Salerno Labs LLC has been formed to handle my iPhone App and custom software development business. iTookOff, iMega, PupTox, and all my other applications have been transferred to the Salerno Labs company.

Follow Salerno Labs on twitter!

There’s basically two steps to it. First you set:

$config[‘csrf_protection’] = TRUE;

in your application’s config file. One of the effects of this is that every HTTP POST to every controller has to include the csrf token or CI will reject it. You can either print out the token doing something like:

<input type="hidden" name="<?=$this->security->csrf_token_name?>" value="<?=$this->security->csrf_hash?>" />

or simply use the form helper’s form_open to insert both the opening <form> tag and the above automatically.

While possibly not ideal (particularly when javascript is not enabled), here’s how one could setup a jQuery AJAX log out HTML link that still submits a correct CSRF token.
<?= form_open('controller/method', array('id'=>'logoutfrm')); ?>
<!-- maybe stick a noscript logout button in here? could get wonky -->
</form>

<a href="javascript:;" id="logout">Log out</a>

Then in your $(document).ready() you could add:
$('#logout').click(function(){
$.post('/controller/logoutmethod', $('#logoutfrm').serialize(), function(resp){
//handle logout actions or just
document.location.href = document.location.href
}, 'json');
});

Just an example, you may or may not want to do it that way. Thoughts?

The current features include browsing paginated community feeds, personal feeds, specific user feeds, submitting tocks, and following other users.

Since TickTocker has a working SSL certificate, I decided to leverage it for all API communications. Basically put, client applications, which have received special tokens from TickTocker, can request individual user API keys which it can then use to perform commands on a user’s behalf. Currently users must request App Tokens via email but there will be an automated solution coming soon.

By POSTing the username, token, and application id to specially crafted URI’s, commands are performed and responses are returned in JSON format. For logged-in users, there is also a JQuery-based API tester so you can get a better idea of what is being sent and what is being returned.

Let me know what needs to be improved!

AGENT OBVIOUS offers pithy advice for authors, agents, and editors in book publishing. Based on the original “Agent Obvious Tip of the Day” as featured on literary agent Laurie Abkemeier’s Twitter feed, this app offers hundreds of insightful tips for anyone in publishing and for those who aspire to be.

I must say, working with Laurie and Ryan Patrick from Armada Studio was a pleasure. The project really came together and feedback from the community suggests that it is a highly regarded information resource for authors, agents, and publishers.

For more information, please visit the iTookOff Paid Leave Tracker official website.

TickTocker.com – TickTocker is a community-driven social networking and scheduling tool that allows users to share and keep track of events, releases, important dates and deadlines.

My web hosting decided to update my current non-wordpress site to WordPress 3.0 and left it wide open for hackers so my site was taken over for spam. Sorry for that, it’s been fixed, hopefully one day my SEO will recover.

Parts of this site will still appear to be in the old format until I finish porting them over to wordpress.