Php - Revision history

Tim at 14:58, 5 October 2015

2015-10-05T14:58:18Z

← Older revision		Revision as of 10:58, 5 October 2015
Line 106:		Line 106:

	session_register()		session_register()

			What is the best way to change the key without changing the value of a PHP array element?

			$arr[$newkey] = $arr[$oldkey]; unset($arr[$oldkey]);
	===competency===		===competency===
	http://www.techinterviews.com/php-interview-questions-and-answers		http://www.techinterviews.com/php-interview-questions-and-answers

2015-10-05T14:54:36Z

← Older revision		Revision as of 10:54, 5 October 2015
Line 3:		Line 3:
	function_exists()		function_exists()
	setcookie(“OrderCookie”,34);		setcookie(“OrderCookie”,34);
			mail($to,$subject,$body)
	empty()		empty()
	if(!empty($p)){ // if $p is not empty		if(!empty($p)){ // if $p is not empty
Line 102:		Line 103:
	multipart/form-d		multipart/form-d

			Which of the following is used to maintain the value of a variable over different pages?

			session_register()
	===competency===		===competency===
	http://www.techinterviews.com/php-interview-questions-and-answers		http://www.techinterviews.com/php-interview-questions-and-answers

2015-10-05T14:52:42Z

2015-10-05T14:52:26Z

best practice

← Older revision		Revision as of 10:52, 5 October 2015
Line 101:		Line 101:

	multipart/form-d		multipart/form-d

	===competency===		===competency===
	http://www.techinterviews.com/php-interview-questions-and-answers		http://www.techinterviews.com/php-interview-questions-and-answers

2015-10-05T14:51:12Z

← Older revision		Revision as of 10:51, 5 October 2015
Line 97:		Line 97:
	$e = new Exception;		$e = new Exception;
	var_dump($e->getTraceAsString());		var_dump($e->getTraceAsString());

			What enctype is required for file uploads to work?

			multipart/form-d
	===competency===		===competency===
	http://www.techinterviews.com/php-interview-questions-and-answers		http://www.techinterviews.com/php-interview-questions-and-answers

2015-10-05T14:48:48Z

← Older revision		Revision as of 10:48, 5 October 2015
Line 1:		Line 1:
	===functions to know===		===functions to know===
	func_num_args()		func_num_args()
			function_exists()

	empty()		empty()
Line 93:		Line 94:
	}		}

			print out call stack
			$e = new Exception;
			var_dump($e->getTraceAsString());
	===competency===		===competency===
	http://www.techinterviews.com/php-interview-questions-and-answers		http://www.techinterviews.com/php-interview-questions-and-answers

2015-10-05T14:31:48Z

← Older revision		Revision as of 10:31, 5 October 2015
Line 75:		Line 75:
	array functions http://www.w3schools.com/php/php_ref_array.asp		array functions http://www.w3schools.com/php/php_ref_array.asp
	error_reporting(E_ALL);		error_reporting(E_ALL);
			shell_exec()

	PHP provides useful magic constants for fetching the current line number (__LINE__), file path (__FILE__), directory path (__DIR__), function name (__FUNCTION__), class name (__CLASS__), method name (__METHOD__) and namespace (__NAMESPACE__).		PHP provides useful magic constants for fetching the current line number (__LINE__), file path (__FILE__), directory path (__DIR__), function name (__FUNCTION__), class name (__CLASS__), method name (__METHOD__) and namespace (__NAMESPACE__).

2015-10-05T14:24:04Z

best practice

← Older revision		Revision as of 10:24, 5 October 2015
Line 82:		Line 82:
	The best and safest way is to use mysql_real_escape_string() for all database before it is added to the database. This function makes all strings safe in terms of quotes and other functions that can harm your database or contain malicious code, so use it to be sure you have taken the first step against protection of your data. Another thing you can do is validate all POST and GET strings, never use $_REQUEST, and make sure all form submitted data is of the right type and value before adding it to a database query.		The best and safest way is to use mysql_real_escape_string() for all database before it is added to the database. This function makes all strings safe in terms of quotes and other functions that can harm your database or contain malicious code, so use it to be sure you have taken the first step against protection of your data. Another thing you can do is validate all POST and GET strings, never use $_REQUEST, and make sure all form submitted data is of the right type and value before adding it to a database query.

			$unsafe_variable = $_POST["user-input"];
			$safe_variable = mysql_real_escape_string($unsafe_variable);
			mysql_query("INSERT INTO table (column) VALUES ('" . $safe_variable . "')");
	use PDO		use PDO
	$stmt = $pdo->prepare('SELECT * FROM employees WHERE name = :name');		$stmt = $pdo->prepare('SELECT * FROM employees WHERE name = :name');

2015-10-05T14:22:22Z

best practice

← Older revision		Revision as of 10:22, 5 October 2015
Line 84:		Line 84:
	use PDO		use PDO
	$stmt = $pdo->prepare('SELECT * FROM employees WHERE name = :name');		$stmt = $pdo->prepare('SELECT * FROM employees WHERE name = :name');

	$stmt->execute(array('name' => $name));		$stmt->execute(array('name' => $name));

	foreach ($stmt as $row) {		foreach ($stmt as $row) {
	// do something with $row		// do something with $row

2015-10-05T14:22:07Z

best practice

← Older revision		Revision as of 10:22, 5 October 2015
Line 81:		Line 81:
	===best practice===		===best practice===
	The best and safest way is to use mysql_real_escape_string() for all database before it is added to the database. This function makes all strings safe in terms of quotes and other functions that can harm your database or contain malicious code, so use it to be sure you have taken the first step against protection of your data. Another thing you can do is validate all POST and GET strings, never use $_REQUEST, and make sure all form submitted data is of the right type and value before adding it to a database query.		The best and safest way is to use mysql_real_escape_string() for all database before it is added to the database. This function makes all strings safe in terms of quotes and other functions that can harm your database or contain malicious code, so use it to be sure you have taken the first step against protection of your data. Another thing you can do is validate all POST and GET strings, never use $_REQUEST, and make sure all form submitted data is of the right type and value before adding it to a database query.

			use PDO
			$stmt = $pdo->prepare('SELECT * FROM employees WHERE name = :name');

			$stmt->execute(array('name' => $name));

			foreach ($stmt as $row) {
			// do something with $row
			}

	===competency===		===competency===