The Dangers of Using PHP’s eval() Function: Risks and Secure Alternatives
Most PHP backdoors we clean off hacked WordPress sites share one line: eval(). It hands attackers a way to run whatever
php
How to Efficiently Manage PHP Dependencies with Composer
If you’ve ever managed PHP dependencies by hand, you know the drill. Download a zip, drop it in a lib folder,
Understanding and Preventing PHP File Inclusion Vulnerabilities: A Guide to RFI and LFI Attacks
One line of PHP is all it takes. A developer wires a page loader off a URL parameter, ships it, and
PHP mbstring Refactoring: Modern Multibyte String Handling Techniques
You bump an old project to PHP 8, hit refresh, and the page dies: Call to undefined function mbereg(). Nothing wrong
Efficient PHP Array Manipulation: Using array_map() and array_filter() for Cleaner Code
Every PHP developer reaches for foreach. It’s the first loop you learn, and it never really lets you go. Nothing wrong
Replacing ereg_replace() with preg_replace() in PHP for Regex Handling
If you’ve kept an old PHP app alive long enough, you’ve probably hit the wall: you bump the server to PHP
Transitioning from ereg to preg_match in PHP: Best Practices
You upgrade a server to PHP 7, and a script that ran fine for a decade dies with Call to undefined
PHP 8 create_function Replacement
You upgraded a site to PHP 8, hit refresh, and got a white screen. Somewhere in an old plugin sits a
htaccess Header set Cache-Control
Your visitors shouldn’t re-download the same logo on every page. Once their browser has it, let it keep it. That’s what
PHP Declaring Null Variable
You spin up a variable before you have anything to put in it yet. In PHP, that empty slot is NULL.