The Wahyudiharto's Blog

Last night, I was invited by Telkom to the Dwiki Darmawan concert titled "Menembus Batas" held at Plenary Hall JCC Senayan. I was there because I was registered as a flexi user for some couple months. Actually, I was 1 from 62 who won the lucky draw of the months. So, the ticket it self which costs Rp. 400.000 was totally free for me.



During waiting the shows, I had been gathered with others flexters (flexter mean telkom flexi user community). They came from several cities outer of jakarta, just exactly the way likes me. Majority flexter age averages at teenagers. Some of them had been works on some companies, while others stills act as an university student.



The concerts begun at 08.00 pm and recorded live at SCTV. Overall it quality was excellent such the audios, musics, backstage lightings and also the concert arrangement directly conducted by Dwiki Darmawan him self. However, it was finished at 10.00 pm after some local famous artists shown them voices and all the audiences was satisfied.

After 2 days seriously getting deeper with the development of Indonesian Taxes official web design contest (pajak.go.id) which took on my saturday and sunday weekend, it progress seems to be significantly rises.

The hardests point ~ the creating of the template pages ~ has passed. All I have to do next is just put the raw data into the database and make some adjustments. The raw data it self contains of 180 pages! With all resources laid on a microsoft word document prepared before after capturing real data from the real site. Anyway, I thought that the overall progress has reached about 45%.

The funniest things about the contest was that the participants ought to send the creation results in cd's. It is totally weird since the scripts and database's will not run on a media except the web server hosting. In order to do so, I'm planning about to still upload both scripts and databases to visualized the real condition result, while cd version which contains static pages have to be completed to meet they needs. It is similar to company profile cd and hoped that they can also spread the cd to some related officials. It is an added value and become promotion media for me, because my blogs link placed on each pages.

However, my primary target is not the prizes. My objective mission is my publicity. Known by publics is priceless and become a great investation for my future career, moreover if I win the competition too.

After a full day blogless - temporary got rest since back to jakarta - yesterday I goes worked. There was no special jobs to do, just tried to collected some informations related to my next incoming project named SIAGA (Sistem Informasi Awas GempA) which will planed in Sibolga, north sumatera.

The progress about it sounds to be good enough since I was ordered to made a soft copy of presentation with power point and sent to my contact at sibolga. And he will soon describe it to the local government parliaments. If the project is goal, it will be my next bussiest month.

Actually, there is a lots of works will have to do beside preparing the SIAGA. I have to finished my pajak.go.id web design competition before September 30th next month and also have to completed the GPS (Global Positioning Satellite) project I got from someone when I visited yogyakarta in next October.

The rest of it just finalize, maintenance and socialization my official duties such the corporate website, e-learning, the holding company PT.ERA website and LINUX projects. My next big incoming official project is re-writing the corporate front-end applications. The top management had decided this way since the old one could not supported real time data online transaction methode.

My future plan to do so is using Borland Kylix compiler. You know why? because LINUX had been set up in a great number computers in branches. I will not recommended to build it with web based technology since just only me who have the skills and considering about short of existing programmers.

However, recently the vice president ordered me to build an SMS services for customers. Ahrgghhh... This kinds of situation makes my head spinning. What is my first priority?

Today become my last day in yogyakarta. After couple days getting around the city, looking & sometime capturing for the cracked or fell down building with my kodak digital camera. It might be seriously horrible situation when the deadly earthquake was happened. Anyway, i'll leave the city at the evening.

However, a full list of goods from my wife had been completed to seek. It would be a gift for my neighbour which resides next to me.

Nevertheless, i had prepared for the noon meeting with the UGM PPTIK staffs due to my missions benchmarking the e-learning projects i developed.

Some technical question related to it has been listed. Such as:

1. What kind of technology used behind the development? What programming languages and backend they used? And also, including it version for each question. Why they choose so?

2. Anything relevance with the implementation, likes what they used for the hosting? The web server and the server it self? How they manage users? What about the user training?

3. Some security issues to keep out any intruders or hacker attacks the server and the application. How they realized that?

4. Topics about statistic. Some of it might be related to online page hits. Are they use ping publications?

5. Any suggests to improve the application functionality? What kind of maintenance they did periodicly?

I think the question above is enough to representation the real condition will be. Hope to be answered with the programmers and the technician too. See ya at Jakarta.

3. Watch carefully for your interactive user inputs. Make some characters limitation to prevent the XSS (Cross Site Scripting) vulnerability. Do not store HTML code into the database, make for the string replacement first.

4. Copy the default page for each folders to prevent user explore sessions ability. It is more easier than you have to set up the web server configuration files for the same result.

5. Don't store user password in plain string data type. I suggested that you have to encrypted the password to make more difficult the others server administrators to breake the site members area, especially for the webmaster. It's look good enough if you using authentication of combination with md5 hashing or custom encrypt decrypt class.

6. Make some line feeds before first HTML tag. For example, place the header <HTML> tag after 200 lines from the source code. It's so tricky one since the plain HTML will show an empty blank file after executing view source from browser which actually it places under lines 200.

Okay, I think it is enough for the secrets i've told you. There's more secrets indeed, but i've been planned this for two pages. If you want more tricks to secure your pages, just open communications with me.

This is my 1st day at Yogyakarta couples months after it hitted an earthquake and merapi erruptions in the same time. This city had grown me up for about 6 years and significantly resulted lots experiences in the field of information technology especially for software development.

In my 1st years college on 1998, I begun to self-learned HTML programming since there was no chart of college lessons listed. My 1st online homepage was hosted at geocities free hosting.

Though it was not my only core skills, a progress due to web based applications demands had increased after I had been get deeper touched with PHP scripting, recently until now.

I always make the web application security issues as 1st priority to do jobs. After being developed severals web applications, I able to resume some points to make it secured, they are:

1. Always work with register global set to off. Although lots of settings you can configure such turning off the pre-compiled messages, warning, errors and notice codes, etc, this might be a good step to securing the variables used.

2. Minimize the javascript scripting used, since it's client browser processing. More small scripts used, more secure the application are.

3. ...

To be continued tomorrow posts.

Tonight, i'll begin my journey to yogyakarta to have meetings with the UGM IT staffs (a.k.a PPTIK) which will hold on next tuesday. It's about an official duty with missions benchmarking processes of my company e-learning projects compared to the UGM e-learning application known as ELISA (don't know exactly what is ELISA stands for).

It is one of my last several official duty with different missions. Last trips before, I was running jobs for migrating LINUX OS on several branches at jakarta. It was 3 months ago, and it will be re-schedule again to be continued nearly next month.

Anyway, it is my always priceless journey. All of my necessarities would be guaranteed by the company. It is the time to gain more profit. You know what I mean? I don't have to mention it,okay?

Well, it will be my next blog posts when I reach yogyakarta - directly write & send from my PDA iPAQ 6365 using Simpati Telkomsel GPRS likes I always did. Just for notice, it took about 9kb to post a note. So it's similar to 9kb x Rp. 30 = Rp. 270. However, more cheaper than I have to use public internet café. See ya.

Do you know something? I really likes movies, especially based on true story war movies. I used to collected the original VCDs since I was colleges.

Some of my collections is related to 2nd world war such as "Saving Private Ryan", "Pearl Harbour", "U-571", "Enemy at the Gates", "Schinder's Lists", "The Rising" and also 5 series of "Band of Brothers". The rest of it just some stories about what battles had happened in the last decades likes "Black Hack Down", "Behind Enemy Lines" and "Rules of Engagement". A typically ancient battles story I had also is "Brave Heart" and "Joan of Arc's". Two thumbs up for those movies because they had made a fine quality one and also bring up one big question, "why do we fight?". It's kind a human morality messages mixed with it. Nevertheless, a historical education it provided sometimes may still need to us.

I missed very well since there was no new war movies produced in the last years. I hope there will be a new good film which takes story about the truth of gulf war or just a kind of the reconciliation missions of east timor or libanon.

Last night, I was called by my friend at sibolga. He is an army officer with his status as leutenant colonel (it would be better if I am not saying his name). He asked for the projects he had, the anti-tsunami & earthquake system explicitly for north sumatra area. It planned kind as publics prohibitor alarm system triggered by BMG tsunami prediction report.

It was a big plan project for me since I am not directly related to electronic-preuneur programmer (but I used to researched an SMS-gateway (co-work with UGM) as a way to controlling the electronic equipment succesfully, such turning on or off house electricity materials. However, I accepted the offers and try to make a pre-proposal.

I'll post my next articles contains ideas including the techniques to make it possible. Just, wish me luck!

This is not really an article. I had to post this because I missed contact with my ex-graduates college friends from Teknik Informatika class 1998 of Institut Sains & Teknologi AKPRIND Yogyakarta, especially whom named likes: Ariadi Nugroho, Rehmon Effendi, Intan Puji Laksono, Rohadi Makmur, Naga or someone else whom had joined the HumanSoft.

Hopefully that this note will be easily searched by my friends listed above and really appreciated that all of you guys will send me a message to informed me that you are still alive :).

Your responds are widely open to my incoming mailbox at koko@programmer.net or koko@pegadaian.co.id. If you just to busy to mail me, just send me a SMS to my old cellphone number at 0812-294-3598.

If you are looking for PMP (Portable Media Player), maybe you have to read my article below.

PMP is trend gadget for now on. It can play various of multimedia formats such audio,video and stills images. It can also functioned as mobile storage too. With it's large storage capacity, you may watch couple dvd quality movies, or just hear thousand of mp3 files until you ear nearly deaf :).

Archos is one of the branded name produced this gadget. A lot of series it mades, just likes i used to: the Gmini 500 series.



Some formats it can play such mp3, wav, wmv and avi video files from divx. It's capacity is 30GB, using 2.5" small size notebook hard drives. More room you can save on this gadget and totally replaces a small usb flash disk units.

It's 4" wide-screens give you more comfortable to watch the video, even the size is not using a standard resolution when you enjoyed from the LCD. It could shows a cropped pictures, but it would not happen if you watch from TV with the available cables connected to.

Some big lacks I have to tell you is: It doesn't support natively VCD DAT (MPEG) files. You have to convert it with an application included. It will damn screwed you since you have to spend large enough money to buy this gadget at a cost of Rp. 5.500.000 (US$ 590).
(read this short comments from me, nominated by idiottoys.com).

Maybe you should considered another names like ipod video or somethings before having a plan to buy a PMP gadgets.

This is an article about what is lying behind a finger print technology. I'd been made these standard engines since succeded built an attendance enrollment application which stills used until now on University of Gadjah Mada (Civil Engineer Magister Faculty) and Badan Kepegawaian Negara at Yogyakarta district.

The application it self had been built from Borland Delphi 6.0 (BD6) with MySQL as the back-end databases. Even there is no limitation of programming language used, you can write the codes with any compiler you likes. I decided to uses BD6 because I familiar with the IDE (Integrated Developing Environment) since several years developing some applications.

Finger print are not updated technology. It has been used by many developers to create applications such an attended enrollment. Even the FBI built it in order to recorded all the US criminal fingers (click here to read the news).

There are some specifications methode to recognize the prints. Teoritically, i just remember one of them, such bifurfication. It is an angle points representing the print curves. Others documentation related to it you can just find with google.

Okay, getting deeper now. Let's talk about the fingerprint scanner. There is a lot of products available but you still can't buy it from ordinary computer markets. It produced by known brand international names, likes Biometrika. The most famoust product in the world until now is made by DigitalPersona. One of the products from it i used merely known as U.Are.U series using USB port to connected to the computer. I bought it at Computa Yogyakarta. The sales seriously said that the gadget was typically black market since there was no original drivers included in the packages box.

Right below is totally simple code including the globally work flow to develop an attendance system using BD6.

1. Assumed that the U.Are.U drivers had been well set up.

2. Import ActiveX Library from BD6 sub menu Project :: Import Type Library

3. On the available lists, find library entry started with strings “Digital Persona...” (or you can add manually via Add button and select where the driver directory dlls exist). Select them sequentially until all the dlls installed. In the Package Window, press Compile button and confirmed with OK. The components which well installed will shown in BD6 Standard tab.

4. Continue to the form development. You have to create forms which provide 2 modules. A finger registration (using “FPRegisterTemplateX1” component) and verification forms (using “FPVerifyTemplateX1” component).

Still don't get it, why I can feeling ghosts existence. It might be one of my natural talent since I used to saw a ghost for the first time when my age was 6 years. In those time, I just saw a girl standing around on the bed with white clothes even there was no one people at home because I had been leaved for a while. I was confused but not frightened at all.

Every single house I visited, clearly to me shadows in some places which have weird temperatures. Some nights at my sister house at Bantul, Yogyakarta. I was in the middle of sleeps when suddenly a long hairy girl with white clothes again sits just right on my foots. Another night at my leased-out room when I was had college, there was someone hanging his head at the window. Just representing a suicide visual.

Precisely, some of them having bad behaviour, but some of the rest just not disturbing likes a shadows of old man which exist at my current leased-out house.

Around my office at Kramat Raya, there's huge of ghosts. Every floors standed by 5-6 things. Even at my working room at the basement, they just walking arounds don't know where they headed to go.

I saw it very clearly if the night has come. For example: every monday evening is my tennis schedule started at 07.00 pm. I used to go home at 09.00 pm and should passing by a large multi-purposes building. I can't avoid weird visual activities every exceed the roads right behind it.

Anyway, you also might seen ghost too every days. Just tune to adzan magrib show at TransTV, it will be there when the picture shows Gambir train station. Watch it carefully, the whity girl suddenly appear behind the pottery at the right side of your tv monitor.

Today, i've been invited to a married session. So, I though that we would experienced some delicious extra-ordinary lunch. As my wife asked question earlier in the morning about what kind of food would be cooked for today, "pa, mo masak apa hari ini?", I replied with "gak usah masak dulu, kan tar siang ada kondangan".

After waiting for couple hours (emptying my stomach would takes some times after filled up with breakfast), we goes to the invitation. At the same time I congrated the both brides, from far away I saw a kind of my favorit menu. "Hmm... Nasi kuning... Kayaknya, ma". I though that it was my lucky day to had lunch with the menu.

After gone through the food with a full pack plate loaded with it, I started to tasted it. How confused I am since it tasted likes "ketan kuning". Ahrgg, it was succeded tricked me out. Got to ended after couple scoops up. Finally, back to house with empty hungry stomach and continued to cooked a piece of noodle in the kitchen. Ha..ha.. What a fate!

Recently, the company has succeded running LINUX OS for daily operational at the branch offices computers spread all over the indonesia, after using Windows as illegally for more than 10 years. It had been runned for 4 months since it first installation in some main branches at Jakarta.

Althought there was a lot of problems we had faced, the spirits of open source system stills shock up some big majority peoples whom likes Windows as the computer OS. Anyway, there was a final decision made by directors not to using Microsoft products illegally. So, whether likes or not, there was a command had to do.

Me, as the only staff which have some knowledges about LINUX, had tried to made a serious researches and this is the mini-journey how to make it possible to run well. (P=Problem ; S=Solve)

P=What distro should I use?
S=It depends on what conditions do you have. The company has a peer-to-peer application built from Clipper/FoxPro 2.6 with DBase III database which overall system was just based on DOS. It was runned in a LAN (more than 3 computers) with having ability to printing locally or network and sharing for the database access file which stored in a choosen high-specification computer called server. I thought that what I need was a big well-known, lots of support, easy installation and hardware friendly distros which have a DOS emulator with high-compatibility to these such application.
Below here is a distro lists I had been checked:
a. SuSE 9.2
(hard way installation, hardware friendly, but not match with the newest dosemu)
b. Debian GNU/LINUX
(easy+slow install, hardware friendly for some computer and not match with dosemu)
c. Fedora Core 4
(easy+quick install, not plug and play for some configuration, dosemu running well and quite faster)
d. RedHat 9.2
(easy install, hardware friendly, but unable to display dosemu with fullscreen mode, dosemu speed still under FC4)
e. Mandrake 10
(easy-cake install, hardware friendly, but running dosemu 300% slowest than FC4)

After few days hard researches, formerly we had decide to had deep analyze especially for FC4. She shows good result to runing our DOS application, even primary hardware has failed to detected on some computers.

P=What about the file sharing?
S=As the result of my reviews, FC4 got running well at the minimum recommended specification of Pentium III 600 with 128MB RAM. In fact, there was many computers at the branches is below the specificaton. So, in order to support the daily routine processes, the computers under its recommended configuration will stills using the Windows. The file sharing it self has to configured using NFS (Network File Server - LINUX to LINUX file sharing) and Samba (LINUX to Windows file sharing).

P=Next problem is printing locally and network, how's that?
S=LINUX has capability printing locally and network under it's CUPS daemon configuration. So, there was no big deal about printing. The real big problem came since the application it self was based on DOS. We all know that pure DOS system does not support network transaction including printing operation as well as Windows did. Technically, I request some support from dosemu developer (you can read it completely here). After waiting for couple days, finally there was a new customized version of dosemu tarball source came next to me. All I had to do was following the readme included to support the fully networked and locally printing. And it was did it, even there was a bug when queue printing is below of 4 operations.

Overall system has a great progress until now and I stills making some improvements to minimized the bugs. Yeah, congrat to me please...

Due to known bugs around encrypt and decrypt sub-modules which can take effects malfunctioning in some users authentication, the new codes were updated on friday, August 4th 2006. Technically, the replacements took some randoming alphabet from the input parameters. So, i'm not using PHP standard encode and decode function anymore.

The works takes about 3 hours and finished at 07.00 pm by my self. The website phpclasses.org became my first reference. There was a lot of archives had to checked and also compared to my code in order to work properly and more efficient. At the end, I was the only one whom get out from the office lately. No big deal for me than I had to finished it with extra work in my holyday at saturday.

On my trip to home, still thinking about the NS (Name Server). The code was hosted in http://id.masterwebnet.com, but the NS stills tied by Lint*sArth* anyway and they just only re-directed it with the www alias. The worsted is the domainname string was useless if the browser address came with it. So, there is no hope to retrieve the site with address: http://pusdiklat.pegadaian.co.id, even thus the sub domain was setted before on the hosting control panel. The only way to make it show is just point the browser to the single address: http://www.pegadaian.co.id/pusdiklat. i'm so messed up with this since the network staff did not seems like to support 100% about the problem. It was different with my before projects.

While the e-learning was show up, next incoming wednesday is the meeting days with official division discuss about the corporate site. The major things is that the code built with global variable set to on. It has to be next great re-make because I had my local web server set to off since the development of PUSDIKLAT e-learning and EPS. I had to setted it off because of some security issues. Well, 2 days sounds worth enough to re-condition the code work more properly. This is my fault and I confessed it.

*) The "*" below refer to "a" character. It is an ethic for me not to show the string correctly.

This is some resumes after the first meeting with my new boss on last tuesday:

My corporate hosting was activated yesterday. I've done the job. It's time to wait for the domain routed to the new IP address. In my opinion, it's need for few days to reactivating the sites (http://www.pegadaian.co.id).

By the way, the application made by my self was ready for a month ago. It was based on PHP scripting languages and MySQL database back-end. The custom-made encryption modules added to strength the security.

At the same time, the e-learning PUSDIKLAT sub domain was just created and the whole scripts has already uploaded in order to prepare for the next closest meetings (it's about this weeks) with the PUSDIKLAT teams and need to be beta tested by the operators.

The holding corporate sites (PT. Era Permata Sejahtera) is just waiting for the next assessment content pages, while the main administration area has fixed 2 weeks ago. It seems that I have been through all of the hard season coded.

Linux goes to branches plan needs to be re-planed after some minor problems founded. It takes some times and also few actions to make a conclusion answer likes re-creates the computers lab mirroring the branches condition, collecting information from all resources, etc.

Another jobs I should do is to re-organized the linux fedora core 4 applications package in order to support purchasing about 450 new server computers for the replacement the old one at the branch offices all over the indonesia. It quites simple for me to do as I was the project leader for the last same mission.

I think that my schedules to impress my new boss has succeded. But honestly, my journey is again begin to start with extra mission: NEW OFFICIAL POSITION. Hopefully, have to be completed this year.

For over a month and still don’t have any external projects to deal with. This situation give no any clarical jobs. All I had done this day was play around with radit and his new threecycle.

Now, I am sitting in my labs. Right away on a chair in front of my old laptop. Hearing a bit strains of Joe Satriani's guitar while a cigarettes on my left hand, and the other hands hanging this iPAQ - writing blogs likes I used to be. My wife and my child laid to beds not so long ago.

My watch shows digits 09:15 pm. My eyes focused on this small 3,5" PDA screen. Hmm.. Not so bad having this gadgets. It is small multifunction box with various purposes. It's a phone equiped with computer functions. I have this iPAQ 6365 series for more than a years and there is no problem came by likes some others gadgeters forum said. I am using old 1.00.38 ROM version.

I am typing this blog using a standard writer - Pocket Word -, even the top application Textmaker from Softmaker already installed on my 1GB SD card. There are lots of usefull programs stored on it after few days hard searching on the internet. Lets me explain one by one. I have divide it for some categories, such an application, multimedia, office, internet and games.

Applications
- Adobe Acrobat Reader 1.0 for Pocket PC
- BatteryTime Plus; today screen plugins
- CabInstall; install whereever you want
- CellCall Blocker; create phonebook blacklist
- CodeStore, secure your personal datas
- Spb Full Screen Keyboard 2.0
- novii Remote Deluxe; TV, AC, HiFi remote
- PHM Tools; tune up your Pocket PC
- PhotoContacts Pro; phonebook plugins
- PocketLamp; usefull in dark room
- PocketRuler; digital ruler
- Position; it's OOT
- pRSS Reader; read kompas, indosiar news
- PrintPocketCE; print to printer function
- ScreenLock; save your battery life
- Spb Backup; professional backup
- SpaceMaker; RAM and ROM improvement
- TotalCommander; replace your File Explorer
- vBar; more effective task manager (for me)
- Tube; jakarta map lay there
- MapKing3D v7; explore Jakarta from PDA
- PocketDOS; running a DOS application, eg: SISCADU

Multimedia
- Flash Player; SWF player for Pocket PC
- Pocket Artist; Photoshop a la Pocket PC
- PocketTV; watch MPG and DAT movies
- RealPlayer; watch RM movies
- WinamPAQ; Pocket PC version of Winamp

Office
- BDicty; dictionary on your hands
- CHM Reader; a must have for programmer
- HaaliReader; read PRC and PDB e-book
- PocketQuran; complete holy quran
- Softmaker Textmaker; MS word for PPC
- Softmaker Planmaker; MS excel for PPC

Internet
- Pocket IE Plus; ie7 on your Pocket PC
- PockeTTY; remote linux shell from PPC
- VNCViewer; remote GUI client
- WinMobile Torrent; download torrents

Games
- Age of Empires; top strategy games
- GTS Racing; cool racer games
- PortaPinball; favorite pinball
- Zuma; he..he..he..

Okey, that's all. Perhaps you could suggest an application I should have? All the programs above is stored at my personal site; http://www.duniapda.co.nr