless of any customized settings that machine might have.

Link: https://www.docker.com/

7. Xdebug

XDebug is a powerful debugging and profiling tool for PHP. It offers a range of features like stack traces, variable display, and code coverage analysis, which are invaluable for debugging complex applications. It integrates with many IDEs and can be used to step through code, set breakpoints, and inspect values in real-time, making the debugging process much more efficient.

Link: https://xdebug.org/

8. PHPUnit

PHPUnit is the de-facto standard for unit testing in PHP. It provides a framework for writing and running tests, helping developers to find and fix bugs more quickly. PHPUnit encourages developers to write testable code and adopt a test-driven development approach, which leads to higher quality code and reduces the chances of bugs in production.

Link: https://phpunit.de/

9. PHP Deployer

Deployer offers PHP developers a streamlined, zero-downtime deployment process. It supports major PHP frameworks and allows for easy customization with PHP-based configuration. Ideal for secure and interruption-free deployments, Deployer is a go-to tool for automating and simplifying deployment tasks in PHP environments.

Link: https://deployer.org/

10. Spotify

While not a development tool in the traditional sense, Spotify can be an essential part of a developer's toolkit. Programming often requires deep concentration and focus, and many developers find that listening to music helps to create the right environment for coding. Whether it's tuning into a favorite playlist or exploring new music, Spotify can be a great companion for long coding sessions.

Link: https://spotify.com/

Why should you care about the “security.txt” file on your website?

Darko Todorić — Fri, 19 Jan 2024 08:15:05 +0000

Just as “robots.txt” helps manage how search engines interact with your website, “security.txt” is a critical part of web security. This small file, placed in your website’s root directory, is a straightforward way for security researchers to report vulnerabilities. It’s a signal that you take security seriously and are open to collaboration in addressing digital threats.

There are 10.5 trillion reasons to care about your cyber security

With a staggering prediction of $10.5 trillion in cybercrime damages by 2025, there are many reasons to prioritize cybersecurity. Among the essential parts to safeguard your online presence is the "security.txt" file. This seemingly small component can play a pivotal role in your defense strategy by guiding security researchers and ethical hackers to report vulnerabilities.

As we peer into the digital future, the protection of your assets and data has never been more critical. In this article, we'll explore the significance of cybersecurity, including the role of 'security.txt,' as we prepare for the ever-evolving landscape of cyber threats.

Benefits and importance of a "security.txt" file

Implementing a "security.txt" file on your website is more than a security measure, it's a commitment to transparency and collaboration in cybersecurity. This simple file offers several key advantages:

Streamlined communication: It provides a clear pathway for security researchers to report vulnerabilities, ensuring that potential issues are addressed effectively.
Trust building: Having a "security.txt" demonstrates to your users and clients that you prioritize security.
Proactive security management: It showcases your proactive approach to security, staying ahead of potential threats rather than reacting to them.

Serbian most visited websites and the missing "security.txt" file

After analyzing the top 50 most visited websites in Serbia, it's evident that none of these domestic sites have implemented the essential "security.txt" file. This absence highlights a significant security gap in Serbia's online presence, emphasizing the need for immediate attention to strengthening cybersecurity.

As I prepare to publish this article, I remain hopeful that this situation will change in the future, and that our largest websites will start implementing best security practices. As the importance of cybersecurity continues to grow, the Serbian online landscape must adapt and prioritize the safety of both website owners and users.

Adding "security.txt" to your website: easy steps to follow

For a comprehensive guide on how to create, customize, and optimize your "security.txt" file to meet your website's unique needs, I recommend visiting securitytxt.org. This resource offers detailed instructions, examples, and best practices to help you implement "security.txt" effectively.

"security.txt" files have been implemented by Google, Facebook, GitHub, the UK government, and many other organizations. In addition, the UK’s Ministry of Justice, the Cybersecurity and Infrastructure Security Agency (US), the French government, the Italian government, the Dutch government, and the Australian Cyber Security Centre endorse the use of "security.txt" files.

Conclusion

Implementing a "security.txt" file on your website is a simple yet effective way to enhance your website's security posture. It serves as a clear communication channel between ethical hackers, security researchers, and your organization, ultimately helping you identify and mitigate potential vulnerabilities before they can be exploited maliciously. However, it's important to remember that 'security.txt' is just one piece of the cybersecurity puzzle. By embracing this standard alongside other security measures, you not only demonstrate your commitment to cybersecurity but also foster a safer online environment for your users. So, don't wait any longer, start incorporating "security.txt" into your website today.