Posts

Showing posts with the label security

How should I improve my funnel and which colors are best for conversion?

With reference to the following articles on conversionxl: http://conversionxl.com/which-color-converts-the-best/ http://conversionxl.com/ux-hacks-to-increase-revenue/  While it is not necessarily about whether Red is best or Green or Orange, it highlights that Call to action is more important than a colour A color is more important than having none From experience, I'd have to say if you can split test different colors separately to a different design then you will be able to choose colors you like ! With the improving of a checkout purchase funnel, it is fairly standard fair: Save Orders  Save Customers (though don't "make them" create an account - https://www.youtube.com/watch?v=3Sk7cOqB9Dk Save Credit Cards (be aware of your PCI requirements) Don't have cryptic error messages (break it down, is it wrong, invalid, unkown) Layout the screen in an appropriate manner for different devices (responsive is clear the best design pattern here).  Ma...

URLScan and UseFastPathReject fix to stop disclosure of sensitive information

There is a flag in URLScan 3 to stop URL Scan redirecting dodgy requests and instead sending back a 404 response quickly, this is "UseFastPathReject=1" (by default it is 0) The issue outlined: http://www.securityfocus.com/bid/7767/info The fix explained: http://www.securityfocus.com/archive/1/323389

Organizing SQL Procedures and Functions like Oracle Packages (ish)

Oracle's package syntax is a nice way of packaging sets of functions/ procedures etc, however when a package is updated, that brings everything down. If you have a cached JDBC connection, that causes even more problems as you have to recycle the connections. On SQL, there is no package, and thus you could end up with hundreds if not thousands of little procedures and functions. A good trick is to use schemas to organize them: this example will return 2 queries; could also use input output parameters create schema [myutils]; create procedure [ myutils ].[aFewQueries] @someid int output ,@someid2 int output as begin --  set nocount on; added to prevent extra result sets from interfering with SELECT statements. set nocount on; -- Insert statements for procedure here select * from table1 where id = @someid; select * from  table2_other where  id = @someid ;  select  @someid2  = 5; end go In ColdFusion you could neatly call this ...