Category archives: Web Development

Google Adds YouTube-style Embedded Maps

Google has finally provided the long awaited feature to easily embed maps into existing web pages. Before this feature was added, users had to have to make use of the Google Maps API which involved extensive amounts of JavaScript to embed a map on a site. Adding advanced features such as a Get Directions form or custom icons required even more JavaScript.

Therefore, over a year ago I created an extensive tutorial to ease the process for the average website creator to add a nice Google Map to their own site. This post brought quite a bit of traffic to my blog and propelled my site to be the #1 search result on Google for the search term “Google map directions tutorial.”

I’m sure this new embed feature from Google will cut down on the number of people using my tutorial, but I’m still glad to see Google release this new feature. Who knows, I may have to write another tutorial detailing how to get the most out of the embed feature. You’ll just have to wait and see.

Some people may still require the Google Maps API, but I’m not sure why they would. They would have to be doing some really complex map stuff to not be able to accomplish the same feats with embed functionality.

Below I’ve included a map I quickly created to show of this new feature.


View Larger Map.

Before I forget, you can read more about this on Google Lat Long Blog.

AJAX Security Considerations…

As many of my blog readers know AJAX is a very popular web development technology right now. AJAX offers web developers the ability to provide desktop application like functionality in web applications. Without AJAX many of the tools I use every day such as GMail, Google Reader, and Google Maps just wouldn’t be near as fun or easy to use. Don’t worry, I do occasionally use non-Google sites that make heavy use of AJAX, I just can’t think of them right now.

However, as recently reported by security researches from SPI Dynamics at the Blackhat USA 2007 security conference, the benefits of AJAX don’t come without significant security risks.

One of the main problems with AJAX is that a lot of traditional server side code is now executed on the client side. This provides would be hackers with a ton of insight on how your application functions. Once equipped with these details it is much easier for hackers to trick web applications into doing things they’re not designed to do.

The presenters at Blackhat showed the audience how a mock AJAX travel site could be tricked into selling tickets cheaper and also tricked into blocking ticket sales for the same airplane. I think these two examples show exactly how important it is for web developers to secure AJAX.

My recommendation on this subject is to not stop developing with AJAX but to take the time and effort to learn about the security problems associated with this web development technique and the ways to avoid the common pitfalls–doing so will make the web a safer place for each of us.

Just so you know where to start more about AJAX security, Darknet offers some good insight on securing AJAX by explaining some of the common ways to attack AJAX applications.

[via Ars Technica]

Google Maps API Tutorial

Before you go through all the complexities of this tutorial, I recommend that you check out a recent Google Maps development I’ve posted about. I think you’ll find it quite helpful!

In response to a post on the Godbit forum, I created this brief Google Maps API tutorial. I believe every Church website, and every business for that matter, should provide a map and directions. The Google API lets us take that concept to a new level.
After completion of this tutorial you should be able to:

  • Have your own interactive map (I guess that’s a given since that is what this tutorial is about)
  • Set the default zoom level
  • Locate your geo coordinates
  • Center your map on those coordinates
  • Place a marker on those coordinates
  • Have a custom pop-up with a form to get To Here and From Here Directions
  • Know where to go to learn more

Want to see an example before we start?
You can also see this on a site I created at Vance Auto Sales.
Continue reading