After looking at the code I managed to find what was causing my error, it was the WP-Super Cache plugin I’m using. The contact form plugin generates a unique token for each person who submits the form, presumably to stop CSRF attacks, which was being cached by WP-Super Cache which in turn caused the token to no longer be unique or valid.

Adding /contact/ to the excluded strings in the Advanced section of WP-Super Cache settings solved the problem for me. Hopefully this will help someone else who gets stuck by this error.

1. Install Sun Java – Aptana Studio doesn’t currently work with OpenJDK:

sudo add-apt-repository ppa:ferramroberto/java
sudo apt-get update
sudo apt-get install sun-java6-jdk sun-java6-plugin

2. Download & install xulrunner – Ubuntu 11.10 doesn’t include xulrunner so it must be downloaded.

If you are using Ubuntu 64 bit use:

wget -O xulrunner.deb http://launchpadlibrarian.net/70321329/xulrunner-1.9.2_1.9.2.17%2Bbuild3%2Bnobinonly-0ubuntu1_amd64.deb
sudo dpkg -i xulrunner.deb

If you are using Ubuntu 32 bit use:

wget -O xulrunner.deb http://launchpadlibrarian.net/70321863/xulrunner-1.9.2_1.9.2.17%2Bbuild3%2Bnobinonly-0ubuntu1_i386.deb
sudo dpkg -i xulrunner.deb

3. Download the Standalone version of Aptana Studio 3 from the Aptana Studio website.

4. Unzip it to /opt/aptana-studio-3:

sudo unzip [name of Aptana Studio ZIP file here].zip -d /opt
sudo mv /opt/Aptana\ Studio\ 3 /opt/aptana-studio-3

5. Install the menu item:

wget http://www.samclarke.com/wp-content/uploads/2011/11/AptanaStudio.desktop
sudo mv AptanaStudio.desktop /usr/share/applications/AptanaStudio.desktop

That’s it, Aptana Studio 3 should now be installed and ready to use. You may need to log out and back in it to show in the menu.

Adding Custom Command

SCEditor has a function called setCommand which updates a command if it already exists or adds it if it doesn’t. setCommand must be called before the editor is initialised otherwise the command may not show in the editors toolbar.

setCommand parameters:
Name (string): The name of the command, should be lower-case and not contain any spaces.
Exec (string or function): Should be a function which will be called when the command is clicked or a string which will be passed to the browsers built-in execCommand function.
Tooltip (string): The commands tooltip text
Keypress: Unless the command needs to handle keypress events, omit this parameter. For an example of keypress handler see the emoticon command.

Adding a command:

$.sceditor.setCommand(
	"test", /* commands name */
	function () {
		/* commands function, inserts the words "Hello World" */
		this.wysiwygEditorInsertHtml('<span>Hello World</span>');
 	},
	"Test commands tooltip" /* commands tooltip */
);

Add the command to the editors toolbar:

$("textarea").sceditor({
	toolbar: "test,bold,italic,underline"
});

Add an icon for the command:

<style type="text/css">
/* the commands button class is .sceditor-button-[name] so in
in this case it's .sceditor-button-test. div is the button so set
the background image of that to the icon for the command test */
.sceditor-button-test div { background: url('icons/test.png'); }
</style>

That’s it, the command test should now be added to the editor.

To update a command, simply do:

$.sceditor.setCommand(
	"test", /* name of the command to update */
	function () {
		this.wysiwygEditorInsertHtml('<span>Updated Command</span>');
	}
);

The above will make the command test insert the string “Updated Command” instead of “Hello World”. It will update the command for all previous and future instances of the editor so any editor with the command test will now insert the string “Updated Command”.

Adding a Custom BBCode

If you are using SCEditor as a BBCode editor and you want the custom command to support BBCode, you will need to add a BBCode to the BBCode parser.

Like sceditor, sceditorBBCodePlugin has a function called setCommand which will add a BBCode to the parser.

setCommand parameters:
Name (string): The name of the BBCode. e.g. for [b] it should be “b”.
Tags (object):  Should be an object with the tags which this BBCode applies to. The format should be tagname: { arttributename: [valid, attribute, values] }. Anything after the tagname: can be null to apply to all. e.g.

{
	tagname: { /* name of tag this BBCode applies to */
		"attribute": /* this can be null if the bbcode applies to all tags with the specified name or the name of an attribute the element must have */
			["attribute1", "attributevalue2"] /* this can be null or a value the attribute must have */
	}
}

Styles (object): Should be an object with all the style attributes which this BBCode applies to. The format should attribute: [valid, attribute, values]. The values array can be null if the BBCode applies to all elements with the specified style attribute. e.g.:

{
	"font-weight": /* CSS attribute name */
		["bold", "bolder"] /* array of valid values. This can be null if all values are valid. */
}

Format (string or function): String with “{0}” which will be replaced with the elements content or a function with the parameters (element, content) which returns a string. Element will be the HTML element being converted and content will be a string containing the elements converted contents.
Html (string or function): String with “{0}” which will be replaced with the content within the BBCode tags, or a function with the parameters (element, attrs, content) which returns a string. Element will be a string with the BBCodes name. Attrs will be an object with the BBCodes attributes, if the BBCode has a default attribute e.g. [bbcode=default attribute value] it will be set as attrs.defaultAttr. Content will be the BBCodes content parsed into HTML tags.

Adding a BBCode:

$.sceditorBBCodePlugin.setCommand(
	"b",
	null,
	{
		"font-weight": ["bold", "bolder"]
	},
	"[b]{0}[/b]",
	"<strong>{0}</strong>"
);

Another example:

$.sceditorBBCodePlugin.setCommand(
	"url",
	{
		a: {
			href: null
		}
	},
	null,
	function(element, content) {
		if(element.attr('href').substr(0, 7) == 'mailto:')
			return '[email=' + element.attr('href').substr(7) + ']' + content + '[/email]';
		return '[url=' + encodeURI(element.attr('href')) + ']' + content + '[/url]';
	},
	function(element, attrs, content) {
		if(typeof attrs.defaultAttr === "undefined")
			attrs.defaultAttr = content;
		return '<a href="' + attrs.defaultAttr + '">' + content + '</a>';
	}
);

If the BBCode already exists, it will be updated.

You can download the above SCEditor Custom Commands Example. If you have any problems just leave a comment or contact me here.

<link rel="stylesheet" href="minified/jquery.sceditor.min.css" type="text/css" media="all" />
<script type="text/javascript" src="minified/jquery.sceditor.min.js"></script>

You then need a HTML form with a textarea in it. No special attributes or classes are required, e.g.:

<form action="post">
	<label for="name">Name:</label>
	<input type="text" name="name" id="name" />

	<label for="message">Message:</label>
	<textarea name="message" id="message"></textarea>

	<input type="submit" value="Post message" />
</form>

Finally initialise SCEditor on the form textarea(s) you want with the following JS:

$(document).ready(function() {
	/* change #message to the correct selector for your textarea(s) */
	$("#message").sceditorBBCodePlugin({ /*change sceditorBBCodePlugin to sceditor if you want a HTML editor instead of a BBCode editor */

		/* insert any options here, see the readme for full list. (https://github.com/samclarke/SCEditor/blob/master/README.md) */

		/* this is the CSS file for styling of the WYSIWYG input (styling for the text being edited).*/
		style: "minified/jquery.sceditor.default.min.css"
	});
});

In the above example “#message” is selector used to select the textarea(s) to initialise the editor on. For more information on jQuery selectors see the jQuery docs.

That’s it, the textarea(s) should be replaced with the editor and when the form is sent, the BBCode (or HTML if you’re using sceditor for HTML editing) should be set as the value of the textarea the editor is replacing. The post data can then be treated the same way a normal textarea would be, i.e. for PHP to get the posted BBCode it should be: $_POST['message']

Using SBBCodeParser with SCEditor

To parse the BBCode produced by the editor simply run the $_POST['message'] variable through the SBBCodeParser and you’re done.

// include the BBCode parser
require_once('SBBCodeParser.php');

// create the BBCode parser
$parser = new SBBCodeParser_Document(true, false);

$parsed_message = $parser->parse($_POST['message']) // parse the posted string $_POST['message']
			->detect_links() // detect non-linked links and converted them into links
			->detect_emails() // detect non-linked e-mails and convert them into linked emails
			->detect_emoticons() // detect emoticons
			->get_html(); // get the HTML string

echo $parsed_message; // show the parsed HTML

You can download the above SCEditor example here.

From my tests CloudFlare appears to be much faster for the first few resources, but the last few resources seem take much longer to load (See Pingdom results for an example). Incapsula is slightly slower but unlike CloudFlare it’s speed is much more consistent with all the resources leading to very similar load times.

Loads.in results:

WebPageTest.org results:

Each test was run 3 times with both First View and Repeat View and the average taken.

Pingdom results:

Screenshot of one of the Pindom results:

Incapsula Results

CloudFlare Results

Site-Perf.com results:

FreeSiteStatus.com results:

Site24X7.com results:

Uptime results

The uptime checking services that only monitored in one or two locations or where the check interval was quite large ~30 minutes all reported 100% uptime. The two sites which had a shorter check interval reported outages with both Incapsula and CloudFlare.

FreeSiteStatus.com reported a 1 minute outage with both Incapsula and CloudFlare at different times. Site24X7.com reported 1 outage with Incapsula which lasted 5mins 14secs and 9 outages with CloudFlare totalling 58 minutes 16 seconds!

I was around during 2 of the 9 CloudFlare outages and I was able to verify that it was actually down and not a problem with the monitoring site. I also checked it wasn’t due to the test sites configuration by checking another site I use CloudFlare with as well as a couple of sites which I know use CloudFlare. All of which were down meaning it must of been a CloudFlare issue. Each outage didn’t seem to affect all locations or last too long.

Site24X7.com downtime reports are available here: CloudFlare’s Downtime Report (PDF) Incapsula’s Downtime Report (PDF)

Conclusion

The uptime problems with CloudFlare may have just be down to a bad week. I have however experienced some outages with CloudFlare before when I wasn’t monitoring them so I think these results may be reasonable accurate. The only way to be certain would be to monitor CloudFlare for at least a few months and see how well they do. None of the outages affected all locations though and seemed to affect none US locations more than US ones.

The performance of Incapsula and CloudFlare is about the same overall. However CloudFlare is very fast for the first few resources, so I think using CloudFlare with a separate CDN would give the best performance. If uptime is the most important factor, I would say Incapsula would be the better choice.

As always though the only way to really choose is to try both and see which is better for you.

Alternatively to install the XAMPP development files run the following commands:

wget -O xampp-dev-files.tar.gz http://www.apachefriends.org/download.php?xampp-linux-devel-1.7.7.tar.gz
sudo tar xvfz xampp-dev-files.tar.gz -C /opt

Note: Change 1.7.7 in the above wget command to the latest version listed on the XAMPP website linked above.

Installing APC

First download and extract the APC source files:

wget -O apc-latest.tar.gz http://pecl.php.net/get/APC
tar xvfz apc-latest.tar.gz
cd APC-*

Then run phpize in the APC source directory:

 /opt/lampp/bin/phpize

Run configure (64-bit users see below for 64-bit instructions):

./configure --with-php-config=/opt/lampp/bin/php-config

Compile and install:

make
sudo make install

Finally add “extension=apc.so” to the php.ini file and restart XAMPP:

sudo sh -c "echo 'extension=apc.so' >> /opt/lampp/etc/php.ini"
sudo /opt/lampp/lampp restart

Linux/Ubuntu x64

XAMPP is compiled as 32-bit so if you are using 64-bit Linux you will need to compile APC as 32-bit.

First install the 32-bit development libraries:

sudo apt-get install libc6-dev-i386

Next change the configure command in the above instructions to:

 ./configure --build=i686-pc-linux-gnu "CFLAGS=-m32" "CXXFLAGS=-m32" "LDFLAGS=-m32" --with-php-config=/opt/lampp/bin/php-config

Then just proceed with the instructions above.

Errors

When restarting XAMPP it ouputs a wrong ELF class error
See above 64-bit section. Before running the “make” command again make sure to run “make clean” to get rid of any previous 64-bit build.

I’ve been testing Incapsula to see how good it is and how it compares to CloudFlare (which I’m currently using). This review is of the new release of Incapsula which was released on the 21 September 2011.

Setup

Setup with Incapsula was straightforward and only took about 15 minutes from start to finish, most of which was waiting for Incapsula to notice the DNS changes. CloudFlare was slightly faster at noticing the DNS changes but not by much and as this is only done once it shouldn’t really matter.

The Incapsula control panel is easy to use and looks good with plenty of options available.

Performance

Incapsula, just like CloudFlare, acts like a CDN which should boost a websites performance.

From my tests the performance of Incapsula appears to be very similar to that of CloudFlare’s. The PingDom results were identical for both of them. WebPageTest.org gave slightly different results but again they were both very close.

WebPageTest.org results with Incapsula:

WebPageTest.org results with CloudFlare:

For “First Views” Incapsula did slightly worse compared to CloudFlare, however, with “Repeat Views” Incapsula a lot better. I think the reason CloudFlare was so slow with repeat views is because the repeat view happens straight after the first view and I suspect CloudFlare has some kind of connection limiting.

The only other tool to gave any real difference in speed was loads.in which CloudFlare did slightly better on overall but not by much.

Features

One feature which is very different between CloudFlare and Incapsula is the DNS. With CloudFlare you point your domain to their Name Servers and use their DNS server. With Incapsula you use your own DNS server and instead just point an A record to Incapsula’s servers. Which is better depends entirely on if you want to use your own DNS server of not.

Another good feature of Incapsula is that it has options to be notified when specific threats happen and what to do about them. The free account of Incapsula also has better stats which have more information and update faster than those of CloudFlare’s free account.

One of the best features of both Incapsula and CloudFlare has to be their ability at stopping spam. They both reduce spam down to much more manageable levels by blocking all those annoying spam bots.

Security

Incapsula, like CloudFlare, is a good added layer of security but it should not replace any of your existing security.

Both Incapsula and CloudFlare have the same problem. If the attacker gets the servers IP address, they can then attack the server directly which will completely bypass all the added security. You could setup the server to allow only Incapsula or CloudFlare IP addresses to connect to it, which should solve most of the problem. It isn’t really ideal though and as far as I’m aware it isn’t mentioned anywhere as something they recommend. Doing that also wouldn’t stop things like DDOS attacks.

Incapsula dose help reduce spam greatly and should stop basic script kiddies and robots from getting in. Determined attackers will, however, be able to bypass it by attacking the server directly and you will be back to whatever security you currently have on your server. It should help reduce the security logs though so you can concentrate on protecting yourself from real threats.

Price

It’s free! Provided your website fits into the small account (currently 25GB bandwidth a month) the price is great! If it doesn’t fit in the free account, it should hopefully generate enough revenue to cover the costs of the paid accounts.

Unlike CloudFlare, Incapsula doesn’t have a one size fits all price plan which would be good for medium sized websites, if the smallest paid account wasn’t so much more expensive then CloudFlare. Providing you don’t need any of the paid for features a small website should fit easily into the free account, so this shouldn’t be too much of a problem.

Overall

Setup: 9.95/10. It loses .05 for being a little slower.
Performance: 10/10
Features: 10.05/10. It gets .05 back for having so many features free.
Security: 7.5/10. Good but like CloudFlare it offers no protection if the attacker gets the servers IP address.
Price: 10/10. It’s free!
Overall: 9/10

Both CloudFlare and Incapsula have their pros and cons, and choosing one really depends on the website you want to protect and which one you prefer using.

If you have a medium to large sized website then CloudFlare, with it’s one size fits all pricing, is probably a better deal. Incapsula on the other hand gives better features with their free account like more security features, stats which update faster, and options to be notified when certain threats happen.

Overall though I think the only way to decide is to try them (they’re both free after all) and see which you prefer. You can sign up for Incapsula here and CouldFlare here.

SBBCodeParser is licensed under the LGPL and the source code is available on GitHub.

Example usage:

$parser = new SBBCodeParser_Document();
$parser->add_emoticons(array(
	':)' => 'http://localhost/Classes/SCEditor-punbb/punbb-1.3.5/img/smilies/smile.png',
	'=)' => 'http://localhost/Classes/SCEditor-punbb/punbb-1.3.5/img/smilies/smile.png'
));
echo $parser->parse('This should be [b]bold[/b] and this should be [i]italic[/i]')
	->detect_links()
	->detect_emails()
	->detect_emoticons()
	->get_html();

Example of adding a custom BBCode:

$bbcode = new SBBCodeParser_BBCode('youtube', function($content, $attribs)
{
    if(substr($content, 0, 23) === 'http://www.youtube.com/')
        $uri = $content;
    else
        $uri = 'http://www.youtube.com/v/' . $content;
    return '<iframe width="480" height="390" src="' . $uri . '" frameborder="0"></iframe>';
}, SBBCodeParser_BBCode::BLOCK_TAG, false, array(), array('text_node'), SBBCodeParser_BBCode::AUTO_DETECT_EXCLUDE_ALL);
$parser->add_bbcode($bbcode);

Currently included default BBCodes:

b
i
strong
em
u
s
blink
sub
sup
ins
del
right
left
center
justify
note
hidden
abbr
acronym
icq
skype
bing
google
wikipedia
youtube
vimeo
flash
paypal
pastebin
gist
twitter
tweets
googlemaps
pdf
scribd
spoiler
tt
pre
code
php
quote
font
size
color
list
ul
ol
li
*
table
th
h
tr
row
r
td
col
c
notag
nobbc
noparse
h1
h2
h3
h4
h5
h6
big
small
br
sp
hr
anchor
goto
jumpto
img
email
url

if(!function_exists('implode_r'))
{
	function implode_r($glue, array $arr)
	{
		$ret = '';
		foreach($arr as $piece)
		{
	    		if(is_array($piece))
	      			$ret .= $glue . implode_r($glue, $piece);
	    		else
	      			$ret .= $glue . $piece;
	  	}
	  	return $ret;
	}
}

Some emoticons that I made a long time ago. While not the best emoticons in the world they may be of use to someone. You can download them in a here.

These emoticons are licensed under the Creative Commons Attribution-ShareAlike 2.0 UK: England & Wales License.