← Home ← Codex ← DEBT
Browse by Category
+ added · updated 7d
✕ Clear A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
HTTP Cookies in PHP PHP 7.3+
Cookies are small key-value pairs sent by the server via Set-Cookie and echoed back by the browser on every request — PHP sets them with setcookie() before any output, with Secure, HttpOnly, and SameSite flags controlling safety.
2mo ago php beginner
HTML lang Attribute
The lang attribute on <html> declares the page's primary language — required for screen readers to select the correct voice profile and pronunciation rules, and for WCAG 2.1 compliance.
2mo ago accessibility beginner
HTML Meta Tags
Tags in <head> that provide page metadata — title, description, viewport, Open Graph — for browsers, search engines, and social platforms.
2mo ago frontend beginner
Health Check Patterns
Health checks report service status to load balancers and orchestrators — /health/live (is the process running?), /health/ready (can it serve traffic?), and deep health checks for dependencies.
2mo ago observability beginner
HTTPS & TLS
HTTP over TLS — encrypts all traffic between browser and server, preventing eavesdropping, man-in-the-middle attacks, and tampering. Required for cookies, modern APIs, and all production web applications.
2mo ago security beginner
Headers Already Sent Error PHP 5.0+
PHP sends HTTP headers on first output — any echo, whitespace, or BOM before header() causes 'Cannot modify header information — headers already sent'.
2mo ago php beginner
Hardcoded Credentials PHP 5.0+
Passwords, API keys, or tokens written directly into source code — permanently exposed to anyone with repository access and impossible to rotate without a code change.
3mo ago security beginner
Hofstadter's Law
"It always takes longer than you expect, even when you take Hofstadter's Law into account" — software estimation is systematically and recursively optimistic.
3mo ago general beginner
HTML Meta Tags & SEO PHP 5.0+ 🧠 1
Essential meta tags for search engine visibility and social sharing — title, description, canonical, Open Graph, Twitter Card, and structured data.
3mo ago frontend beginner
HTTP in Python — requests & httpx Python 3.7+
requests is the standard sync HTTP library; httpx adds async support, HTTP/2, and a similar API — both far more ergonomic than urllib.
3mo ago python beginner
Hardcoded Credentials 🧠 1
Secrets, passwords, or API keys embedded directly in source code can be extracted from repositories or compiled binaries.
CWE-798 OWASP A2:2021
3mo ago security beginner 9.8
Diagram: Health Check Endpoints Health Check Endpoints PHP 5.0+
Dedicated endpoints that report application and dependency status, enabling load balancers, container orchestrators, and monitors to route traffic correctly.
3mo ago devops beginner
Heredoc / Nowdoc PHP 5.0+
Heredoc (<<<EOT) and Nowdoc (<<<'EOT') provide multi-line string syntax; Nowdoc is the single-quoted equivalent with no variable interpolation.
3mo ago php beginner
HTML Forms — Validation & Accessibility HTML5
Native HTML form validation, input types, and accessibility patterns — using browser built-ins before reaching for JavaScript.
3mo ago frontend beginner
HTML Injection PHP 5.0+
Unsanitised user input rendered as raw HTML allows attackers to inject arbitrary markup, defacing pages or phishing users.
CWE-80 OWASP A3:2021
3mo ago security beginner 6.1
htmlspecialchars() PHP 5.0+
Converts HTML special characters to entities — the primary defence against XSS in HTML output contexts.
3mo ago php beginner
HTTP Security Headers PHP 5.0+
A set of HTTP response headers that instruct browsers to enforce security policies, reducing XSS, clickjacking, and data leakage risks.
CWE-16 OWASP A5:2021
3mo ago security beginner
Diagram: HTTP Status Codes HTTP Status Codes
Three-digit codes in HTTP responses that indicate whether a request succeeded, failed, or requires further action.
3mo ago networking beginner
HTTP Strict Transport Security (HSTS) PHP 5.0+
A response header that instructs browsers to always connect via HTTPS for a specified duration, preventing protocol downgrade attacks.
CWE-319 OWASP A5:2021
3mo ago security beginner
✓ schema.org compliant