Wrapping a call in two microtime(true) readings looks like a measurement and is mostly noise: one iteration, no warm-up, and the timing includes whatever the loop and the…
netstat reads and parses /proc/net/* as text. On a box with thousands of connections that is slow enough to notice, and the tool has been deprecated in favour…
Interpolating user input into a pattern is how a search box becomes a regular expression injection. preg_quote() escapes the metacharacters, but its default output is still not safe…
PSR-4 resolves a class by converting the namespace to a path and checking the filesystem. That is one or more stat calls per class, on every request, for…
:nth-child(2) means “the second child, and only match if it is also this element type”. :nth-of-type(2) means “the second one of this element type among its siblings”. They…
query_posts() replaces the main query after WordPress has already run it, which throws away the first result set, breaks pagination and leaves conditional tags lying about what page…