Intermediate terms
State Pattern
PHP 5.0+
Encapsulates the varying behaviour of an object based on its internal state into separate state objects, eliminating state-based conditionals.
3mo ago
quality intermediate
Static Analysis
PHP 7.1+
2
Automated inspection of source code without execution to find type errors, security issues, dead code, and style violations.
3mo ago
general intermediate
Static Methods & Properties
PHP 5.0+
Class-level methods and properties that exist independently of any instance — useful for utilities and factories, but harmful when overused.
3mo ago
php intermediate
Stored Procedures vs Application Logic
PHP 5.0+
Stored procedures execute business logic inside the database — close to data but hard to test, version, and deploy. Application logic is more maintainable but requires more round-trips.
3mo ago
database intermediate
Strangler Fig Pattern
PHP 5.0+ Incrementally replace a legacy system by routing new requests to a new implementation while the old system handles the rest.
3mo ago
quality intermediate
Strategy Pattern
PHP 5.0+
Defines a family of interchangeable algorithms behind a common interface, allowing the algorithm to be selected at runtime.
3mo ago
general intermediate
strip_tags()
PHP 5.0+
Removes HTML and PHP tags from a string — not a reliable XSS defence on its own.
3mo ago
php intermediate
structuredClone & Deep Copying
ES2021
structuredClone() is the modern native way to deep clone JavaScript objects — replacing JSON.parse(JSON.stringify()) and lodash cloneDeep for most use cases.
3mo ago
javascript intermediate
Subdomain Takeover
A DNS entry points to an unclaimed external service, allowing an attacker to register that service and control the subdomain.
CWE-350 OWASP A5:2021
3mo ago
security intermediate
8.1
Subresource Integrity (SRI)
PHP 5.0+
A browser mechanism that verifies CDN-hosted scripts and stylesheets haven't been tampered with, using a cryptographic hash in the HTML tag.
CWE-829 OWASP A6:2021
3mo ago
security intermediate
Switch Statement Smell
Repeated switch/if-elseif chains on the same type indicator signal a missing polymorphic design.
3mo ago
quality intermediate
Session Fixation
PHP 5.0+
1
An attacker forces a victim to use a known session ID, then hijacks their session after they authenticate.
CWE-384 OWASP A7:2021
3mo ago
security intermediate
8.0
SOLID Principles (Overview)
PHP 5.0+
1
Five object-oriented design principles — SRP, OCP, LSP, ISP, DIP — that together guide towards maintainable, extensible code.
3mo ago
quality intermediate
SQL Injection
PHP 5.1+
1
Unsanitised user input inserted directly into a SQL query, letting attackers read, modify, or delete database data.
CWE-89 OWASP A3:2021
3mo ago
security intermediate
9.8