Advanced terms
SameSite Lax Bypass
PHP 7.3+
SameSite=Lax still sends cookies on top-level GET navigations — attackers can exploit this with GET-based state-changing endpoints.
CWE-352 OWASP A1:2021
3mo ago
security advanced
6.5
Second-Order SQL Injection
PHP 5.0+
Malicious data is safely stored in the database but later retrieved and used unsafely in a subsequent SQL query.
CWE-89 OWASP A3:2021
3mo ago
security advanced
8.8
Server-Side Request Forgery (SSRF)
PHP 5.0+
1
The server is tricked into making HTTP requests to internal or unintended destinations on behalf of the attacker.
CWE-918 OWASP A10:2021
3mo ago
security advanced
8.6
Server-Side Template Injection (SSTI)
PHP 5.0+
User input is embedded directly into a server-side template, allowing arbitrary code execution on the server.
CWE-1336 OWASP A3:2021
3mo ago
security advanced
9.8
Side-Channel Attack
4
Information is leaked through observable characteristics of a system — timing, power consumption, or cache behaviour — rather than via direct data access.
CWE-208 OWASP A2:2021
3mo ago
security advanced
5.9
SPL Data Structures
PHP 5.3+
1
PHP's Standard PHP Library provides efficient built-in data structures: SplStack, SplQueue, SplHeap, SplMinHeap, SplDoublyLinkedList, and more.
3mo ago
php advanced
SQL Window Functions
PHP 5.0+
SQL functions that perform calculations across a set of rows related to the current row without collapsing them into a single output row.
3mo ago
database advanced
String Algorithms
2
Efficient string searching (KMP, Boyer-Moore, Rabin-Karp), edit distance (Levenshtein), and compression algorithms — foundational for search, diff tools, and bioinformatics.
3mo ago
algorithms advanced
Supply Chain Attack
PHP 5.0+
1
An attacker compromises a trusted third-party dependency, build tool, or package to inject malicious code into downstream applications.
CWE-1357 OWASP A6:2021
3mo ago
security advanced
9.0
Symmetric Encryption
PHP 7.2+
Encryption where the same key encrypts and decrypts data — fast and suitable for bulk data, but key distribution is the primary challenge.
3mo ago
cryptography advanced