php – Page 74 – Türker Yıldırım

PHP 5.6 verifies TLS peers by default, and old code notices

NoteSeptember 30, 20143 min read

PHP’s encrypted stream wrappers did not verify certificates. file_get_contents(‘https://…’) on 5.5 opened the connection, negotiated TLS and never checked who was on the other end, which made every…

Laravel 4’s IoC container is the part worth keeping

NoteSeptember 29, 20143 min read

Most of what gets written about Laravel 4 is about the parts you see — routes, Blade, Eloquent. The piece that changed how I write plain PHP is…

Convert a size string like 128M into bytes in PHP

SnippetSeptember 23, 20141 min read

The @ operator costs you even when nothing goes wrong

NoteSeptember 5, 20142 min read

The error suppression operator looks like a targeted silence — this one call, this one expected warning. It is neither targeted nor free. PHP implements it by saving…

array_filter with ARRAY_FILTER_USE_KEY, from 5.6

NoteSeptember 5, 20143 min read

array_filter() has always passed the value to the callback and never the key, so filtering an associative array by its keys meant building the predicate out of three…

foreach by reference leaves the last element bound

NoteAugust 20, 20142 min read

Iterating by reference is the standard way to modify an array in place. What almost nobody remembers is that the loop variable survives the loop, still bound to…

wp_safe_remote_get blocks the addresses wp_remote_get will fetch

NoteAugust 6, 20142 min read

A plugin that fetches a feed URL entered by a user is a server-side request forgery waiting to happen: the URL can be http://127.0.0.1:11211/, or the private address…

APCu is the user cache left over once OPcache takes the opcodes

NoteJuly 30, 20143 min read

APC did two unrelated jobs: it cached compiled opcodes, and it offered a shared-memory key/value store to application code. PHP 5.5 bundles Zend OPcache and takes the first…

A child theme functions.php appends; it does not replace

NoteJuly 23, 20142 min read

Every other file in a child theme replaces its parent equivalent: drop in single.php and the parent’s is not loaded. functions.php is the exception — both are included,…

A namespaced call falls back to the global function, at a cost

NoteJuly 17, 20142 min read

Inside a namespace, an unqualified call to count() is not a call to count(). PHP looks for AppImportcount() first, fails to find it, and only then falls back…