Inspirations, captions, ideas and notes.

Archive for December, 2007

10 common web design mistakes

Suddenly remembered an article from Techrepublic which I read a couple of months ago on the above topic.  Definitely something beginners and seasoned web designers need to remember:

  • Failing to provide information that describes your web site
  • Skipping Alt and Title tags
  • Changing URLs for archived pages
  • Not dating your content
  • Creating busy, crowded pages
  • Going overboard with images
  • Implementing link indirection, interception or redirection
  • Making new content difficult to recognise or find
  • Displaying thumbnailsthat are too small to be helpful
  • Forgoing web page titles

You can read this article at: Techrepublic, which is based on another article also available at Techrepublic (10 ways to improve the design of your commercial web site).

In addition, should also be avoided:

  • Using more than 4 font types in 1 page
  • Having more than 5 animated banners
  • Pure flash sites
  • Presenting content only in images
  • Using high resolution images and videos that require long download time.
  • fixing your font size by px, rendering the browser resize option useless

Tabbed content using CSS

When there is just far too much content to squeeze into 1 page, sometimes it helps to divide the page up into tabs. Although this may not be so appropriate for textual web content, this approach is definitely useful if you are in the middle of screen design for a complex web application. For instance, in an enquiry screen whereby the information to be displayed has a complex-multilevel parent-child relationship, a multi-layer tab approach can help to make the steps appear clearer.

We’ve been doing some research into the display of tabbed content lately and came across the following resource:-

The Dynamic Drive one was my favourite, although we ended up using our own afterall. But thanks goes to these guys for sharing their solutions and inspiration with us.

There are lots of css tabbed solutions out there, but these stood out to me.

Trapping malicious codes in your cfm sites

I came across this sometime ago, but complete forgot about it. If you are looking for ways to trap malicious codes in your cfm sites, have a look at this:

Function isHackAttempt(MaliciousCode) {
//Set the Regular Expression used and any local vars
Var strRegex = "(%)|(-- )|(' )|(script)|()|(%3c)|(%3e)|(script)|(SELECT)|(UPDATE) |(INSERT) |(DELETE) |(DROP)|(GRANT) |(REVOKE)|(UNION)|(<)|(>)";
Var blnCodeDetection = False;

//If argument is a Structure loop through it
If (IsStruct(MaliciousCode)) {
For (Field in MaliciousCode) {
If (REFindNoCase(strRegex, MaliciousCode[Field])) {
blnCodeDetection = True; //Malicious code was found, set flag var
}//If argument is an Array loop through it
} Else If (IsArray(MaliciousCode)) {
For (x = 1; x LTE ArrayLen(MaliciousCode); x = x + 1) {
If (REFindNoCase(strRegex, MaliciousCode[x])) {
blnCodeDetection = True; //Malicious code was found, set flag var
}//If none of the above its an individual variable
} Else {
If (REFindNoCase(strRegex, MaliciousCode[Field])) {
blnCodeDetection = True; //Malicious code was found, set flag var
Return blnCodeDetection; //Return the boolean result

Then all you need to do is figure out what you want to do with the errors that have been trapped – e.g. if isHackAttempt is true, display an error message.

Place the above code in your application.cfm and customise according to your specific needs.

Interesting quote…

To live is the rarest thing in the world. Most just exist, that is all. – Oscar Wilde

We are limited, not by our abilities, but by our vision. – Anonymous

For more, go to