Advanced terms
Swoole / OpenSwoole
PHP 7.4+
2
PHP extension with coroutines, async I/O, and built-in HTTP server — handling thousands of concurrent connections in one process.
6mo ago
Performance advanced
Symbol & the Iterator Protocol
ES2015
Symbol.iterator makes objects iterable with for...of — implementing the iterator protocol enables custom data structures to participate in all iteration contexts.
6mo ago
JavaScript advanced
SameSite Lax Bypass
PHP 7.3+
SameSite=Lax still sends cookies on top-level GET navigations — attackers can exploit this with GET-based state-changing endpoints.
CWE-352 OWASP A1:2021
6mo ago
Security advanced
6.5
Second-Order SQL Injection
PHP 5.0+
Malicious data is safely stored in the database but later retrieved and used unsafely in a subsequent SQL query.
CWE-89 OWASP A3:2021
6mo ago
Security advanced
8.8
Server-Side Request Forgery (SSRF)
PHP 5.0+
3
The server is tricked into making HTTP requests to internal or unintended destinations on behalf of the attacker.
CWE-918 OWASP A10:2021
6mo ago
Security advanced
8.6
Server-Side Template Injection (SSTI)
PHP 5.0+
User input is embedded directly into a server-side template, allowing arbitrary code execution on the server.
CWE-1336 OWASP A3:2021
6mo ago
Security advanced
9.8
Side-Channel Attack
5
Information is leaked through observable characteristics of a system — timing, power consumption, or cache behaviour — rather than via direct data access.
CWE-208 OWASP A2:2021
6mo ago
Security advanced
5.9
SPL Data Structures
PHP 5.3+
3
PHP's Standard PHP Library provides efficient built-in data structures: SplStack, SplQueue, SplHeap, SplMinHeap, SplDoublyLinkedList, and more.
6mo ago
PHP advanced
SQL Window Functions
PHP 5.0+
SQL functions that perform calculations across a set of rows related to the current row without collapsing them into a single output row.
6mo ago
Database advanced
String Algorithms
3
Efficient string searching (KMP, Boyer-Moore, Rabin-Karp), edit distance (Levenshtein), and compression algorithms — foundational for search, diff tools, and bioinformatics.
6mo ago
Algorithms advanced
Supply Chain Attack
PHP 5.0+
2
An attacker compromises a trusted third-party dependency, build tool, or package to inject malicious code into downstream applications.
CWE-1357 OWASP A6:2021
6mo ago
Security advanced
9.0
Symmetric Encryption
PHP 7.2+
2
Encryption where the same key encrypts and decrypts data — fast and suitable for bulk data, but key distribution is the primary challenge.
6mo ago
Cryptography advanced