Skip to content
PHP
-
PHP
PHP Security: XSS, CSRF, Sessions Tested on PHP 8.5
XSS in four contexts, a CSRF check that passed an empty token, session fixation via real Set-Cookie headers, bcrypt vs argon2id timed, unsafe uploads.
-
PHP
PHP OPcache, JIT and Profiling on PHP 8.5, Measured
OPcache slowed the CLI but made server requests 35× faster; the JIT gave 4.5× on math and 8% on string work. Plus a 900× concat trap and generators.
-
PHP
PHP PDO and SQLite: SQL Injection, Shown Then Fixed
A real injection payload returning every row, then the prepared-statement fix. Fetch modes, IN lists, LIKE escaping and 10k inserts measured on PHP 8.5.
-
PHP
PHP OOP: Classes, Interfaces, Enums and 8.5 Features
readonly classes, traits, static vs self, backed enums, property hooks and the 8.5 pipe, run on PHP 8.5.6 with real errors and object vs array memory measured.
-
PHP
PHP Functions, Forms and the Built-in Server
PHP 8.5 lecture 2, all run for real: typed and named-argument functions, closures, a php -S form tested with curl, XSS without escaping, ?? and require.
-
PHP
PHP Basics: Types, == vs ===, Strings and Arrays
PHP 8.5 basics from real runs: 0 == "a" after PHP 8, strict_types TypeErrors, strlen vs mb_strlen on CJK text, array key casting, the foreach & trap.
↑