Web Users Group http://blog.vcu.edu/wug/ en Copyright 2009 Tue, 27 Oct 2009 14:11:37 -0500 http://www.sixapart.com/movabletype/ http://blogs.law.harvard.edu/tech/rss Web Users Group - November 3 There will be a web users group meeting on Tuesday, November 3 from 10:30 am to noon in Cabell Library, room B-35. Here's what we are planning to discuss:

  1. Updated web standards & guidelines: We would like your feedback about the newly revised web standards & guidelines. Feel free to look them over ahead of time and bring any questions or concerns to the meeting on Tuesday.
  2. Web compliance reviews: We have gone through the current list of sites and checked them for compliance with the web standards & guidelines. You can check the compliance of your site(s) ahead of the meeting. We will be contacting individual webmasters whose sites have failed to comply over the next few weeks.
  3. Go.vcu.edu - Permanent and temporary keywords: We are adding in the ability to create temporary randomized, shortened URLs for use in microblogging and emails. Temporary URLs will look like this:

    http://go.vcu.edu/_1aY0

    You will continue to have the option of creating permanent keywords as well.
  4. Copyright and Creative Commons: We have revised the copyright guidelines to allow for Creative Commons for portions of your website. In addition, we will be creating a system to track who provides content under Creative Commons.
  5. CAS (Central Authentication Service) updates: Another change to the VCU web standards & guidelines - all sites and web applications with eID-based authentication will be required to use CAS for logins.
  6. Updated notifications from the change management system: You can sign up to be notified when specific systems will be affected by upcoming changes. In addition, you can sign up to be notified when new systems are added to the change management system.
  7. New VCU and TS websites: Over the summer, the main VCU website and the Technology Services website were updated. Have you seen them yet?

We look forward to seeing you at the Web Users Group meeting.

]]> http://blog.vcu.edu/wug/2009/10/web-users-group---november-3.html http://blog.vcu.edu/wug/2009/10/web-users-group---november-3.html Announcements Tue, 27 Oct 2009 14:11:37 -0500 WUG Update: Fall 2009 As the fall semester starts up, I wanted to let you know about some of the new tools we've made available over the summer:

  1. The new myVCU portal
  2. The new Technology Services website
  3. The Central Authentication Service
  4. Social availability

We will also have more details coming in the next week about our fall Web Users' Group meeting.

]]> http://blog.vcu.edu/wug/2009/08/wug-update-fall-2009.html http://blog.vcu.edu/wug/2009/08/wug-update-fall-2009.html News Fri, 28 Aug 2009 10:02:39 -0500 Meeting Minutes: March 6, 2009 We posted a video of the meeting in a previous post on this blog. Topics for this meeting included:

  • Movable Type Blog Upgrade
  • Events Calendar Feeds
  • Flash Streaming Server
  • Web Content Management System
  • Security & Vulnerability Scanning
  • Preview of the Liferay Portal & CAS
]]> http://blog.vcu.edu/wug/2009/03/meeting-minutes-mar-6-09.html http://blog.vcu.edu/wug/2009/03/meeting-minutes-mar-6-09.html Meeting Minutes Mon, 16 Mar 2009 08:55:45 -0500 Video: March 6, 2009

Here's a video from the Web User's Group on Friday, March 6.

This text will be replaced

I'll post a more detailed summary shortly.

]]> http://blog.vcu.edu/wug/2009/03/video-march-6-2009.html http://blog.vcu.edu/wug/2009/03/video-march-6-2009.html Meeting Minutes Mon, 16 Mar 2009 08:46:31 -0500 August Meeting Overview powerpoint from the meeting.

Web CMS

Since our last meeting, we have hired a full-time support administrator for the Web CMS, Tiffany France. She has been through several extensive RedDot training seminars and is working on creating the Commonwealth of Virginia Campaign website in RedDot as both a learning exercise and a way for the various departments that regularly update the site to more easily keep it up to date when CVC kicks off this year. She will also be working on implementing a newly redesigned Technology Services website within the CMS over the fall, which we are planning to introduce in the spring semester. As Tiffany goes through these two sites, she is learning a great deal about how the system works and will be prepared to help other departments implement their websites in the RedDot CMS.

New and Improved!

We've added or updated several tools to help departmental websites better cope with existing needs, including revamping our events calendar, fixing our mailto script, creating a new form processing application, and creating an application to view iTunes usage statistics for those who use iTunes U to host content.

Events Calendar

As of our meeting, the Events calendar now integrates a fully interactive version of the Academic Calendar for students and faculty to more easily plan their academic year. The interactive additions will link students directly to documentation and help on how to do things such as add/drop classes, etc. We're also working on cleaning up the data entry form for new calendar events. Previously, it was all done on a single, very long page. Now the process is spread across four pages to help decrease information overload. In addition, we've added a few more options:
  • Public/Private Events - Public events will show up on the university-wide calendar for anyone to view. Private events will not show up on the university-wide calendar, but will appear in the departmental calendar RSS feed.
  • RSS Keywords - RSS keywords allow you an extra level of filtering for your RSS calendar feed. Think of them as user-definable categories for your events.

Mailto script + Recaptcha

As you may have already known from previous emails on the WUG-L listserv, we updated the mailto script about a month ago. We added Recaptcha functionality to the script processor to filter out automatic spambots that have been sending through various web forms hosted at VCU. Read the updated documentation for the mailto script for more information.

myForms.vcu.edu

Ever wanted to save form results in a spreadsheet automatically in addition to receiving them in an email? We created myForms.vcu.edu to do just that. Simply log in to myForms.vcu.edu, add a new form, and point it to your form and confirmation pages. Then, it's just a matter of pointing your form action to the myforms script and adding a hidden form field. MyForms will automatically record data entered on your form into a CSV spreadsheet and email you as well. Read the full documentation on myForms or begin setting up your own forms at myForms.vcu.edu.

VCU iTunes Stats

Faculty and staff who post content to iTunes U have been wanting to know the statistics for their content practically since we set the service up. Because the servers are hosted by Apple, it was not as simple as recording the logs and parsing them with Urchin. Apple sends us weekly emails with spreadsheets attached, but the data recorded in the spreadsheet is too dense for the average staff person and contains private information on who logs in and what they access. Obviously we can't share private data with everyone, and iTunes publishers don't want to know minute details of server logs. So we created a statistics application to parse the spreadsheets and pull out the important data, easily viewable by content area down to the specific track. For a specific period of time, you can view:
  • The number of people who browse each section
  • The number of edits done to a specific section
  • The number of times an individual track is previewed (previews are 30 second sound bytes streamed from the iTunes server)
  • The number of times an individual track is downloaded
Using the slider at the top, you can limit the statistics to a certain weekly period. (You can't view down to specific dates simply because the data we receive from Apple is by weekly intervals.) You can click on linked sections to view more specific data about them, down to the content level within individual course albums.

Google Search Appliance

We have set up the Google search appliance we purchased earlier this year and are now running it for the VCU homepage and main search page. Using the Google search appliance is beneficial for several reasons: Better control of indexing
  • We can crawl new and updated sites as soon as they are available. Using the old Google-hosted solutions, reindexing a site could take up to a month if the site had just been indexed prior to the update.
  • We can crawl authenticated content securely. If you have password-protected content you would like to have indexed, let us know where it is (and either provide access or a generic crawling account) and we can add your private content to the index. Note: we don't crawl private content unless it is requested. Private content will show up in results if it is indexed, but will still require authentication before it can be viewed.
Better control of results
  • KeyMatch results let us highlight/recommend specific sites for specific search terms. This is a pretty obvious benefit, but try running a search for "registrar" to see an example.
  • We can remove duplicate results, old data, and unwanted listings from our own search engine quickly.
We will have documentation for how to set up your own website to use the new Google search appliance up shortly.

Project Updates

VCU Blog Upgrade

We just got the server space set up for the upgraded version of the VCU Blog. We will be installing, testing, and porting data over to the new version this fall. There is no current ETA on when the new version will be ready; if testing and porting data over goes well, it could be available by late September or early October. We will be using the latest version of Movable Type 4 Enterprise.

Central Authentication Service

This application has already been deployed for limited use. It is in use by several non-critical applications including the updated training site (for training managers) and test applications. We have tested it as an authentication mechanism on Jupiter to password-protect website directories. If you want to explore using the CAS for your site or web application, we are willing to work with you to set it up.sd

VCU Wiki

We have MediaWiki installed and set up if you absolutely must have a wiki for your school or department. However, on extended use, we feel that MediaWiki has several detractors that prevent it from being the best solution for the problem we are trying to solve. The interface for editing and creating new pages within MediaWiki is not intuitive; non-tech-savvy web users may balk and get frustrated using it. It is also not friendly for administrating groups of people - in order to set up group access for private wikis currently, several people in our department are involved in manually setting them up within LDAP. We would like to see a wiki that automatically allows wiki admins to set up their own group of people who have access. We are currently back to evaluating alternative wikis.

Urchin Upgrade

Google released recently Urchin 6. Sporting a new interface similar to earlier versions of Google Analytics, it should be a very useful upgrade in the tool belt of our many web users. We are in the process of acquiring it and will hopefully have more information to post about this soon.

PHP and MySQL

We have a production PHP server working in a limited mode. Currently we support several non-secure department websites on our PHP server. We are waiting on the announced production MySQL server before we are ready to fully support PHP in production; at this time, a target date has not been set. Because there is no MySQL server, departmental websites hosted on the PHP server must rely on locally hosted MySQL databases that are more difficult to back up properly. Currently every department hosting a site on the PHP server is responsible for backing up their own database. We also cannot support secured (https) domains on the PHP server at this time. If, understanding the current limitations of the system, you still wish to host a site on the PHP server, you may request an account.

Go.vcu.edu

Go.vcu.edu is live. It works, and is ready for your keywords. However, we are working on a new version that will be even better. We envision a version with a homepage that has updated lists of the most popular keywords as well as access to all of the available keywords. We envision keyword management for anyone who wants to suggest keywords (approval is still ultimately moderated to prevent spam or abuse) including keyword/link updating, keywords tied to a specific user so they can update them easily, and integration with the CAS for easier use.

Spring Follow-up

Jupiterold will be retired at the end of August 2008. The last known website running on Jupiterold was moved off on August 26th. Due to the security risk of running Frontpage extensions on an Apache-based web server, Technology Services will be eliminating support for Frontpage extensions on the people server (www.people.vcu.edu) and will be retiring the CVCO server at the end of December 2008. We also want to remind you of the Technology Services Change Management System. We built this application last year to track all of the technology changes we make in our department and help our users to keep abreast of what changes might affect them. You can view all upcoming changes at go.vcu.edu/changes; you may also want to consider signing up for listservs related to specific functions to notify you when services or applications will be unavailable. You can sign up for notification emails by clicking "Do you want to be notified?" at the bottom of the page above. Finally, we mentioned last time that the VCU home page would be redesigned this year. Due to VCU's 40th anniversary and a number of other projects, this project has been postponed until 2009. If you have any questions about any of the above information, please don't hesitate to contact the VCU Webmaster, Stephen Grainer.]]> http://blog.vcu.edu/wug/2008/08/august-meeting-overview.html http://blog.vcu.edu/wug/2008/08/august-meeting-overview.html Meeting Minutes Tue, 26 Aug 2008 13:47:49 -0500 February Meeting Overview the powerpoint along with a summary of everything we covered.

Movable Type 4.1

We will be upgrading to MovableType 4.1 during the spring semester. This new version of MovableType has a brand new interface and sports quite a few useful new features including the following:
  • Asset management system - manage uploaded files and images and see where they've been used
  • Inline text formatting - See a live version of your blog post as you type and format it. The entry editor now displays images and text formatting directly in the textarea.
  • Handier template editing - The template editor has built-in syntax highlighting and checking, suggests template tags based on the template you are currently editing, and has immediate access to help documentation on template tags.
See more details on the new features of MovableType.

MediaWiki

We are continuing to work on implementing departmental wikis. We have the system working with LDAP for authenticated and have set up a few test wikis. The system, when fully implemented, will allow for - view access options: public or eID-authenticated only - edit access options: any eID-authenticated address or only specific eID-authenticated groups (there will be no publicly accessible editable wikis) Once the wiki is fully tested and ready for production, we will have user documentation and a signup form to request a wiki for your department.

RedDot Web CMS

The RedDot system is fully operational. We are currently recruiting a full-time Web CMS support person who is knowledgeable in HTML, CSS, and Javascript, comfortable with web standards, willing to learn how the RedDot CMS works, and interested in training and support for the application at the university. The position is listed at http://www.vcujobs.com.

Apache Frontpage Extensions

We are eliminating support for Apache Frontpage extensions on all of our Apache servers this year. Support on JupiterOld (www3 and some virtual hosts) and the People server (www.people.vcu.edu) will be eliminated in June 2008. Support on the CVCO non-profit hosting server will be eliminated by December 2008. The following sites are still located on one of the above servers and may still use Apache frontpage extensions:
  • www.acorn.fap.vcu.edu
  • www.alumni.vcu.edu
  • www.anesthesiology.vcu.edu
  • www.cepi.vcu.edu
  • www.consumerinfo.vcu.edu
  • www.hr.vcu.edu
  • www.kernicterus.org
  • www.molecularimaging.vcu.edu
  • www.rri.vcu.edu
  • www.admin.nsc.vcu.edu
  • www.sanguinis.mic.vcu.edu
  • www.gastro.vcu.edu
  • www.matrixbio.vcu.edu
  • www.rac.vcu.edu
  • www.inane.vcu.edu
  • www.cicfs.vcu.edu
  • www.ohh.vcu.edu
  • www.has.vcu.edu
  • www.courses.vcu.edu
  • www3.vcu.edu/govrel
  • www3.vcu.edu/nonprofit
If your site is one of these, please contact us about updating or moving your site (if you no longer use Frontpage extensions, for example).

PHP and MySQL support

We are working on adding PHP support for websites hosted at VCU. Currently we have a PHP server running in test mode with several accounts set up for an initial trial. For the time being, it will host non-secure departmental sites. Before we make it production-ready, we are waiting for the University Computer Center to support a MySQL database server (they have announced plans to have one up and running within 6 weeks). Once the UCC has their MySQL database in production, we will open the box up for anyone to request an account.

Services: training.vcu.edu

We've recently redesigned the VCU training site to be easier to use and add in some of the more frequently requested features. We are still working on the site and would like your feedback. Originally developed in 2000, it has hosted 4793 training courses for 11 departments and has processed a total of 39,926 students. The system is built to handle registration, evaluation, and reporting for non-credit training courses offered by various departments at the university.

Services: VCU Central Authentication Service

We have set up a Central Authentication Service using JA-SIG CAS. The central authentication service (at login.vcu.edu) can be used to provide eID authentication for any web application that supports CAS and is an easy way to provide a single sign-on location for multiple applications at VCU. Future uses of the CAS include Apache-level support for creating eID-authenticated areas within departmental websites and using the CAS for external applications that will support it, such as WeaveOnline version 4. For more information about the CAS, see the product information site.

Services: Web Search

We are in the process of acquiring a Google Search Appliance. Several other Virginia schools have one including VMI, George Mason, and University of Virginia. Benefits of hosting our own Google Search Appliance include:
  • the ability to determine when sites are indexed (and reindexing as often as necessary),
  • the option to index authenticated sites, including Blackboard,
  • a consistent site-wide search engine for all VCU sites,
  • the ability to highlight and emphasize websites based on keyword searches, and
  • the ability to more fully customize the search templates to match the VCU look and feel.

Services: go.vcu.edu

Similar to the TinyURL service, go.vcu.edu is a URL redirection service for simplifying complex URLs and providing a persistent, easy-to-remember link to commonly used websites. Better than TinyURL, you can choose the keyword defined for your link. We are currently rebuilding the interface for the service to provide a list of the public keywords we've accumulated so far (along with any that you would like to add). In addition, we are building in the option of authenticated and private keywords so that you can protect URLs from accidental discovery. Authenticated keywords will be available on the public listing to anyone who authenticates with a VCU eID and password. Private keywords will never be listed on the public listing. Some example links:

Services: Planned System Changes

The new Technology Services Change Management System is going into full production soon. With it, we hope to track all of the changes that are planned to Technology Services' resources and systems throughout the university. You can track what changes are planned through the public interface and sign up to be notified about changes to specific systems via listservs. View the Planned System Changes public site.

VCU Home Page Redesign

You may now provide input to the upcoming redesign of the VCU website by participating in the survey at:http://www.homepagesurvey.vcu.edu and take the survey to help provide useful feedback. There is also an opportunity to participate further in a focus group. In addition to the main VCU site, we are looking at redesigning the Events Calendar interface and working with Creative Services to make the campus maps more useful.

Technology Services Website Redesign

Since last fall, we have held 6 focus groups (2 each for faculty, staff, and students) to help us define user needs and hone our content down to the most important and useful features. As a result of these focus groups, we've redesigned our homepage and are in the planning stages for a full site redesign. We welcome any feedback you can provide on both the current website and the newly redesigned homepage to help us improve our presence on the web. Visit our site at http://www.ts.vcu.edu.]]> http://blog.vcu.edu/wug/2008/02/february-meeting-overview-1.html http://blog.vcu.edu/wug/2008/02/february-meeting-overview-1.html Meeting Minutes Tue, 12 Feb 2008 15:18:45 -0500 October Meeting Overview iTunes University iTunes University is now live and ready for your content. The website is http://itunes.vcu.edu. You may request space for content at http://itunes.vcu.edu/addcontent.shtml. Once your space has been allotted, you can login directly using the Full Access link on the itunes.vcu.edu homepage to begin uploading your content. There is also an iTunes U weblog to discuss how to best use iTunes U. The way iTunes is set up currently, there are private areas and public areas - private areas are accessible only with a VCU eID and password; public areas can be accessed by anyone with iTunes. At this point, there is no way to restrict the private area further, i.e. anyone with a VCU eID and password can access the private areas of iTunes. We are hoping to add course-level restriction by spring 2008 so that only courses for which a student is registered show up under their Course area.

Web Content Management System

RedDot, the CMS we purchased in the spring, has finally (after a number of issues) been installed. It is ready for people to begin using, and the first official training will be October 8-12 on campus for those departments that have already chipped in for the funding of the RedDot system. Those departments include:
  • School of the Arts
  • Creative Services
  • School of Humanities and Sciences
  • School of Medicine
  • Student Affairs
  • VCU Libraries
  • Technology Services
We are planning to set up a second week-long training later in the fall for the next group of subscribers.

New People Search

There will be a new people search engine implemented this fall. It will be moved from CCSO to an openLDAP implementation accessible at phonebook.vcu.edu. Users of IMAP email clients such as Thunderbird will be able to set up LDAP Directory Access to automatically find email address by typing names (or partial names) into the To: field of the email composition window. Some of the advantages of the new people search include:
  • Automatic wild cards - searching for "ro sm" would return Robert Smith, Roger Smithson, etc.
  • Reverse searching by eID for name retrieval
  • One less server/system to maintain
Some disadvantages of the new system will be:
  • No searching by nickname
  • Loss of some extra fields such as personal homepage, mail server, department webpage
  • Differences in the new search may be confusing at first for some users
  • Searching for "pending pat" won't find Pat Pending (however, searching for "pending, pat" will, because of the comma delimiter)
To begin testing the new people search engine, use the following URL:
http://search.vcu.edu/cgi-bin/people
Please take some time to test the new search engine and send us feedback.

Upcoming projects

Upcoming projects include (with projected release time):
  • Video Server (October 2007)
  • Calendar XML Feed support for ongoing events(October 2007)
  • PHP support (October/November 2007) - this is for PHP development, database queries will have to be set up through MS SQL for PHP database uses
  • MediaWiki (Fall 2007) - We are trying to nail down group/organization support so that different groups can have edit access for their portion of the wiki only.
  • Apache FrontPage Extensions Elimination (Summer 2008) - we will be disabling FrontPage extensions on all Apache servers by next summer, this includes the people, www3, CVCO servers
]]> http://blog.vcu.edu/wug/2007/09/october-meeting-overview.html http://blog.vcu.edu/wug/2007/09/october-meeting-overview.html Meeting Minutes Thu, 27 Sep 2007 08:05:57 -0500 VCU purchases the Reddot Content Management System After a rather lengthy process, VCU has purchased the Reddot Content Management System. Over the next month or so, the system will be installed. By mid-summer we expect to allow areas that have contributed toward the purchase of the system to begin to access the Web CMS. Later this summer and definitely in the fall, Web Services will sponsor a number of sessions to demonstrate the Reddot CMS and show how it can improve the management of your web site. http://blog.vcu.edu/wug/2007/05/vcu-purchases-the-reddot-conte.html http://blog.vcu.edu/wug/2007/05/vcu-purchases-the-reddot-conte.html Thu, 03 May 2007 14:12:32 -0500 February Meeting Overview iTunes University iTunes should be in place for public use by the Summer of 2007. There will be two types of content (specified at the folder level): 1. Content available to the public 2. Content available only to the VCU Community (requires login) We are currently in a pilot program for Faculty and Staff who would like to have a presence on the initial rollout. If you have course or other University related content available to upload and are interested in using iTunes U, please contact Jim Yucha at jyucha@vcu.edu. See also: VCU iTunes U FAQ Web Content Management System The initial budget request was denied, but departments have given money so that we should be able to purchase the system. This means that Schools must contribute to funding the CMS in order to use it. Tentative Timeline: Spring 2007 – Acquire system Summer 2007 – First Site created (pilot) Summer/Fall 2007 – Available for use See also: What is a Content Management System? PHP Support PHP is targeted for availability for testing - Summer 2007. Initially, only non-secure pages will be supported. Also the only database available will be MS SQL; mySQL will not be supported. Open Source PHP application will not be permitted on this server. If you feel that a specific application is necessary for your department please contact Jim Yucha at jyucha@vcu.edu to see if something similar is available centrally.]]> http://blog.vcu.edu/wug/2007/03/february-meeting-overview.html http://blog.vcu.edu/wug/2007/03/february-meeting-overview.html Meeting Minutes Thu, 01 Mar 2007 12:28:18 -0500 New Web Servers and Frontpage discontinuing their support of Frontpage. It is being replaced with Microsoft Office SharePoint Designer 2007 and Microsoft Expression Web Designer. Feel free to email me with any questions.]]> http://blog.vcu.edu/wug/2006/10/new-web-servers-and-frontpage.html http://blog.vcu.edu/wug/2006/10/new-web-servers-and-frontpage.html Meeting Minutes Wed, 04 Oct 2006 15:25:58 -0500 Using SFTP http://www.ts.vcu.edu/faq/ssh/ssh.html If you use Windows and want a stand alone SFTP client then you can use SSH File Transfer Client or Filezilla. Download and Instructions for SSH File Transfer Client: http://www.ts.vcu.edu/faq/ssh/win_doc.html For the Filezilla FTP Client be sure to set the "Servertype" as STFP. Download and instructions for Filezilla can be found here: http://www.ts.vcu.edu/faq/ftp/howto.html If you are on a Mac, then you can use Fetch 5. Be sure to generate your educational activation number from the page below. Then choose SFTP from the "Connect Using" menu. Download from here: http://www.ts.vcu.edu/faq/ftp/fetch_ftp.html Additional configuration information: For virtual hosts (www.mysite.vcu.edu): host name: www.mysite.vcu.edu path: /www/www.mysite.vcu.edu/html/ For sub directory sites (www.vcu.edu/mysite/): host name: www.vcu.edu path: /www/www.vcu.edu/html/mysite/]]> http://blog.vcu.edu/wug/2006/08/using-sftp.html http://blog.vcu.edu/wug/2006/08/using-sftp.html Announcements Wed, 16 Aug 2006 14:59:12 -0500 June 7th Meeting Notes Listen Now!]]> http://blog.vcu.edu/wug/2006/07/june-7th-meeting-notes.html http://blog.vcu.edu/wug/2006/07/june-7th-meeting-notes.html Meeting Minutes Thu, 06 Jul 2006 08:59:34 -0500 Web 2.0 meets the enterprise Web 2.0 meets the enterprise]]> http://blog.vcu.edu/wug/2006/04/web-20-meets-the-enterprise.html http://blog.vcu.edu/wug/2006/04/web-20-meets-the-enterprise.html News Fri, 28 Apr 2006 10:48:56 -0500 Web App Hack Incidents Are Up As Businesses Take Cover Web site hacks are on the rise and pose a greater threat than the broad-based network attacks that have been giving IT departments fits. Whereas attacks against networks disrupt Internet service and negatively impact companies trying to do business over the Web or private networks, attacks against Web applications threaten to steal critical customer, employee, and business partner information stored in applications and databases linked to the Web.

Generally, "people who build Web applications are optimistic people," says Gary McGraw, chief technology officer with Cigital Inc., a maker of risk management software. "They don't consider that someone would try to break their programs."

Web App Hack Incidents Are Up As Businesses Take Cover

Incident by WASC threat classification

Class Count
Cross-site Scripting 32
Unknown 23
Insufficient Authorization 15
Credential/Session Prediction 14
Insufficient Authentication 11
SQL Injection 11

View complete list by the Web Application Security Consortium

Web Application Security Resources

The Cross Site Scripting FAQ
Scripts for testing your site to see if it is vulnerable to XSS
SQL Injection Walkthrough
SQL Injection Attacks by Example

]]> http://blog.vcu.edu/wug/2006/04/web-app-hack-incidents-are-up.html http://blog.vcu.edu/wug/2006/04/web-app-hack-incidents-are-up.html Security Fri, 14 Apr 2006 09:51:09 -0500 30 AJAX Tutorials Round-up of 30 AJAX Tutorials]]> http://blog.vcu.edu/wug/2006/03/30-ajax-tutorials.html http://blog.vcu.edu/wug/2006/03/30-ajax-tutorials.html Tue, 28 Mar 2006 12:30:44 -0500