46 useful PHP code snippets

#1

Post by koonk » Thu, Aug 06, 2015, 3:03 PM UTC

46 useful PHP code snippets
blog.koonk.com

Re: 46 useful PHP code snippets

#2

Post by kodablah » Thu, Aug 06, 2015, 3:40 PM UTC

I stopped at #3...using stripslashes is not an acceptable deterrent by any means. I am also unsure how htmlentities has anything to do with SQL injection...maybe you meant XSS prevention? I chose not to read the rest.

Re: 46 useful PHP code snippets

#3

Post by DrinkWater » Thu, Aug 06, 2015, 3:42 PM UTC

They are NOT useful, rather harmful. Oh Boy

Re: 46 useful PHP code snippets

#4

Post by martinczerwi » Thu, Aug 06, 2015, 3:43 PM UTC

46 bad example PHP code snippets

Re: 46 useful PHP code snippets

#5

Post by M4v3R » Thu, Aug 06, 2015, 3:43 PM UTC

kodablah wrote: post #2

I stopped at #3...using stripslashes is not an acceptable deterrent by any means. I am also unsure how htmlentities has anything to do with SQL injection...maybe you meant XSS prevention? I chose not to read the rest.

Yeah, just logged in to say that. Author probably never heard of PDO and parametrized queries...

Re: 46 useful PHP code snippets

#6

Post by agumonkey » Thu, Aug 06, 2015, 3:43 PM UTC

kodablah wrote: post #2

I stopped at #3...using stripslashes is not an acceptable deterrent by any means. I am also unsure how htmlentities has anything to do with SQL injection...maybe you meant XSS prevention? I chose not to read the rest.

Oh wow. So happy not having to read such things anymore.

Re: 46 useful PHP code snippets

#7

Post by Kenji » Thu, Aug 06, 2015, 3:44 PM UTC

kodablah wrote: post #2

I stopped at #3...using stripslashes is not an acceptable deterrent by any means. I am also unsure how htmlentities has anything to do with SQL injection...maybe you meant XSS prevention? I chose not to read the rest.

100% agreed, I have the same sentiment. In the year 2015, everyone should know about injections and how to use prepared statements and similar insertion mechanisms that clearly separate query from data. A big no-no to solve anything with the presented function.

Re: 46 useful PHP code snippets

#8

Post by oneeyedpigeon » Thu, Aug 06, 2015, 3:45 PM UTC

This doesn't look like the most professionally put together set of snippets I've ever seen. For example:

  function is_validemail($email)
  {
      $check = 0;

      if(filter_var($email,FILTER_VALIDATE_EMAIL))
      {
          $check = 1;
      }

      return $check;
  }

is a long-winded way of doing:

  function is_validemail($email)
  {
      return filter_var($email, FILTER_VALIDATE_EMAIL) ? 1 : 0;
  }

Re: 46 useful PHP code snippets

#9

Post by hiou » Thu, Aug 06, 2015, 3:46 PM UTC

Rocking compact() niiiice. Probably helpful for your average Wordpress developer, beyond that kind of yikes.

Re: 46 useful PHP code snippets

#10

Post by Raed667 » Thu, Aug 06, 2015, 3:47 PM UTC

20. mysql_connect is depreciated, you should use mysqli_connect