Comments on: Common PHP Programming Mistakes http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/ Thu, 20 Oct 2011 13:37:10 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: admin http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-34 admin Sun, 03 Jan 2010 20:41:00 +0000 http://dev-the-web.com/blog/?p=199#comment-34 Thanks, it's fixed now :) Thanks, it’s fixed now :)

]]> By: shyzwbtk http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-33 shyzwbtk Tue, 27 Oct 2009 05:28:08 +0000 http://dev-the-web.com/blog/?p=199#comment-33 <strong>shyzwbtk...</strong> shyzwbtk... shyzwbtk…

shyzwbtk…

]]> By: ??????? » [Web] ???? http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-32 ??????? » [Web] ???? Wed, 07 Oct 2009 11:36:39 +0000 http://dev-the-web.com/blog/?p=199#comment-32 [...] Common PHP Programming Mistakes [...] [...] Common PHP Programming Mistakes [...]

]]> By: Julius Beckmann http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-31 Julius Beckmann Sat, 03 Oct 2009 17:02:50 +0000 http://dev-the-web.com/blog/?p=199#comment-31 1. Performance is not relevant here. Sometimes its just stupid to use " instead of ' and the other way round. BTW: Wordpress fucked up your quotes :D 2. That is a real pitfall, only using (int) casting or using intval() saves the day! 3. Good to know, thanks. 4. In first place, if foreach gets at least 1 iteration, everything will be ok. Otherwise the array will be NULL which can lead to serious problems. 5. $_GET, $_POST and $_REQUEST are dangerous. Everybody should be trained to use them correctly! 6. mysql_real_escape_string is only necesary if you have strings, numbers and floats can be "validated" by simply casting them (int)$number; 7. A pitfall for beginners. Every devolper should use error_reporting(E_ALL); while developing. 8. strpos is the functions beginners need to learn that == is not ===. Thanks for this list, hope much people will read and use it! 1. Performance is not relevant here. Sometimes its just stupid to use ” instead of ‘ and the other way round.
BTW: WordPress fucked up your quotes :D

2. That is a real pitfall, only using (int) casting or using intval() saves the day!

3. Good to know, thanks.

4. In first place, if foreach gets at least 1 iteration, everything will be ok. Otherwise the array will be NULL which can lead to serious problems.

5. $_GET, $_POST and $_REQUEST are dangerous. Everybody should be trained to use them correctly!

6. mysql_real_escape_string is only necesary if you have strings, numbers and floats can be “validated” by simply casting them (int)$number;

7. A pitfall for beginners. Every devolper should use error_reporting(E_ALL); while developing.

8. strpos is the functions beginners need to learn that == is not ===.

Thanks for this list, hope much people will read and use it!

]]> By: Common PHP Programming Mistakes | My Web Development Bookmarks http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-30 Common PHP Programming Mistakes | My Web Development Bookmarks Sat, 03 Oct 2009 08:14:31 +0000 http://dev-the-web.com/blog/?p=199#comment-30 [...] See the article here: Common PHP Programming Mistakes [...] [...] See the article here: Common PHP Programming Mistakes [...]

]]> By: Tweets that mention Common PHP Programming Mistakes :Dev-The-Web's Blog -- Topsy.com http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-29 Tweets that mention Common PHP Programming Mistakes :Dev-The-Web's Blog -- Topsy.com Sat, 03 Oct 2009 07:39:47 +0000 http://dev-the-web.com/blog/?p=199#comment-29 [...] This post was mentioned on Twitter by Rich and Abdelrahman Omran. Abdelrahman Omran said: Common PHP Programming Mistakes http://bit.ly/3XIBjw [...] [...] This post was mentioned on Twitter by Rich and Abdelrahman Omran. Abdelrahman Omran said: Common PHP Programming Mistakes http://bit.ly/3XIBjw [...]

]]> By: Posts about Programming from google blogs as of October 1, 2009 « tryfly.com http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-28 Posts about Programming from google blogs as of October 1, 2009 « tryfly.com Fri, 02 Oct 2009 00:03:56 +0000 http://dev-the-web.com/blog/?p=199#comment-28 [...] [...] [...] [...]

]]> By: Keith Casey http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-27 Keith Casey Thu, 01 Oct 2009 20:14:52 +0000 http://dev-the-web.com/blog/?p=199#comment-27 Good God, can #1 die yet? Even in benchmarking, you're talking about microseconds of improvement... so if you're rendering *thousands* of pages every given second, you *might* see it reach into the millisecond range. I'm not sure I see the problem with #4... The nasty thing with #5 is not filtering input. Never trust the user. Nope, never. Good God, can #1 die yet? Even in benchmarking, you’re talking about microseconds of improvement… so if you’re rendering *thousands* of pages every given second, you *might* see it reach into the millisecond range.

I’m not sure I see the problem with #4…

The nasty thing with #5 is not filtering input. Never trust the user. Nope, never.

]]> By: mario http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-26 mario Thu, 01 Oct 2009 18:32:08 +0000 http://dev-the-web.com/blog/?p=199#comment-26 #1 is an idiotic recommendation and has been refuted many times. Double quoted strings are actually faster for common cases and with all recent PHP versions. Btw, the strings are decoded by the tokenizer, not by the parser. #6 sounds as if it were written by a Wordpress user. String escaping is only used by amateur programmers. If you feel the need for it, you are doing something wrong. Go google for "parameterized SQL". Learn it. Use it. #1 is an idiotic recommendation and has been refuted many times. Double quoted strings are actually faster for common cases and with all recent PHP versions. Btw, the strings are decoded by the tokenizer, not by the parser.

#6 sounds as if it were written by a WordPress user. String escaping is only used by amateur programmers. If you feel the need for it, you are doing something wrong.
Go google for “parameterized SQL”. Learn it. Use it.

]]> By: Chris http://www.devtheweb.net/blog/2009/09/30/common-php-programming-mistakes/#comment-25 Chris Thu, 01 Oct 2009 18:21:19 +0000 http://dev-the-web.com/blog/?p=199#comment-25 The single quotes argument really only holds up when you're benchmarking, and at that comparing 0.021 seconds versus 0.024 seconds [made that up but you get my point]... I have an entire site which is echoed from "" strings, and that includes *all* html, and it runs super fast. Although, I almost always use single-quote strings for regexs. [I'm rather tired of seeing this posted as a way to improve php performance, which is almost always hindered by mysql or other services [remote or local]]. Also, great point about #4... if anyone dares to turn on the strict warnings, php will not be a happy camper if you start push()ing an a null var. Plus, if that happens to be in a loop, it resets the var for you :-) The single quotes argument really only holds up when you’re benchmarking, and at that comparing 0.021 seconds versus 0.024 seconds [made that up but you get my point]…

I have an entire site which is echoed from “” strings, and that includes *all* html, and it runs super fast. Although, I almost always use single-quote strings for regexs. [I'm rather tired of seeing this posted as a way to improve php performance, which is almost always hindered by mysql or other services [remote or local]].

Also, great point about #4… if anyone dares to turn on the strict warnings, php will not be a happy camper if you start push()ing an a null var. Plus, if that happens to be in a loop, it resets the var for you :-)

]]>