Alan Pinstein apinstein

The safest way to prevent any non-SSL traffic is to not have your web server listen on http/port 80. This way, people cannot even accidentally transmit sensitive data in an insecure fashion.

Unfortunately Heroku doesn't seem to have a switch to DISABLE non-SSL traffic, but at least we can make the non-SSL traffic die an early death and hopefully minimize the amount of non-SSL traffic ever sent.

With apache, this can be done quickly like so:

    # you might need this
    RewriteEngine On

Ensure a consistent execution environment

Always start the script with a shebang line
```
#!/bin/bash
```
Always run the script directly

	$concurrency = 5;
	if ($concurrency > 1)
	{
	print("Starting {$concurrency} workers via pcntl_fork\n");
	$childPids = array();
	$isMain = true;
	foreach (range(1, $concurrency) as $i) {
	$pid = pcntl_fork();
	if ($pid === -1) throw new Exception("Forking failed.");
	if ($pid === 0)

	# useful for ignoring certain codes (ie rsync 24) when running under set -e
	#
	# runIgnoringExitCodes 1,2,3 cmd foo bar
	#
	# be sure to escape the command as needed
	#
	# runIgnoringExitCodes 1,2,3 "cmd foo bar \| grep baz"
	#
	function runIgnoringExitCodes {
	local ignore_codes=(${1//,/ })

	# Custom ImageMagick build for Heroku via Vulcan

	vulcan create vulcan-builder

	curl -O http://www.imagemagick.org/download/legacy/ImageMagick-6.7.4-10.tar.gz
	tar zxvf ImageMagick-6.7.4-10.tar.gz
	vulcan build -v -s ./ImageMagick-6.7.4-10 -c "./configure --prefix /app/vendor/ImageMagick-6.7.4-10 '--disable-shared' '--with-quantum-depth=8' '--with-lcms' '--with-gslib' --'with-fontconfig' && make install" -p /app/vendor/ImageMagick-6.7.4-10
	# ==> downloads output to /tmp/ImageMagick-6.7.tgz

	cd /path/to/project


	<?php

	$fromBranch = 'master';
	$toBranch = 'videoClips-integration';

	// find common ancestor
	$commonAncestor = commonAncestor($fromBranch, $toBranch);
	print "Common ancestor of {$fromBranch}..{$toBranch} is {$commonAncestor}\n";

	<?php

	manifest(array(
	"pear", "apinstein.pearfarm.org/mp", "1.0.2",
	));

	#!/bin/sh
	echo ">> STDOUT and STDERR"
	(echo 'this is stdout' && this_is_stderr)
	echo ">> STDERR only"
	(echo 'this is stdout' && this_is_stderr) 1> /dev/null
	echo ">> STDOUT only"
	(echo 'this is stdout' && this_is_stderr) 2> /dev/null
	echo ">> NOTHING"
	(echo 'this is stdout' && this_is_stderr) > /dev/null 2>&1