Tag: php
Variable Variables ($$var) Risks
PHP 3.0+
$$var creates a variable whose name is the value of $var — using it with user input allows arbitrary variable access/creation and is effectively a backdoor.
3mo ago
Security advanced
Verbose Type Functions
PHP 7.0+
Using is_array(), is_string(), intval(), strval() where type declarations, casting, or native operators express intent more concisely and safely.
3mo ago
PHP beginner