If you surround all your javascript with <![CDATA[ and ]]> tags, all will come good.

The CDATA is seen by the validator as data which doesn’t need checking. So this:

<script>
document.getElementById('container').innerHTML('<p>hello</p>');
</script>

becomes this:

<script>
<![CDATA[
document.getElementById('container').innerHTML('<p>hello</p>');
]]>
</script>

Another option is to escape < and > characters server-side / in the file and then unescape with javascript

<script>
document.getElementById('container').innerHTML('&lt;p&gt;hello&lt;/p&gt;'.replace('/&lt;/','<').replace('/&gt;/','>'));
</script>

The problem is that when you line them all up the Facebook share button is actually wider than the others which seem to come in at 52px.

Well you can make the Facebook button 52px in width without too much trouble. Facebook only use two classes to style the inner ‘Share’ button which seems to be the decider when it comes to the buttons width.

By shaving a little off the left and right padding we can bring the Facebook share button back down to 52px in width and make it play nice with the other share buttons.

<style type="text/css">
span .FBConnectButton_Small .FBConnectButton_Text 
{
	padding:3px 2px 2px;
}
</style>

The extra span is just enough to beat the included Facebook css with a higher specificity score by 1 single point.

Integrating with WorldPay is not the simplest of tasks. The documentation is poor at best.

I was integrating by using a form on my site, which posts the order total and an order id etc to WorldPay. WorldPay then deal with taking the money from the user. What I couldn’t understand was how to get the user back to my site for thanks after they had paid.

Turns out it’s quite simple.

In the WorldPay control panel, enable Payment Response and add a url to which Worldpay will ping information about the transaction (the user is not sent here, nore are they ever aware this url exists). Also Enable Shopper Response.

When WorldPay pings your Payment Response file with the details of the transaction, if you have enabled Shopper Response then you can send back some html which WorldPay shows to the user. I had a better solution for the thanks page on my own site and so simply sent a meta redirect tag back. Nothing more, nothing less.

So the user is redirected to a url of my choice, and because I send that url to them after the transaction completes, I can choose where to send the user at that moment using the data WorldPay have send me.

<meta http-equiv=”refresh” content=”0;url=http://www.example.com/thanks.html” />

If you find any errors or know any extensions and mime type pairs missing be sure to let me know.

It’s in php array format for your convenience.

$mimetypes = array(
‘3dm’ => ‘x-world/x-3dmf’,
‘3dmf’ => ‘x-world/x-3dmf’,
‘a’ => ‘application/octet-stream’,
‘aab’ => ‘application/x-authorware-bin’,
‘aam’ => ‘application/x-authorware-map’,
‘aas’ => ‘application/x-authorware-seg’,
‘abc’ => ‘text/vnd.abc’,
‘acgi’ => ‘text/html’,
‘afl’ => ‘video/animaflex’,
‘ai’ => ‘application/postscript’,
‘aif’ => ‘audio/aiff’,
‘aif’ => ‘audio/x-aiff’,
‘aifc’ => ‘audio/aiff’,
‘aifc’ => ‘audio/x-aiff’,
‘aiff’ => ‘audio/aiff’,
‘aiff’ => ‘audio/x-aiff’,
‘aim’ => ‘application/x-aim’,
‘aip’ => ‘text/x-audiosoft-intra’,
‘ani’ => ‘application/x-navi-animation’,
‘aos’ => ‘application/x-nokia-9000-communicator-add-on-software’,
‘aps’ => ‘application/mime’,
‘arc’ => ‘application/octet-stream’,
‘arj’ => ‘application/arj’,
‘arj’ => ‘application/octet-stream’,
‘art’ => ‘image/x-jg’,
‘asf’ => ‘video/x-ms-asf’,
‘asm’ => ‘text/x-asm’,
‘asp’ => ‘text/asp’,
‘asx’ => ‘application/x-mplayer2′,
‘asx’ => ‘video/x-ms-asf’,
‘asx’ => ‘video/x-ms-asf-plugin’,
‘au’ => ‘audio/basic’,
‘au’ => ‘audio/x-au’,
‘avi’ => ‘application/x-troff-msvideo’,
‘avi’ => ‘video/avi’,
‘avi’ => ‘video/msvideo’,
‘avi’ => ‘video/x-msvideo’,
‘avs’ => ‘video/avs-video’,
‘bcpio’ => ‘application/x-bcpio’,
‘bin’ => ‘application/mac-binary’,
‘bin’ => ‘application/macbinary’,
‘bin’ => ‘application/octet-stream’,
‘bin’ => ‘application/x-binary’,
‘bin’ => ‘application/x-macbinary’,
‘bm’ => ‘image/bmp’,
‘bmp’ => ‘image/bmp’,
‘bmp’ => ‘image/x-windows-bmp’,
‘boo’ => ‘application/book’,
‘book’ => ‘application/book’,
‘boz’ => ‘application/x-bzip2′,
‘bsh’ => ‘application/x-bsh’,
‘bz’ => ‘application/x-bzip’,
‘bz2′ => ‘application/x-bzip2′,
‘c’ => ‘text/plain’,
‘c’ => ‘text/x-c’,
‘c++’ => ‘text/plain’,
‘cat’ => ‘application/vnd.ms-pki.seccat’,
‘cc’ => ‘text/plain’,
‘cc’ => ‘text/x-c’,
‘ccad’ => ‘application/clariscad’,
‘cco’ => ‘application/x-cocoa’,
‘cdf’ => ‘application/cdf’,
‘cdf’ => ‘application/x-cdf’,
‘cdf’ => ‘application/x-netcdf’,
‘cer’ => ‘application/pkix-cert’,
‘cer’ => ‘application/x-x509-ca-cert’,
‘cha’ => ‘application/x-chat’,
‘chat’ => ‘application/x-chat’,
‘class’ => ‘application/java’,
‘class’ => ‘application/java-byte-code’,
‘class’ => ‘application/x-java-class’,
‘com’ => ‘application/octet-stream’,
‘com’ => ‘text/plain’,
‘conf’ => ‘text/plain’,
‘cpio’ => ‘application/x-cpio’,
‘cpp’ => ‘text/x-c’,
‘cpt’ => ‘application/mac-compactpro’,
‘cpt’ => ‘application/x-compactpro’,
‘cpt’ => ‘application/x-cpt’,
‘crl’ => ‘application/pkcs-crl’,
‘crl’ => ‘application/pkix-crl’,
‘crt’ => ‘application/pkix-cert’,
‘crt’ => ‘application/x-x509-ca-cert’,
‘crt’ => ‘application/x-x509-user-cert’,
‘csh’ => ‘application/x-csh’,
‘csh’ => ‘text/x-script.csh’,
‘css’ => ‘application/x-pointplus’,
‘css’ => ‘text/css’,
‘cxx’ => ‘text/plain’,
‘dcr’ => ‘application/x-director’,
‘deepv’ => ‘application/x-deepv’,
‘def’ => ‘text/plain’,
‘der’ => ‘application/x-x509-ca-cert’,
‘dif’ => ‘video/x-dv’,
‘dir’ => ‘application/x-director’,
‘dl’ => ‘video/dl’,
‘dl’ => ‘video/x-dl’,
‘doc’ => ‘application/msword’,
‘dot’ => ‘application/msword’,
‘dp’ => ‘application/commonground’,
‘drw’ => ‘application/drafting’,
‘dump’ => ‘application/octet-stream’,
‘dv’ => ‘video/x-dv’,
‘dvi’ => ‘application/x-dvi’,
‘dwf’ => ‘model/vnd.dwf’,
‘dwg’ => ‘application/acad’,
‘dwg’ => ‘image/vnd.dwg’,
‘dwg’ => ‘image/x-dwg’,
‘dxf’ => ‘application/dxf’,
‘dxf’ => ‘image/vnd.dwg’,
‘dxf’ => ‘image/x-dwg’,
‘dxr’ => ‘application/x-director’,
‘el’ => ‘text/x-script.elisp’,
‘elc’ => ‘application/x-bytecode.elisp’,
‘elc’ => ‘application/x-elc’,
‘env’ => ‘application/x-envoy’,
‘eps’ => ‘application/postscript’,
‘es’ => ‘application/x-esrehber’,
‘etx’ => ‘text/x-setext’,
‘evy’ => ‘application/envoy’,
‘evy’ => ‘application/x-envoy’,
‘exe’ => ‘application/octet-stream’,
‘f’ => ‘text/plain’,
‘f’ => ‘text/x-fortran’,
‘f77′ => ‘text/x-fortran’,
‘f90′ => ‘text/plain’,
‘f90′ => ‘text/x-fortran’,
‘fdf’ => ‘application/vnd.fdf’,
‘fif’ => ‘application/fractals’,
‘fif’ => ‘image/fif’,
‘fli’ => ‘video/fli’,
‘fli’ => ‘video/x-fli’,
‘flo’ => ‘image/florian’,
‘flx’ => ‘text/vnd.fmi.flexstor’,
‘fmf’ => ‘video/x-atomic3d-feature’,
‘for’ => ‘text/plain’,
‘for’ => ‘text/x-fortran’,
‘fpx’ => ‘image/vnd.fpx’,
‘fpx’ => ‘image/vnd.net-fpx’,
‘frl’ => ‘application/freeloader’,
‘funk’ => ‘audio/make’,
‘g’ => ‘text/plain’,
‘g3′ => ‘image/g3fax’,
‘gif’ => ‘image/gif’,
‘gl’ => ‘video/gl’,
‘gl’ => ‘video/x-gl’,
‘gsd’ => ‘audio/x-gsm’,
‘gsm’ => ‘audio/x-gsm’,
‘gsp’ => ‘application/x-gsp’,
‘gss’ => ‘application/x-gss’,
‘gtar’ => ‘application/x-gtar’,
‘gz’ => ‘application/x-compressed’,
‘gz’ => ‘application/x-gzip’,
‘gzip’ => ‘application/x-gzip’,
‘gzip’ => ‘multipart/x-gzip’,
‘h’ => ‘text/plain’,
‘h’ => ‘text/x-h’,
‘hdf’ => ‘application/x-hdf’,
‘help’ => ‘application/x-helpfile’,
‘hgl’ => ‘application/vnd.hp-hpgl’,
‘hh’ => ‘text/plain’,
‘hh’ => ‘text/x-h’,
‘hlb’ => ‘text/x-script’,
‘hlp’ => ‘application/hlp’,
‘hlp’ => ‘application/x-helpfile’,
‘hlp’ => ‘application/x-winhelp’,
‘hpg’ => ‘application/vnd.hp-hpgl’,
‘hpgl’ => ‘application/vnd.hp-hpgl’,
‘hqx’ => ‘application/binhex’,
‘hqx’ => ‘application/binhex4′,
‘hqx’ => ‘application/mac-binhex’,
‘hqx’ => ‘application/mac-binhex40′,
‘hqx’ => ‘application/x-binhex40′,
‘hqx’ => ‘application/x-mac-binhex40′,
‘hta’ => ‘application/hta’,
‘htc’ => ‘text/x-component’,
‘htm’ => ‘text/html’,
‘html’ => ‘text/html’,
‘htmls’ => ‘text/html’,
‘htt’ => ‘text/webviewhtml’,
‘htx’ => ‘text/html’,
‘ice’ => ‘x-conference/x-cooltalk’,
‘ico’ => ‘image/x-icon’,
‘idc’ => ‘text/plain’,
‘ief’ => ‘image/ief’,
‘iefs’ => ‘image/ief’,
‘iges’ => ‘application/iges’,
‘iges’ => ‘model/iges’,
‘igs’ => ‘application/iges’,
‘igs’ => ‘model/iges’,
‘ima’ => ‘application/x-ima’,
‘imap’ => ‘application/x-httpd-imap’,
‘inf’ => ‘application/inf’,
‘ins’ => ‘application/x-internett-signup’,
‘ip’ => ‘application/x-ip2′,
‘isu’ => ‘video/x-isvideo’,
‘it’ => ‘audio/it’,
‘iv’ => ‘application/x-inventor’,
‘ivr’ => ‘i-world/i-vrml’,
‘ivy’ => ‘application/x-livescreen’,
‘jam’ => ‘audio/x-jam’,
‘jav’ => ‘text/plain’,
‘jav’ => ‘text/x-java-source’,
‘java’ => ‘text/plain’,
‘java’ => ‘text/x-java-source’,
‘jcm’ => ‘application/x-java-commerce’,
‘jfif’ => ‘image/jpeg’,
‘jfif’ => ‘image/pjpeg’,
‘jfif-tbnl’ => ‘image/jpeg’,
‘jpe’ => ‘image/jpeg’,
‘jpe’ => ‘image/pjpeg’,
‘jpeg’ => ‘image/jpeg’,
‘jpeg’ => ‘image/pjpeg’,
‘jpg’ => ‘image/jpeg’,
‘jpg’ => ‘image/pjpeg’,
‘jps’ => ‘image/x-jps’,
‘js’ => ‘application/x-javascript’,
‘jut’ => ‘image/jutvision’,
‘kar’ => ‘audio/midi’,
‘kar’ => ‘music/x-karaoke’,
‘ksh’ => ‘application/x-ksh’,
‘ksh’ => ‘text/x-script.ksh’,
‘la’ => ‘audio/nspaudio’,
‘la’ => ‘audio/x-nspaudio’,
‘lam’ => ‘audio/x-liveaudio’,
‘latex’ => ‘application/x-latex’,
‘lha’ => ‘application/lha’,
‘lha’ => ‘application/octet-stream’,
‘lha’ => ‘application/x-lha’,
‘lhx’ => ‘application/octet-stream’,
‘list’ => ‘text/plain’,
‘lma’ => ‘audio/nspaudio’,
‘lma’ => ‘audio/x-nspaudio’,
‘log’ => ‘text/plain’,
‘lsp’ => ‘application/x-lisp’,
‘lsp’ => ‘text/x-script.lisp’,
‘lst’ => ‘text/plain’,
‘lsx’ => ‘text/x-la-asf’,
‘ltx’ => ‘application/x-latex’,
‘lzh’ => ‘application/octet-stream’,
‘lzh’ => ‘application/x-lzh’,
‘lzx’ => ‘application/lzx’,
‘lzx’ => ‘application/octet-stream’,
‘lzx’ => ‘application/x-lzx’,
‘m’ => ‘text/plain’,
‘m’ => ‘text/x-m’,
‘m1v’ => ‘video/mpeg’,
‘m2a’ => ‘audio/mpeg’,
‘m2v’ => ‘video/mpeg’,
‘m3u’ => ‘audio/x-mpequrl’,
‘man’ => ‘application/x-troff-man’,
‘map’ => ‘application/x-navimap’,
‘mar’ => ‘text/plain’,
‘mbd’ => ‘application/mbedlet’,
‘mc$’ => ‘application/x-magic-cap-package-1.0′,
‘mcd’ => ‘application/mcad’,
‘mcd’ => ‘application/x-mathcad’,
‘mcf’ => ‘image/vasa’,
‘mcf’ => ‘text/mcf’,
‘mcp’ => ‘application/netmc’,
‘me’ => ‘application/x-troff-me’,
‘mht’ => ‘message/rfc822′,
‘mhtml’ => ‘message/rfc822′,
‘mid’ => ‘application/x-midi’,
‘mid’ => ‘audio/midi’,
‘mid’ => ‘audio/x-mid’,
‘mid’ => ‘audio/x-midi’,
‘mid’ => ‘music/crescendo’,
‘mid’ => ‘x-music/x-midi’,
‘midi’ => ‘application/x-midi’,
‘midi’ => ‘audio/midi’,
‘midi’ => ‘audio/x-mid’,
‘midi’ => ‘audio/x-midi’,
‘midi’ => ‘music/crescendo’,
‘midi’ => ‘x-music/x-midi’,
‘mif’ => ‘application/x-frame’,
‘mif’ => ‘application/x-mif’,
‘mime’ => ‘message/rfc822′,
‘mime’ => ‘www/mime’,
‘mjf’ => ‘audio/x-vnd.audioexplosion.mjuicemediafile’,
‘mjpg’ => ‘video/x-motion-jpeg’,
‘mm’ => ‘application/base64′,
‘mm’ => ‘application/x-meme’,
‘mme’ => ‘application/base64′,
‘mod’ => ‘audio/mod’,
‘mod’ => ‘audio/x-mod’,
‘moov’ => ‘video/quicktime’,
‘mov’ => ‘video/quicktime’,
‘movie’ => ‘video/x-sgi-movie’,
‘mp2′ => ‘audio/mpeg’,
‘mp2′ => ‘audio/x-mpeg’,
‘mp2′ => ‘video/mpeg’,
‘mp2′ => ‘video/x-mpeg’,
‘mp2′ => ‘video/x-mpeq2a’,
‘mp3′ => ‘audio/mpeg3′,
‘mp3′ => ‘audio/x-mpeg-3′,
‘mp3′ => ‘video/mpeg’,
‘mp3′ => ‘video/x-mpeg’,
‘mpa’ => ‘audio/mpeg’,
‘mpa’ => ‘video/mpeg’,
‘mpc’ => ‘application/x-project’,
‘mpe’ => ‘video/mpeg’,
‘mpeg’ => ‘video/mpeg’,
‘mpg’ => ‘audio/mpeg’,
‘mpg’ => ‘video/mpeg’,
‘mpga’ => ‘audio/mpeg’,
‘mpp’ => ‘application/vnd.ms-project’,
‘mpt’ => ‘application/x-project’,
‘mpv’ => ‘application/x-project’,
‘mpx’ => ‘application/x-project’,
‘mrc’ => ‘application/marc’,
‘ms’ => ‘application/x-troff-ms’,
‘mv’ => ‘video/x-sgi-movie’,
‘my’ => ‘audio/make’,
‘mzz’ => ‘application/x-vnd.audioexplosion.mzz’,
‘nap’ => ‘image/naplps’,
‘naplps’ => ‘image/naplps’,
‘nc’ => ‘application/x-netcdf’,
‘ncm’ => ‘application/vnd.nokia.configuration-message’,
‘nif’ => ‘image/x-niff’,
‘niff’ => ‘image/x-niff’,
‘nix’ => ‘application/x-mix-transfer’,
‘nsc’ => ‘application/x-conference’,
‘nvd’ => ‘application/x-navidoc’,
‘o’ => ‘application/octet-stream’,
‘oda’ => ‘application/oda’,
‘omc’ => ‘application/x-omc’,
‘omcd’ => ‘application/x-omcdatamaker’,
‘omcr’ => ‘application/x-omcregerator’,
‘p’ => ‘text/x-pascal’,
‘p10′ => ‘application/pkcs10′,
‘p10′ => ‘application/x-pkcs10′,
‘p12′ => ‘application/pkcs-12′,
‘p12′ => ‘application/x-pkcs12′,
‘p7a’ => ‘application/x-pkcs7-signature’,
‘p7c’ => ‘application/pkcs7-mime’,
‘p7c’ => ‘application/x-pkcs7-mime’,
‘p7m’ => ‘application/pkcs7-mime’,
‘p7m’ => ‘application/x-pkcs7-mime’,
‘p7r’ => ‘application/x-pkcs7-certreqresp’,
‘p7s’ => ‘application/pkcs7-signature’,
‘part’ => ‘application/pro_eng’,
‘pas’ => ‘text/pascal’,
‘pbm’ => ‘image/x-portable-bitmap’,
‘pcl’ => ‘application/vnd.hp-pcl’,
‘pcl’ => ‘application/x-pcl’,
‘pct’ => ‘image/x-pict’,
‘pcx’ => ‘image/x-pcx’,
‘pdb’ => ‘chemical/x-pdb’,
‘pdf’ => ‘application/pdf’,
‘pfunk’ => ‘audio/make’,
‘pfunk’ => ‘audio/make.my.funk’,
‘pgm’ => ‘image/x-portable-graymap’,
‘pgm’ => ‘image/x-portable-greymap’,
‘pic’ => ‘image/pict’,
‘pict’ => ‘image/pict’,
‘pkg’ => ‘application/x-newton-compatible-pkg’,
‘pko’ => ‘application/vnd.ms-pki.pko’,
‘pl’ => ‘text/plain’,
‘pl’ => ‘text/x-script.perl’,
‘plx’ => ‘application/x-pixclscript’,
‘pm’ => ‘image/x-xpixmap’,
‘pm’ => ‘text/x-script.perl-module’,
‘pm4′ => ‘application/x-pagemaker’,
‘pm5′ => ‘application/x-pagemaker’,
‘png’ => ‘image/png’,
‘pnm’ => ‘application/x-portable-anymap’,
‘pnm’ => ‘image/x-portable-anymap’,
‘pot’ => ‘application/mspowerpoint’,
‘pot’ => ‘application/vnd.ms-powerpoint’,
‘pov’ => ‘model/x-pov’,
‘ppa’ => ‘application/vnd.ms-powerpoint’,
‘ppm’ => ‘image/x-portable-pixmap’,
‘pps’ => ‘application/mspowerpoint’,
‘pps’ => ‘application/vnd.ms-powerpoint’,
‘ppt’ => ‘application/mspowerpoint’,
‘ppt’ => ‘application/powerpoint’,
‘ppt’ => ‘application/vnd.ms-powerpoint’,
‘ppt’ => ‘application/x-mspowerpoint’,
‘ppz’ => ‘application/mspowerpoint’,
‘pre’ => ‘application/x-freelance’,
‘prt’ => ‘application/pro_eng’,
‘ps’ => ‘application/postscript’,
‘psd’ => ‘application/octet-stream’,
‘pvu’ => ‘paleovu/x-pv’,
‘pwz’ => ‘application/vnd.ms-powerpoint’,
‘py’ => ‘text/x-script.phyton’,
‘pyc’ => ‘applicaiton/x-bytecode.python’,
‘qcp’ => ‘audio/vnd.qcelp’,
‘qd3′ => ‘x-world/x-3dmf’,
‘qd3d’ => ‘x-world/x-3dmf’,
‘qif’ => ‘image/x-quicktime’,
‘qt’ => ‘video/quicktime’,
‘qtc’ => ‘video/x-qtc’,
‘qti’ => ‘image/x-quicktime’,
‘qtif’ => ‘image/x-quicktime’,
‘ra’ => ‘audio/x-pn-realaudio’,
‘ra’ => ‘audio/x-pn-realaudio-plugin’,
‘ra’ => ‘audio/x-realaudio’,
‘ram’ => ‘audio/x-pn-realaudio’,
‘ras’ => ‘application/x-cmu-raster’,
‘ras’ => ‘image/cmu-raster’,
‘ras’ => ‘image/x-cmu-raster’,
‘rast’ => ‘image/cmu-raster’,
‘rexx’ => ‘text/x-script.rexx’,
‘rf’ => ‘image/vnd.rn-realflash’,
‘rgb’ => ‘image/x-rgb’,
‘rm’ => ‘application/vnd.rn-realmedia’,
‘rm’ => ‘audio/x-pn-realaudio’,
‘rmi’ => ‘audio/mid’,
‘rmm’ => ‘audio/x-pn-realaudio’,
‘rmp’ => ‘audio/x-pn-realaudio’,
‘rmp’ => ‘audio/x-pn-realaudio-plugin’,
‘rng’ => ‘application/ringing-tones’,
‘rng’ => ‘application/vnd.nokia.ringing-tone’,
‘rnx’ => ‘application/vnd.rn-realplayer’,
‘roff’ => ‘application/x-troff’,
‘rp’ => ‘image/vnd.rn-realpix’,
‘rpm’ => ‘audio/x-pn-realaudio-plugin’,
‘rt’ => ‘text/richtext’,
‘rt’ => ‘text/vnd.rn-realtext’,
‘rtf’ => ‘application/rtf’,
‘rtf’ => ‘application/x-rtf’,
‘rtf’ => ‘text/richtext’,
‘rtx’ => ‘application/rtf’,
‘rtx’ => ‘text/richtext’,
‘rv’ => ‘video/vnd.rn-realvideo’,
’s’ => ‘text/x-asm’,
’s3m’ => ‘audio/s3m’,
’saveme’ => ‘application/octet-stream’,
’sbk’ => ‘application/x-tbook’,
’scm’ => ‘application/x-lotusscreencam’,
’scm’ => ‘text/x-script.guile’,
’scm’ => ‘text/x-script.scheme’,
’scm’ => ‘video/x-scm’,
’sdml’ => ‘text/plain’,
’sdp’ => ‘application/sdp’,
’sdp’ => ‘application/x-sdp’,
’sdr’ => ‘application/sounder’,
’sea’ => ‘application/sea’,
’sea’ => ‘application/x-sea’,
’set’ => ‘application/set’,
’sgm’ => ‘text/sgml’,
’sgm’ => ‘text/x-sgml’,
’sgml’ => ‘text/sgml’,
’sgml’ => ‘text/x-sgml’,
’sh’ => ‘application/x-bsh’,
’sh’ => ‘application/x-sh’,
’sh’ => ‘application/x-shar’,
’sh’ => ‘text/x-script.sh’,
’shar’ => ‘application/x-bsh’,
’shar’ => ‘application/x-shar’,
’shtml’ => ‘text/html’,
’shtml’ => ‘text/x-server-parsed-html’,
’sid’ => ‘audio/x-psid’,
’sit’ => ‘application/x-sit’,
’sit’ => ‘application/x-stuffit’,
’skd’ => ‘application/x-koan’,
’skm’ => ‘application/x-koan’,
’skp’ => ‘application/x-koan’,
’skt’ => ‘application/x-koan’,
’sl’ => ‘application/x-seelogo’,
’smi’ => ‘application/smil’,
’smil’ => ‘application/smil’,
’snd’ => ‘audio/basic’,
’snd’ => ‘audio/x-adpcm’,
’sol’ => ‘application/solids’,
’spc’ => ‘application/x-pkcs7-certificates’,
’spc’ => ‘text/x-speech’,
’spl’ => ‘application/futuresplash’,
’spr’ => ‘application/x-sprite’,
’sprite’ => ‘application/x-sprite’,
’src’ => ‘application/x-wais-source’,
’ssi’ => ‘text/x-server-parsed-html’,
’ssm’ => ‘application/streamingmedia’,
’sst’ => ‘application/vnd.ms-pki.certstore’,
’step’ => ‘application/step’,
’stl’ => ‘application/sla’,
’stl’ => ‘application/vnd.ms-pki.stl’,
’stl’ => ‘application/x-navistyle’,
’stp’ => ‘application/step’,
’sv4cpio’=> ‘application/x-sv4cpio’,
’sv4crc’ => ‘application/x-sv4crc’,
’svf’ => ‘image/vnd.dwg’,
’svf’ => ‘image/x-dwg’,
’svr’ => ‘application/x-world’,
’svr’ => ‘x-world/x-svr’,
’swf’ => ‘application/x-shockwave-flash’,
‘t’ => ‘application/x-troff’,
‘talk’ => ‘text/x-speech’,
‘tar’ => ‘application/x-tar’,
‘tbk’ => ‘application/toolbook’,
‘tbk’ => ‘application/x-tbook’,
‘tcl’ => ‘application/x-tcl’,
‘tcl’ => ‘text/x-script.tcl’,
‘tcsh’ => ‘text/x-script.tcsh’,
‘tex’ => ‘application/x-tex’,
‘texi’ => ‘application/x-texinfo’,
‘texinfo’=> ‘application/x-texinfo’,
‘text’ => ‘application/plain’,
‘text’ => ‘text/plain’,
‘tgz’ => ‘application/gnutar’,
‘tgz’ => ‘application/x-compressed’,
‘tif’ => ‘image/tiff’,
‘tif’ => ‘image/x-tiff’,
‘tiff’ => ‘image/tiff’,
‘tiff’ => ‘image/x-tiff’,
‘tr’ => ‘application/x-troff’,
‘tsi’ => ‘audio/tsp-audio’,
‘tsp’ => ‘application/dsptype’,
‘tsp’ => ‘audio/tsplayer’,
‘tsv’ => ‘text/tab-separated-values’,
‘turbot’ => ‘image/florian’,
‘txt’ => ‘text/plain’,
‘uil’ => ‘text/x-uil’,
‘uni’ => ‘text/uri-list’,
‘unis’ => ‘text/uri-list’,
‘unv’ => ‘application/i-deas’,
‘uri’ => ‘text/uri-list’,
‘uris’ => ‘text/uri-list’,
‘ustar’ => ‘application/x-ustar’,
‘ustar’ => ‘multipart/x-ustar’,
‘uu’ => ‘application/octet-stream’,
‘uu’ => ‘text/x-uuencode’,
‘uue’ => ‘text/x-uuencode’,
‘vcd’ => ‘application/x-cdlink’,
‘vcs’ => ‘text/x-vcalendar’,
‘vda’ => ‘application/vda’,
‘vdo’ => ‘video/vdo’,
‘vew’ => ‘application/groupwise’,
‘viv’ => ‘video/vivo’,
‘viv’ => ‘video/vnd.vivo’,
‘vivo’ => ‘video/vivo’,
‘vivo’ => ‘video/vnd.vivo’,
‘vmd’ => ‘application/vocaltec-media-desc’,
‘vmf’ => ‘application/vocaltec-media-file’,
‘voc’ => ‘audio/voc’,
‘voc’ => ‘audio/x-voc’,
‘vos’ => ‘video/vosaic’,
‘vox’ => ‘audio/voxware’,
‘vqe’ => ‘audio/x-twinvq-plugin’,
‘vqf’ => ‘audio/x-twinvq’,
‘vql’ => ‘audio/x-twinvq-plugin’,
‘vrml’ => ‘application/x-vrml’,
‘vrml’ => ‘model/vrml’,
‘vrml’ => ‘x-world/x-vrml’,
‘vrt’ => ‘x-world/x-vrt’,
‘vsd’ => ‘application/x-visio’,
‘vst’ => ‘application/x-visio’,
‘vsw’ => ‘application/x-visio’,
‘w60′ => ‘application/wordperfect6.0′,
‘w61′ => ‘application/wordperfect6.1′,
‘w6w’ => ‘application/msword’,
‘wav’ => ‘audio/wav’,
‘wav’ => ‘audio/x-wav’,
‘wb1′ => ‘application/x-qpro’,
‘wbmp’ => ‘image/vnd.wap.wbmp’,
‘web’ => ‘application/vnd.xara’,
‘wiz’ => ‘application/msword’,
‘wk1′ => ‘application/x-123′,
‘wmf’ => ‘windows/metafile’,
‘wml’ => ‘text/vnd.wap.wml’,
‘wmlc’ => ‘application/vnd.wap.wmlc’,
‘wmls’ => ‘text/vnd.wap.wmlscript’,
‘wmlsc’ => ‘application/vnd.wap.wmlscriptc’,
‘word’ => ‘application/msword’,
‘wp’ => ‘application/wordperfect’,
‘wp5′ => ‘application/wordperfect’,
‘wp5′ => ‘application/wordperfect6.0′,
‘wp6′ => ‘application/wordperfect’,
‘wpd’ => ‘application/wordperfect’,
‘wpd’ => ‘application/x-wpwin’,
‘wq1′ => ‘application/x-lotus’,
‘wri’ => ‘application/mswrite’,
‘wri’ => ‘application/x-wri’,
‘wrl’ => ‘application/x-world’,
‘wrl’ => ‘model/vrml’,
‘wrl’ => ‘x-world/x-vrml’,
‘wrz’ => ‘model/vrml’,
‘wrz’ => ‘x-world/x-vrml’,
‘wsc’ => ‘text/scriplet’,
‘wsrc’ => ‘application/x-wais-source’,
‘wtk’ => ‘application/x-wintalk’,
‘xbm’ => ‘image/x-xbitmap’,
‘xbm’ => ‘image/x-xbm’,
‘xbm’ => ‘image/xbm’,
‘xdr’ => ‘video/x-amt-demorun’,
‘xgz’ => ‘xgl/drawing’,
‘xif’ => ‘image/vnd.xiff’,
‘xl’ => ‘application/excel’,
‘xla’ => ‘application/excel’,
‘xla’ => ‘application/x-excel’,
‘xla’ => ‘application/x-msexcel’,
‘xlb’ => ‘application/excel’,
‘xlb’ => ‘application/vnd.ms-excel’,
‘xlb’ => ‘application/x-excel’,
‘xlc’ => ‘application/excel’,
‘xlc’ => ‘application/vnd.ms-excel’,
‘xlc’ => ‘application/x-excel’,
‘xld’ => ‘application/excel’,
‘xld’ => ‘application/x-excel’,
‘xlk’ => ‘application/excel’,
‘xlk’ => ‘application/x-excel’,
‘xll’ => ‘application/excel’,
‘xll’ => ‘application/vnd.ms-excel’,
‘xll’ => ‘application/x-excel’,
‘xlm’ => ‘application/excel’,
‘xlm’ => ‘application/vnd.ms-excel’,
‘xlm’ => ‘application/x-excel’,
‘xls’ => ‘application/excel’,
‘xls’ => ‘application/vnd.ms-excel’,
‘xls’ => ‘application/x-excel’,
‘xls’ => ‘application/x-msexcel’,
‘xlt’ => ‘application/excel’,
‘xlt’ => ‘application/x-excel’,
‘xlv’ => ‘application/excel’,
‘xlv’ => ‘application/x-excel’,
‘xlw’ => ‘application/excel’,
‘xlw’ => ‘application/vnd.ms-excel’,
‘xlw’ => ‘application/x-excel’,
‘xlw’ => ‘application/x-msexcel’,
‘xm’ => ‘audio/xm’,
‘xml’ => ‘application/xml’,
‘xml’ => ‘text/xml’,
‘xmz’ => ‘xgl/movie’,
‘xpix’ => ‘application/x-vnd.ls-xpix’,
‘xpm’ => ‘image/x-xpixmap’,
‘xpm’ => ‘image/xpm’,
‘x-png’ => ‘image/png’,
‘xsr’ => ‘video/x-amt-showrun’,
‘xwd’ => ‘image/x-xwd’,
‘xwd’ => ‘image/x-xwindowdump’,
‘xyz’ => ‘chemical/x-pdb’,
‘z’ => ‘application/x-compress’,
‘z’ => ‘application/x-compressed’,
‘zip’ => ‘application/x-compressed’,
‘zip’ => ‘application/x-zip-compressed’,
‘zip’ => ‘application/zip’,
‘zip’ => ‘multipart/x-zip’,
‘zoo’ => ‘application/octet-stream’,
‘zsh’ => ‘text/x-script.zsh’,
‘txt’ => ‘text/plain’,
‘htm’ => ‘text/html’,
‘html’ => ‘text/html’,
‘php’ => ‘application/x-httpd-php’,
‘phps’ => ‘application/x-httpd-phps’,
‘css’ => ‘text/css’,
‘js’ => ‘application/javascript’,
‘json’ => ‘application/json’,
‘xml’ => ‘application/xml’,
’swf’ => ‘application/x-shockwave-flash’,
‘flv’ => ‘video/x-flv’,
‘asc’ => ‘text/plain’,
‘atom’ => ‘application/atom+xml’,
‘bcpio’ => ‘application/x-bcpio’,
‘png’ => ‘image/png’,
‘jpe’ => ‘image/jpeg’,
‘jpeg’ => ‘image/jpeg’,
‘jpg’ => ‘image/jpeg’,
‘gif’ => ‘image/gif’,
‘bmp’ => ‘image/bmp’,
‘ico’ => ‘image/vnd.microsoft.icon’,
‘tiff’ => ‘image/tiff’,
‘tif’ => ‘image/tiff’,
’svg’ => ‘image/svg+xml’,
’svgz’ => ‘image/svg+xml’,
‘zip’ => ‘application/zip’,
‘rar’ => ‘application/x-rar-compressed’,
‘exe’ => ‘application/x-msdownload’,
‘msi’ => ‘application/x-msdownload’,
‘cab’ => ‘application/vnd.ms-cab-compressed’,
‘mp3′ => ‘audio/mpeg’,
‘qt’ => ‘video/quicktime’,
‘mov’ => ‘video/quicktime’,
‘au’ => ‘audio/basic’,
‘avi’ => ‘video/x-msvideo’,
‘pdf’ => ‘application/pdf’,
‘psd’ => ‘image/vnd.adobe.photoshop’,
‘ai’ => ‘application/postscript’,
‘eps’ => ‘application/postscript’,
‘ps’ => ‘application/postscript’,
‘aif’ => ‘audio/x-aiff’,
‘aifc’ => ‘audio/x-aiff’,
‘aiff’ => ‘audio/x-aiff’,
‘doc’ => ‘application/msword’,
‘rtf’ => ‘application/rtf’,
‘xls’ => ‘application/vnd.ms-excel’,
‘ppt’ => ‘application/vnd.ms-powerpoint’,
‘odt’ => ‘application/vnd.oasis.opendocument.text’,
‘ods’ => ‘application/vnd.oasis.opendocument.spreadsheet’,
’swf’ => ‘application/x-shockwave-flash’,
’swf’ => ‘application/x-shockwave-flash2-preview’,
’swf’ => ‘application/futuresplash’,
’swf’ => ‘image/vnd.rn-realflash’
);

<form method="post" action="<?php print $_SERVER['PHP_SELF"]; ?>">

Looks pretty harmless doesn’t it, but it is a pretty dangerous shortcut to use. Imagin I get a user to visit the page the form is on by following this link, maybe hiding it in a short url:

http://example.com/formpage.php?"><script>alert(document.cookie);</script>

where I’ve added some html into the url which contains a script tag.

I could use this method to grab all your cookies and log in as you, or send ajax requests back to the site on your behalf. All very frightening. The quick solution is to turn html characters into their harmless entities using the php function htmlspecialchars. So the code would be

<form method="post" action="<?php print htmlspecialchars($_SERVER['PHP_SELF']); ?>">

But wait! The best way to submit to the same page with a form is to use and empty action attribute. It’s valid and it works.

<form method="post" action="">

Don’t believe me? Go tell Jesse. He also wrote about empty action attributes.

The steps to creating a simple locally run php Coda plugin:

You must have php installed and running locally.
Start the plugin file with theses lines:

#!/usr/bin/php -q
<?php

(no space between < and ?php)

Where /use/bin/php is the path to you local php install

This is an example of replacing a text string with an imaginary tag ‘harry’ around it.

#!/usr/bin/php
<?php
 
/* a coda plugin */
 
$input = "";
 
$fp = fopen("php://stdin", "r");
while ( $line = fgets($fp, 1024) )
{
	$input .= $line;
}
 
fclose($fp);
 
 
// so now we have input text in $input
 
print '<harry>' . $input . '</harry>';
 
?>

For much more information:
http://www.panic.com/coda/developer/howto/plugins.php

I have been working on something recently to make my Twitter life a lot easier.

I don’t have an iPhone and I’m not planning one getting on in the near future, so I send sms messages to Twitter to update my status. Simple enough when you have one Twitter account. You just add your device ( phone ) to Twitter, tell it when to send you sms messages, and what to send you and off you go.

Sadly you can only apply a device to one Twitter account and can only send updated to one account from your device via sms.

Until now!

I sat down one evening with a lovely cup of tea and had a good think. The twitter api allows access to account updates, @replies and direct messages so their must be a way to allow the update of many accounts from one device.

What I came up with is called bucket. You can add as multiple Twitter accounts to bucket and then can update them by sending sms to your bucket account.

You bucket account is just another Twitter account with no followers and set to private, so if ( like me ) you are on Vodafone in the UK, it is still completely free just the price of a text ( or part of your monthly allowance ).

Additionally you can ask bucket to collect any @replies sent to your registered accounts and send them to you ( using your bucket accounts direct message ) using sms.

So you can send to multiple accounts, can receive @replies from multiple accounts and can use the standard Twitter sms methods to get any updates you want from your friends accounts.

Facebook status support should be added soon, and then from there the sky is the limit.

Bucket is currently very young and needs some testing, so if you would like an account, add a comment to this post which includes your Twitter account, and I’ll send an invite to you via direct message on Twitter.

Update: You can now signup and help in testing. http://bucket.harrybailey.com

Well the wiki article is quite large but misses a few points I thought it worth noting…

1) You need to escape all forward slashes with a backslash

In the regexp / always needs to be submitted as \/

2) The url they match again is the full callback url you submitted for your app not the canvas url

You aren’t matching just the file names, you can match back down the folders.
So if you use a folder called myapp/ for your index page then your url regexp could be ‘myapp\/$’ for the home page
You could then do ‘myapp\/anotherpage\.php$ for a different file and ‘myapp\/folder\/$ for another folder

3) Whatever keys you use in the submitted array are used as the new $_POST var keys

They take your array key ‘user_app_friends’ below and append ‘fb_sig_’ to it. The final key would be ‘fb_sig_user_app_friends’ in this case

4) You can submit multiple matches in one api request

Although the examples only show:

$fetch = array(
	'user_app_friends' => array(
				'pattern' => 'myapp\/$', 
				'query' => 'SELECT uid FROM user WHERE has_added_app=1 and uid IN (SELECT uid2 FROM friend WHERE uid1 = {*user*})')
		);
$facebook->api_client->admin_setAppProperties(array('preload_fql' => json_encode($fetch)));

You could submit:

$fetch = array(
	'user_app_friends' => array(
				'pattern' => 'myapp\/$', 
				'query' => 'SELECT uid FROM user WHERE has_added_app=1 and uid IN (SELECT uid2 FROM friend WHERE uid1 = {*user*})'),
	'user_friends' => array(
				'pattern' => 'myapp\/.+$',
				'query' => 'SELECT uid2 FROM friend WHERE uid1 = {*user*}'
				)
	);
$facebook->api_client->admin_setAppProperties(array('preload_fql' => json_encode($fetch)));

5) The easiest way to get data back from the new $_POST variables in json_decode

Stick the $_POST variable into json_decode(); and then use var_dump to see what you get. It’s usually pretty obvious.

$user_app_friends = json_decode($_POST['fb_sig_user_app_friends']);
var_dump($user_app_friends);

To sidetrack for a second. When I post or update this blog, a twitter tweet is sent automatically to my twitter account to inform anyone who cares. Well just this morning ANZMoneyManager ‘followed me’ ( is that the right term? ). I can only assume it’s because of the previous post and me tweeting about it on there. They seem to be pretty pro-active when it comes to twitter and blog comments.

Anyhow, back on track. ANZ Money Manager is a financial aggregator. It takes the login details for all your bank accounts and stores them securely online. It then logs into those accounts regularly and using some clever black magic, mashes all the information together and uses it to offer you a view of all your accounts in one place. It also offers email alerts for some events for those accounts. ANZ is based in Australia and New Zealand, but their Money Manager is available to anyone worldwide and covers most of the major banks in it’s services.

The truth however is that ANZ Money Manager is actually just the monkey, while the organ grinder, and the creator of the tool is Yodlee.

I signed up for an accounts with both ANZ and Yodlee to compare. Both sets of terms say they might sell some information anonymously, but there is nothing particularly scary in them.

After having a poke around I can tell you that I think ANZ is quite nice, but has it’s fair share of bugs.
I added an account. The system added it twice. This also happened at Yodlee. Deactivating (hiding) one copy solved the issue quickly.
Their are multiple browser specific design issues on the ANZ site. I took screens and will send to their feedback address.
Many of the features are in Australian Dollars ( AUD ) only. Yodlee offers a selection of currencies when you sign-up.

As for Yodlee, they don’t seem to offer Virgin UK credit card accounts, while ANZ do. Strange? I have requested it be added to Yodlee as they must offer it for it to appear on ANZ.

So this is a step forward from Egg Money Manager, which stores account details on your computer in a ’safe’, but can’t offer alerts or update without your input, but email alerts can only go so far.

I suppose you could use email alerts in combination with a Pipe Email to PHP Script to make them more flexible, but you are still only getting limited information to act on, and it’s likely to break as soon as the email layout is changed.

So next I plan to send Yodlee a list of nice developer tools they could consider, which would include webhooks and a possible limited API. Lets push the limits!

The publisher interface is what you see on all profile pages and on your home page. It is how you change your status, and can use it to publish link and photos too. The final option is to use one of you applications who offer a publisher.

Because the publisher is now used on the home and profile pages which have different widths, and Facebook have yet to document any explanation of how to make your publisher interface inline easily I spend a bit of time tinkering.

So if your apps publisher interface is currently popping up in a dialog, and you want it inline, there are the steps I know to work. You may need to do more or less.

1) Use a containing div with no width set to it
2) Ensure any tables have width:100% on them
3) Ensure the total maximum width is less than 376px
4) Use as few fixes width as possible

Only once you have completed the steps above, go to your app settings and on the profile tab, change the option to inline instead of dialog. If you are already on inline, switch to dialog, save, and then switch back.

Currently, one big pain in the backside.