search
Home类库下载PHP类库PHP weak type safety issues

PHP weak type safety issues

Oct 10, 2016 am 09:51 AM

1. Type conversion problem

 intval();
 
    var_dump(intval('1asdfasd'));  //1
    var_dump(intval('awqw12'));  //0
    var_dump(intval(array()));    //0
    var_dump(intval(array('foo','val'))); //1
    var_dump(intval(0x1A)); //26  十六进制转换
    var_dump(intval('asdfqwer')); //0

intval If the converted value is a string, no error will be returned, but 0 will be returned. If the converted value is an array, there are two situations. When the converted value is an empty array, it will be returned. 0, otherwise it will return 1

Note: PHP uses 32-bit memory to save an integer. 32-bit can represent 4294967296 numbers. If it is signed, it is -2147483647 to 2147483648;

2. The problem of looseness of built-in functions

switch();
 
     $i='3adcd';
     switch($i){
              case 1:
                     echo 'i is 1';
                     break;
              case 2:
                     echo 'i is 2';
                     break;
              case 3:
                     echo 'i is 3';
                     break;
              default:
                    echo 'i is default';
                    break;
     }

The above results will enter switch case 3. Why is this happening? If switch is a numeric type case, switch will convert the parameters into int class. Therefore, when executing the above, $i will be typed first. Conversion, the conversion result is 3, so. . .

in_array();
    $arr = [0,1,2,3,'test'];
    var_dump(in_array('abd',$arr));    // true
    var_dump(in_array('1bc',$arr));    // true

Why is the above execution result like this? Later, through querying the manual, the official statement is that in_array defaults to a loose comparison method, which only compares whether the values ​​are equal, but does not compare whether the types of the values ​​are the same, so the above For this result, you can set the third parameter of the in_array function. Setting it to True is a strict comparison method.

The above are things that we need to pay attention to in our daily development.


Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

VSCode Windows 64-bit Download

VSCode Windows 64-bit Download

A free and powerful IDE editor launched by Microsoft

DVWA

DVWA

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

PhpStorm Mac version

PhpStorm Mac version

The latest (2018.2.1) professional PHP integrated development tool

SublimeText3 English version

SublimeText3 English version

Recommended: Win version, supports code prompts!

Atom editor mac version download

Atom editor mac version download

The most popular open source editor