Home  >  Article  >  类库下载  >  PHP weak type safety issues

PHP weak type safety issues

高洛峰
高洛峰Original
2016-10-10 09:51:501144browse

1. Type conversion problem

 intval();
 
    var_dump(intval('1asdfasd'));  //1
    var_dump(intval('awqw12'));  //0
    var_dump(intval(array()));    //0
    var_dump(intval(array('foo','val'))); //1
    var_dump(intval(0x1A)); //26  十六进制转换
    var_dump(intval('asdfqwer')); //0

intval If the converted value is a string, no error will be returned, but 0 will be returned. If the converted value is an array, there are two situations. When the converted value is an empty array, it will be returned. 0, otherwise it will return 1

Note: PHP uses 32-bit memory to save an integer. 32-bit can represent 4294967296 numbers. If it is signed, it is -2147483647 to 2147483648;

2. The problem of looseness of built-in functions

switch();
 
     $i='3adcd';
     switch($i){
              case 1:
                     echo 'i is 1';
                     break;
              case 2:
                     echo 'i is 2';
                     break;
              case 3:
                     echo 'i is 3';
                     break;
              default:
                    echo 'i is default';
                    break;
     }

The above results will enter switch case 3. Why is this happening? If switch is a numeric type case, switch will convert the parameters into int class. Therefore, when executing the above, $i will be typed first. Conversion, the conversion result is 3, so. . .

in_array();
    $arr = [0,1,2,3,'test'];
    var_dump(in_array('abd',$arr));    // true
    var_dump(in_array('1bc',$arr));    // true

Why is the above execution result like this? Later, through querying the manual, the official statement is that in_array defaults to a loose comparison method, which only compares whether the values ​​are equal, but does not compare whether the types of the values ​​are the same, so the above For this result, you can set the third parameter of the in_array function. Setting it to True is a strict comparison method.

The above are things that we need to pay attention to in our daily development.


Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Related articles

See more