Analyzers Documentation

Constant Definition

[Since 0.8.4] - [ -P Classes/ConstantDefinition ] - [ Online docs ]

List of class constants being defined.

<?php 

<?php /*A*/// traditional way of making constants

define('aConstant', 1);



// modern way of making constants

const anotherConstant = 2;



class foo {

    // Not a constant, a class constant.

    const aClassConstant = 3;

}?>

<?php 

<?php /*A*///Empty class

class foo extends bar {}



//Not an empty class

class foo2 extends bar {

    const FOO = 2;

}



//Not an empty class, as derived from Exception

class barException extends \Exception {}?>

<?php 

class foo{

    // PHP Magic method, called when cloning an object.

    function __clone() {}

}?>

<?php 

class x {

        static public function sm( ) { echo __METHOD__.\n; }

        public public sm( ) { echo __METHOD__.\n; }

    } 

    

    x::sm( ); // echo x::sm 

    

    // Dynamic call

    ['x', 'sm']();

    [\x::class, 'sm']();



    $s = 'x::sm';

    $s();?>

<?php 

class x {

        public function foo( ) { self::bar() }

        public function bar( ) { echo __METHOD__.\n; }

    }?>

<?php 

namespace {

    // Global namespace is important

    class foo {

        function foo() {

            // This acts as the old-style constructor, and is reported by PHP

        }

    }



    class bar {

        function __construct() { }

        function bar() {

            // This doesn't act as constructor, as bar has a __construct() method

        }

    }

}



namespace Foo\Bar{

    class foo {

        function foo() {

            // This doesn't act as constructor, as bar is not in the global namespace

        }

    }

}?>

<?php 

class foo {

    static public function staticMethod() {

        

    }

    

    public function notStaticMethod() {

    

    }

           

    private function method() {

        // This is not a property

        new static();

    }

}?>

<?php 

class x {

        static function y( ) {}

    }

    

    $z = new x( );

    

    $z->y( ); // Readability : no one knows it is a static call

    x::y( );  // Readability : here we know/*B*/ ?>?>

<?php 

class foo {

    static public $staticProperty = 1;

           public $notStaticProperty = 2;

           

    private function method() {

        // This is not a property

        new static();

    }

}



function bar() {

    // This is not a static property

    static $staticVariable;

    

    //....

}?>

<?php 

$a1 = true;

$a2 = true;

$a3 = true;

$a4 = true;

$a5 = true;

$a6 = true;

$a7 = true;

$a8 = true;

$a9 = true;

$a10 = true;



// This convention is inconsistence with the rest

$b1 = TRUE;?>

<?php 

echo 'This code is in file '__FILE__.', line '.__LINE__;?>

<?php 

const MY_CONST = 'Hello';



// PHP_EOL (native PHP Constant)

// MY_CONST (custom constant, not reported)

echo PHP_EOL . MY_CONST;?>

<?php 

class myException extends \Exception {}



// A defined exception

throw new myException();



// not a defined exception : it is already defined. 

throw new \RuntimeException();?>

<?php 

$bar = 'BAR';

   apc_add('foo', $bar);

   var_dump(apc_fetch('foo'));

   echo PHP_EOL;



   $bar = 'NEVER GETS SET';

   apc_add('foo', $bar);

   var_dump(apc_fetch('foo'));

   echo PHP_EOL;?>

<?php 

echo bcpow('2', '123'); 

//10633823966279326983230456482242756608



echo 2**123;

//1.0633823966279E+37/*B*/ ?>?>

ext/bzip2

[Since 0.8.4] - [ -P Extensions/Extbzip2 ] - [ Online docs ]

Extension ext/bzip2.

Bzip2 Functions for PHP.

<?php 

$file = '/tmp/foo.bz2';

$bz = bzopen($file, 'r') or die('Couldn\'t open $file for reading');



bzclose($bz);?>

ext/calendar

[Since 0.8.4] - [ -P Extensions/Extcalendar ] - [ Online docs ]

Extension ext/calendar.

The calendar extension presents a series of functions to simplify converting between different calendar formats.

<?php 

$number = cal_days_in_month(CAL_GREGORIAN, 8, 2003); // 31

echo "There were {$number} days in August 2003";?>

ext/crypto

[Since 0.8.4] - [ -P Extensions/Extcrypto ] - [ Online docs ]

Extension ext/crypto (PECL).

Objective PHP binding of OpenSSL Crypto library.

<?php 

use Crypto\Cipher;

use Crypto\AlgorihtmException;

$algorithm = 'aes-256-cbc';

if (!Cipher::hasAlgorithm($algorithm)) {

    die('Algorithm $algorithm not found' . PHP_EOL);

}

try {

    $cipher = new Cipher($algorithm);

    // Algorithm method for retrieving algorithm

    echo 'Algorithm: ' . $cipher->getAlgorithmName() . PHP_EOL;

    // Params

    $key_len = $cipher->getKeyLength();

    $iv_len = $cipher->getIVLength();

    

    echo 'Key length: ' . $key_len . PHP_EOL;

    echo 'IV length: '  . $iv_len . PHP_EOL;

    echo 'Block size: ' . $cipher->getBlockSize() . PHP_EOL;

    // This is just for this example. You should never use such key and IV!

    $key = str_repeat('x', $key_len);

    $iv = str_repeat('i', $iv_len);

    // Test data

    $data1 = 'Test';

    $data2 = 'Data';

    $data = $data1 . $data2;

    // Simple encryption

    $sim_ct = $cipher->encrypt($data, $key, $iv);

    

    // init/update/finish encryption

    $cipher->encryptInit($key, $iv);

    $iuf_ct  = $cipher->encryptUpdate($data1);

    $iuf_ct .= $cipher->encryptUpdate($data2);

    $iuf_ct .= $cipher->encryptFinish();

    // Raw data output (used base64 format for printing)

    echo 'Ciphertext (sim): ' . base64_encode($sim_ct) . PHP_EOL;

    echo 'Ciphertext (iuf): ' . base64_encode($iuf_ct) . PHP_EOL;

    // $iuf_out == $sim_out

    $ct = $sim_ct;

    // Another way how to create a new cipher object (using the same algorithm and mode)

    $cipher = Cipher::aes(Cipher::MODE_CBC, 256);

    // Simple decryption

    $sim_text = $cipher->decrypt($ct, $key, $iv);

    

    // init/update/finish decryption

    $cipher->decryptInit($key, $iv);

    $iuf_text = $cipher->decryptUpdate($ct);

    $iuf_text .= $cipher->decryptFinish();

    // Raw data output ($iuf_out == $sim_out)

    echo 'Text (sim): ' . $sim_text . PHP_EOL;

    echo 'Text (iuf): ' . $iuf_text . PHP_EOL;

}

catch (AlgorithmException $e) {

    echo $e->getMessage() . PHP_EOL;

}?>

ext/ctype

[Since 0.8.4] - [ -P Extensions/Extctype ] - [ Online docs ]

Extension ext/ctype.

Ext/ctype checks whether a character or string falls into a certain character class according to the current locale.

<?php 

$strings = array('AbCd1zyZ9', 'foo!#$bar');

foreach ($strings as $testcase) {

    if (ctype_alnum($testcase)) {

        echo "The string $testcase consists of all letters or digits.\n";

    } else {

        echo "The string $testcase does not consist of all letters or digits.\n";

    }

}?>

ext/curl

[Since 0.8.4] - [ -P Extensions/Extcurl ] - [ Online docs ]

Extension curl.

PHP supports libcurl, a library created by Daniel Stenberg. It allows the connection and communication to many different types of servers with many different types of protocols.

<?php 

$ch = curl_init("http://www.example.com/");

$fp = fopen("example_homepage.txt", "w");



curl_setopt($ch, CURLOPT_FILE, $fp);

curl_setopt($ch, CURLOPT_HEADER, 0);



curl_exec($ch);

curl_close($ch);

fclose($fp);?>

ext/date

[Since 0.8.4] - [ -P Extensions/Extdate ] - [ Online docs ]

Extension ext/date.

These functions allows the manipulation of date and time from the server where the PHP scripts are running.

<?php 

$dt = new DateTime('2015-11-01 00:00:00', new DateTimeZone('America/New_York'));

echo 'Start: ', $dt->format('Y-m-d H:i:s P'), PHP_EOL;

$dt->add(new DateInterval('PT3H'));

echo 'End:   ', $dt->format('Y-m-d H:i:s P'), PHP_EOL;?>

ext/dba

[Since 0.8.4] - [ -P Extensions/Extdba ] - [ Online docs ]

Extension ext/dba.

These functions build the foundation for accessing Berkeley DB style databases.

<?php 

$id = dba_open('/tmp/test.db', 'n', 'db2');



if (!$id) {

    echo 'dba_open failed'.PHP_EOL;

    exit;

}



dba_replace('key', 'This is an example!', $id);



if (dba_exists('key', $id)) {

    echo dba_fetch('key', $id);

    dba_delete('key', $id);

}



dba_close($id);?>

ext/dom

[Since 0.8.4] - [ -P Extensions/Extdom ] - [ Online docs ]

Extension Document Object Model.

The DOM extension allows the manipulation of XML documents through the DOM API with PHP.

<?php 

$dom = new DOMDocument('1.0', 'utf-8');



$element = $dom->createElement('test', 'This is the root element!');



// We insert the new element as root (child of the document)

$dom->appendChild($element);



echo $dom->saveXML();?>

ext/enchant

[Since 0.8.4] - [ -P Extensions/Extenchant ] - [ Online docs ]

Extension Enchant.

Enchant is the PHP binding for the Enchant spelling library. Enchant steps in to provide uniformity and conformity on top of all spelling libraries, and implement certain features that may be lacking in any individual provider library.

<?php 

$tag = 'en_US';

$r = enchant_broker_init();

$bprovides = enchant_broker_describe($r);

echo 'Current broker provides the following backend(s):'.PHP_EOL;

print_r($bprovides);



$dicts = enchant_broker_list_dicts($r);

print_r($dicts);

if (enchant_broker_dict_exists($r,$tag)) {

    $d = enchant_broker_request_dict($r, $tag);

    $dprovides = enchant_dict_describe($d);

    echo 'dictionary $tag provides:'.PHP_EOL;

    $wordcorrect = enchant_dict_check($d, 'soong');

    print_r($dprovides);

    if (!$wordcorrect) {

        $suggs = enchant_dict_suggest($d, 'soong');

        echo 'Suggestions for "soong":';

        print_r($suggs);

    }

    enchant_broker_free_dict($d);

} else {

}

enchant_broker_free($r);?>

ext/exif

[Since 0.8.4] - [ -P Extensions/Extexif ] - [ Online docs ]

Extension EXIF : Exchangeable image file format.

The EXIF extension manipulates image meta data.

<?php 

echo 'test1.jpg:<br />';

$exif = exif_read_data('tests/test1.jpg', 'IFD0');

echo $exif===false ? 'No header data found.<br />' : 'Image contains headers<br />';



$exif = exif_read_data('tests/test2.jpg', 0, true);

echo 'test2.jpg:<br />';

foreach ($exif as $key => $section) {

    foreach ($section as $name => $val) {

        echo $key.$name.': '.$val.'<br />';

    }

}?>

ext/fileinfo

[Since 0.8.4] - [ -P Extensions/Extfileinfo ] - [ Online docs ]

Extension ext/fileinfo.

This module guesses the content type and encoding of a file by looking for certain magic byte sequences at specific positions within the file.

<?php 

$finfo = finfo_open(FILEINFO_MIME_TYPE); // return mime type ala mimetype extension

foreach (glob('*') as $filename) {

    echo finfo_file($finfo, $filename) . PHP_EOL;

}

finfo_close($finfo);?>

ext/filter

[Since 0.8.4] - [ -P Extensions/Extfilter ] - [ Online docs ]

Extension filter.

This extension filters data by either validating or sanitizing it.

<?php 

$email_a = 'joe@example.com';

$email_b = 'bogus';



if (filter_var($email_a, FILTER_VALIDATE_EMAIL)) {

    echo 'This ($email_a) email address is considered valid.'.PHP_EOL;

}

if (filter_var($email_b, FILTER_VALIDATE_EMAIL)) {

    echo 'This ($email_b) email address is considered valid.'.PHP_EOL;

} else {

    echo 'This ($email_b) email address is considered invalid.'.PHP_EOL;

}?>

ext/ftp

[Since 0.8.4] - [ -P Extensions/Extftp ] - [ Online docs ]

Extension FTP.

The functions in this extension implement client access to files servers speaking the File Transfer Protocol (FTP) as defined in RFC 959.

<?php 

<?php /*A*/// set up basic connection

$conn_id = ftp_connect($ftp_server); 



// login with username and password

$login_result = ftp_login($conn_id, $ftp_user_name, $ftp_user_pass); 



// check connection

if ((!$conn_id) || (!$login_result)) { 

    echo 'FTP connection has failed!';

    echo 'Attempted to connect to $ftp_server for user $ftp_user_name'; 

    exit; 

} else {

    echo 'Connected to $ftp_server, for user $ftp_user_name';

}



// upload the file

$upload = ftp_put($conn_id, $destination_file, $source_file, FTP_BINARY); 



// check upload status

if (!$upload) { 

    echo 'FTP upload has failed!';

} else {

    echo 'Uploaded $source_file to $ftp_server as $destination_file';

}



// close the FTP stream 

ftp_close($conn_id);?>

<?php 

header("Content-type: image/png");

$string = $_GET['text'];

$im     = imagecreatefrompng("images/button1.png");

$orange = imagecolorallocate($im, 220, 210, 60);

$px     = (imagesx($im) - 7.5 * strlen($string)) / 2;

imagestring($im, 3, $px, 9, $string, $orange);

imagepng($im);

imagedestroy($im);?>

<?php 

$pow1 = gmp_pow('2', 131);

echo gmp_strval($pow1) . PHP_EOL;

$pow2 = gmp_pow('0', 0);

echo gmp_strval($pow2) . PHP_EOL;

$pow3 = gmp_pow('2', -1); // Negative exp, generates warning

echo gmp_strval($pow3) . PHP_EOL;?>

<?php 

<?php /*A*/// init gnupg

$res = gnupg_init();

// not really needed. Clearsign is default

gnupg_setsignmode($res,GNUPG_SIG_MODE_CLEAR);

// add key with passphrase 'test' for signing

gnupg_addsignkey($res,"8660281B6051D071D94B5B230549F9DC851566DC","test");

// sign

$signed = gnupg_sign($res,"just a test");

echo $signed;?>

<?php 

<?php /*A*//* Create a file to calculate hash of */

file_put_contents('example.txt', 'The quick brown fox jumped over the lazy dog.');



echo hash_file('md5', 'example.txt');?>

<?php 

$text = "This is the Euro symbol '€'.";



echo 'Original : ', $text, PHP_EOL;

echo 'TRANSLIT : ', iconv("UTF-8", "ISO-8859-1//TRANSLIT", $text), PHP_EOL;

echo 'IGNORE   : ', iconv("UTF-8", "ISO-8859-1//IGNORE", $text), PHP_EOL;

echo 'Plain    : ', iconv("UTF-8", "ISO-8859-1", $text), PHP_EOL;?>

<?php 

$arr = array('a' => 1, 'b' => 2, 'c' => 3, 'd' => 4, 'e' => 5);



echo json_encode($arr);?>

<?php 

<?php /*A*/// basic sequence with LDAP is connect, bind, search, interpret search

// result, close connection



echo '<h3>LDAP query test</h3>';

echo 'Connecting ...';

$ds=ldap_connect('localhost');  // must be a valid LDAP server!

echo 'connect result is ' . $ds . '<br />';



if ($ds) { 

    echo 'Binding ...'; 

    $r=ldap_bind($ds);     // this is an 'anonymous' bind, typically

                           // read-only access

    echo 'Bind result is ' . $r . '<br />';



    echo 'Searching for (sn=S*) ...';

    // Search surname entry

    $sr=ldap_search($ds, 'o=My Company, c=US', 'sn=S*');  

    echo 'Search result is ' . $sr . '<br />';



    echo 'Number of entries returned is ' . ldap_count_entries($ds, $sr) . '<br />';



    echo 'Getting entries ...<p>';

    $info = ldap_get_entries($ds, $sr);

    echo 'Data for ' . $info['count'] . ' items returned:<p>';



    for ($i=0; $i<$info['count']; $i++) {

        echo 'dn is: ' . $info[$i]['dn'] . '<br />';

        echo 'first cn entry is: ' . $info[$i]['cn'][0] . '<br />';

        echo 'first email entry is: ' . $info[$i]['mail'][0] . '<br /><hr />';

    }



    echo 'Closing connection';

    ldap_close($ds);



} else {

    echo '<h4>Unable to connect to LDAP server</h4>';

}?>

<?php 

<?php /*A*/// $xmlstr is a string, containing a XML document. 



$doc = simplexml_load_string($xmlstr);

$xml = explode(PHP_EOL, $xmlstr);



if ($doc === false) {

    $errors = libxml_get_errors();



    foreach ($errors as $error) {

        echo display_xml_error($error, $xml);

    }



    libxml_clear_errors();

}





function display_xml_error($error, $xml)

{

    $return  = $xml[$error->line - 1] . PHP_EOL;

    $return .= str_repeat('-', $error->column) . '^'.PHP_EOL;



    switch ($error->level) {

        case LIBXML_ERR_WARNING:

            $return .= 'Warning ',$error->code.': ';

            break;

         case LIBXML_ERR_ERROR:

            $return .= 'Error '.$error->code.': ';

            break;

        case LIBXML_ERR_FATAL:

            $return .= 'Fatal Error '.$error->code.': ';

            break;

    }



    $return .= trim($error->message) .

               PHP_EOL.'  Line: '.$error->line .

               PHP_EOL.'  Column: '.$error->column;



    if ($error->file) {

        $return .= "\n  File: $error->file";

    }



    return $return.PHP_EOL.PHP_EOL.'--------------------------------------------'.PHP_EOL.PHP_EOL;

}?>

<?php 

<?php /*A*//* Convert internal character encoding to SJIS */

$str = mb_convert_encoding($str, "SJIS");



/* Convert EUC-JP to UTF-7 */

$str = mb_convert_encoding($str, "UTF-7", "EUC-JP");



/* Auto detect encoding from JIS, eucjp-win, sjis-win, then convert str to UCS-2LE */

$str = mb_convert_encoding($str, "UCS-2LE", "JIS, eucjp-win, sjis-win");



/* "auto" is expanded to "ASCII,JIS,UTF-8,EUC-JP,SJIS" */

$str = mb_convert_encoding($str, "EUC-JP", "auto");?>

<?php 

<?php /*A*/# --- ENCRYPTION ---



    # the key should be random binary, use scrypt, bcrypt or PBKDF2 to

    # convert a string into a key

    # key is specified using hexadecimal

    $key = pack('H*', 'bcb04b7e103a0cd8b54763051cef08bc55abe029fdebae5e1d417e2ffb2a00a3');

    

    # show key size use either 16, 24 or 32 byte keys for AES-128, 192

    # and 256 respectively

    $key_size =  strlen($key);

    echo 'Key size: ' . $key_size . PHP_EOL;

    

    $plaintext = 'This string was AES-256 / CBC / ZeroBytePadding encrypted.';



    # create a random IV to use with CBC encoding

    $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);

    $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);

    

    # creates a cipher text compatible with AES (Rijndael block size = 128)

    # to keep the text confidential 

    # only suitable for encoded input that never ends with value 00h

    # (because of default zero padding)

    $ciphertext = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key,

                                 $plaintext, MCRYPT_MODE_CBC, $iv);



    # prepend the IV for it to be available for decryption

    $ciphertext = $iv . $ciphertext;

    

    # encode the resulting cipher text so it can be represented by a string

    $ciphertext_base64 = base64_encode($ciphertext);



    echo  $ciphertext_base64 . PHP_EOL;



    # === WARNING ===



    # Resulting cipher text has no integrity or authenticity added

    # and is not protected against padding oracle attacks.

    

    # --- DECRYPTION ---

    

    $ciphertext_dec = base64_decode($ciphertext_base64);

    

    # retrieves the IV, iv_size should be created using mcrypt_get_iv_size()

    $iv_dec = substr($ciphertext_dec, 0, $iv_size);

    

    # retrieves the cipher text (everything except the $iv_size in the front)

    $ciphertext_dec = substr($ciphertext_dec, $iv_size);



    # may remove 00h valued characters from end of plain text

    $plaintext_dec = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key,

                                    $ciphertext_dec, MCRYPT_MODE_CBC, $iv_dec);

    

    echo  $plaintext_dec . PHP_EOL;?>

<?php 

<?php /*A*/// connect

$m = new MongoClient();



// select a database

$db = $m->comedy;



// select a collection (analogous to a relational database\'s table)

$collection = $db->cartoons;



// add a record

$document = array( 'title' => 'Calvin and Hobbes', 'author' => 'Bill Watterson' );

$collection->insert($document);



// add another record, with a different 'shape'

$document = array( 'title' => 'XKCD', 'online' => true );

$collection->insert($document);



// find everything in the collection

$cursor = $collection->find();



// iterate through the results

foreach ($cursor as $document) {

    echo $document['title'] . PHP_EOL;

}?>

<?php 

<?php /*A*/// Connect to MSSQL

$link = mssql_connect('KALLESPC\SQLEXPRESS', 'sa', 'phpfi');



if (!$link || !mssql_select_db('php', $link)) {

    die('Unable to connect or select database!');

}



// Do a simple query, select the version of 

// MSSQL and print it.

$version = mssql_query('SELECT @@VERSION');

$row = mssql_fetch_array($version);



echo $row[0];



// Clean up

mssql_free_result($version);?>

<?php 

$mysqli = new mysqli('localhost', 'my_user', 'my_password', 'world');



/* check connection */

if (mysqli_connect_errno()) {

    printf('Connect failed: %s\n', mysqli_connect_error());

    exit();

}



$city = 'Amersfoort';



/* create a prepared statement */

if ($stmt = $mysqli->prepare('SELECT District FROM City WHERE Name=?')) {



    /* bind parameters for markers */

    $stmt->bind_param('s', $city);



    /* execute query */

    $stmt->execute();



    /* bind result variables */

    $stmt->bind_result($district);



    /* fetch value */

    $stmt->fetch();



    printf('%s is in district %s\n', $city, $district);



    /* close statement */

    $stmt->close();

}



/* close connection */

$mysqli->close();?>

<?php 

$a = 1;

$b = 2;

$c = 3;

$stmt    = odbc_prepare($conn, 'CALL myproc(?,?,?)');

$success = odbc_execute($stmt, array($a, $b, $c));?>

<?php 

<?php /*A*/// $data and $signature are assumed to contain the data and the signature



// fetch public key from certificate and ready it

$pubkeyid = openssl_pkey_get_public("file://src/openssl-0.9.6/demos/sign/cert.pem");



// state whether signature is okay or not

$ok = openssl_verify($data, $signature, $pubkeyid);

if ($ok == 1) {

    echo "good";

} elseif ($ok == 0) {

    echo "bad";

} else {

    echo "ugly, error checking signature";

}

// free the key from memory

openssl_free_key($pubkeyid);?>

<?php 

$zip_code = $_GET['zip'];



// Canadian Zip code H2M 3J1

$zip_ca = '/^([a-zA-Z]\d[a-zA-Z])\ {0,1}(\d[a-zA-Z]\d)$/';



// French Zip code  75017

$zip_fr = '/^\d{5}$/';



// Chinese Zip code  590615

$zip_cn = '/^\d{6}$/';



var_dump(preg_match($_GET['zip']));?>

<?php 

<?php /*A*//* Execute a prepared statement by passing an array of values */

$sql = 'SELECT name, colour, calories

    FROM fruit

    WHERE calories < :calories AND colour = :colour';

$sth = $dbh->prepare($sql, array(PDO::ATTR_CURSOR => PDO::CURSOR_FWDONLY));

$sth->execute(array(':calories' => 150, ':colour' => 'red'));

$red = $sth->fetchAll();

$sth->execute(array(':calories' => 175, ':colour' => 'yellow'));

$yellow = $sth->fetchAll();?>

<?php 

<?php /*A*/// Connect to a database named 'mary'

$dbconn = pg_connect('dbname=mary');



// Prepare a query for execution

$result = pg_prepare($dbconn, 'my_query', 'SELECT * FROM shops WHERE name = $1');



// Execute the prepared query.  Note that it is not necessary to escape

// the string 'Joe's Widgets' in any way

$result = pg_execute($dbconn, 'my_query', array('Joe\'s Widgets'));



// Execute the same prepared query, this time with a different parameter

$result = pg_execute($dbconn, 'my_query', array('Clothes Clothes Clothes'));?>

<?php 

try {

    $p = new Phar('/path/to/my.phar', 0, 'my.phar');

    $p['myfile.txt'] = 'hi';

    $file = $p['myfile.txt'];

    var_dump($file->isCompressed(Phar::BZ2));

    $p['myfile.txt']->compress(Phar::BZ2);

    var_dump($file->isCompressed(Phar::BZ2));

} catch (Exception $e) {

    echo 'Create/modify operations on my.phar failed: ', $e;

}?>

<?php 

posix_kill(999459,SIGKILL);

echo 'Your error returned was '.posix_get_last_error(); //Your error was ___/*B*/ ?>?>

<?php 

<?php /*A*///get 3 commands from user

for ($i=0; $i < 3; $i++) {

        $line = readline("Command: ");

        readline_add_history($line);

}



//dump history

print_r(readline_list_history());



//dump variables

print_r(readline_info());?>

<?php 

<?php /*A*//**

 * A simple counter

 *

 * @return    int

 */

function counter1()

{

    static $c = 0;

    return ++$c;

}



/**

 * Another simple counter

 *

 * @return    int

 */

$counter2 = function()

{

    static $d = 0;

    return ++$d;



};



function dumpReflectionFunction($func)

{

    // Print out basic information

    printf(

        PHP_EOL.'===> The %s function '%s''.PHP_EOL.

        '     declared in %s'.PHP_EOL.

        '     lines %d to %d'.PHP_EOL,

        $func->isInternal() ? 'internal' : 'user-defined',

        $func->getName(),

        $func->getFileName(),

        $func->getStartLine(),

        $func->getEndline()

    );



    // Print documentation comment

    printf('---> Documentation:'.PHP_EOL.' %s',PHP_EOL, var_export($func->getDocComment(), 1));



    // Print static variables if existant

    if ($statics = $func->getStaticVariables())

    {

        printf('---> Static variables: %s',PHP_EOL, var_export($statics, 1));

    }

}



// Create an instance of the ReflectionFunction class

dumpReflectionFunction(new ReflectionFunction('counter1'));

dumpReflectionFunction(new ReflectionFunction($counter2));?>

<?php 

$key         = ftok(__FILE__,'a');

$semaphore   = sem_get($key);

sem_acquire($semaphore);

sem_release($semaphore);

sem_remove($semaphore);?>

<?php 

session_start();

if (!isset($_SESSION['count'])) {

  $_SESSION['count'] = 0;

} else {

  $_SESSION['count']++;

}?>

<?php 

<?php /*A*/// Create a temporary file and return its path

$tmp = tempnam('/tmp', 'PHP');



// Get the file token key

$key = ftok($tmp, 'a');



// Attach the SHM resource, notice the cast afterwards

$id = shm_attach($key);



if ($id === false) {

    die('Unable to create the shared memory segment');

}



// Cast to integer, since prior to PHP 5.3.0 the resource id 

// is returned which can be exposed when casting a resource

// to an integer

$id = (integer) $id;?>

<?php 

$xml = <<<'XML'

<?xml version='1.0' standalone='yes' ? >

<movies>

 <movie>

  <title>PHP: Behind the Parser</title>

  <characters>

   <character>

    <name>Ms. Coder</name>

    <actor>Onlivia Actora</actor>

   </character>

   <character>

    <name>Mr. Coder</name>

    <actor>El Act&#211;r</actor>

   </character>

  </characters>

  <plot>

   So, this language. It's like, a programming language. Or is it a

   scripting language? All is revealed in this thrilling horror spoof

   of a documentary.

  </plot>

  <great-lines>

   <line>PHP solves all my web problems</line>

  </great-lines>

  <rating type="thumbs">7</rating>

  <rating type="stars">5</rating>

 </movie>

</movies>

XML;



$movies = new SimpleXMLElement($xml);



echo $movies->movie[0]->plot;?>

<?php 

$nameOfSecondInterface = snmp3_get('localhost', 'james', 'authPriv', 'SHA', 'secret007', 'AES', 'secret007', 'IF-MIB::ifName.2');?>

<?php 

$client = new SoapClient("some.wsdl");



$client = new SoapClient("some.wsdl", array('soap_version'   => SOAP_1_2));



$client = new SoapClient("some.wsdl", array('login'          => "some_name",

                                            'password'       => "some_password"));?>

<?php 

<?php /*A*///Example #2 Socket example: Simple TCP/IP client

//From the PHP manual



error_reporting(E_ALL);



echo "<h2>TCP/IP Connection</h2>\n";



/* Get the port for the WWW service. */

$service_port = getservbyname('www', 'tcp');



/* Get the IP address for the target host. */

$address = gethostbyname('www.example.com');



/* Create a TCP/IP socket. */

$socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);

if ($socket === false) {

    echo 'socket_create() failed: reason: ' . socket_strerror(socket_last_error()) . PHP_EOL;

} else {

    echo 'OK.'.PHP_EOL;

}



echo 'Attempting to connect to '$address' on port '$service_port'...';

$result = socket_connect($socket, $address, $service_port);

if ($result === false) {

    echo 'socket_connect() failed.\nReason: ($result) ' . socket_strerror(socket_last_error($socket)) . '\n';

} else {

    echo 'OK.'.PHP_EOL;

}



$in = "HEAD / HTTP/1.1\r\n";

$in .= "Host: www.example.com\r\n";

$in .= "Connection: Close\r\n\r\n";

$out = '';



echo 'Sending HTTP HEAD request...';

socket_write($socket, $in, strlen($in));

echo "OK.\n";



echo 'Reading response:\n\n';

while ($out = socket_read($socket, 2048)) {

    echo $out;

}



echo 'Closing socket...';

socket_close($socket);

echo 'OK.\n\n';?>

<?php 

<?php /*A*/// Example with FilesystemIterator

$files = new FilesystemIterator('/path/to/dir');

foreach($files as $file) {

    echo $file->getFilename() . PHP_EOL;

}?>

<?php 

if ($db = sqlite_open('mysqlitedb', 0666, $sqliteerror)) { 

    sqlite_query($db, 'CREATE TABLE foo (bar varchar(10))');

    sqlite_query($db, 'INSERT INTO foo VALUES ("fnord")');

    $result = sqlite_query($db, 'select bar from foo');

    var_dump(sqlite_fetch_array($result)); 

} else {

    die($sqliteerror);

}?>

<?php 

$db = new SQLite3('mysqlitedb.db');



$results = $db->query('SELECT bar FROM foo');

while ($row = $results->fetchArray()) {

    var_dump($row);

}?>

<?php 

<?php /*A*//* Notify the user if the server terminates the connection */

function my_ssh_disconnect($reason, $message, $language) {

  printf("Server disconnected with reason code [%d] and message: %s\n",

         $reason, $message);

}



$methods = array(

  'kex' => 'diffie-hellman-group1-sha1',

  'client_to_server' => array(

    'crypt' => '3des-cbc',

    'comp' => 'none'),

  'server_to_client' => array(

    'crypt' => 'aes256-cbc,aes192-cbc,aes128-cbc',

    'comp' => 'none'));



$callbacks = array('disconnect' => 'my_ssh_disconnect');



$connection = ssh2_connect('shell.example.com', 22, $methods, $callbacks);

if (!$connection) die('Connection failed');?>

<?php 

<?php /*A*//*

Our php.ini contains the following settings:



display_errors = On

register_globals = Off

post_max_size = 8M

*/



echo 'display_errors = ' . ini_get('display_errors') . PHP_EOL;

echo 'register_globals = ' . ini_get('register_globals') . PHP_EOL;

echo 'post_max_size = ' . ini_get('post_max_size') . PHP_EOL;

echo 'post_max_size+1 = ' . (ini_get('post_max_size')+1) . PHP_EOL;

echo 'post_max_size in bytes = ' . return_bytes(ini_get('post_max_size'));



function return_bytes($val) {

    $val = trim($val);

    $last = strtolower($val[strlen($val)-1]);

    switch($last) {

        // The 'G' modifier is available since PHP 5.1.0

        case 'g':

            $val *= 1024;

        case 'm':

            $val *= 1024;

        case 'k':

            $val *= 1024;

    }



    return $val;

}?>

<?php 

`ob_start() <https://www.php.net/ob_start>`_;?>

<?php 

$html = `ob_get_clean() <https://www.php.net/ob_get_clean>`_;



// Specify configuration

$config = array(

           'indent'         => true,

           'output-xhtml'   => true,

           'wrap'           => 200);



// Tidy

$tidy = new tidy;

$tidy->parseString($html, $config, 'utf8');

$tidy->cleanRepair();



// Output

echo $tidy;?>

<?php 

<?php /*A*//*


T_ML_COMMENT does not exist in PHP 5.
The following three lines define it in order to
preserve backwards compatibility.

*


The next two lines define the PHP 5 only T_DOC_COMMENT,
which we will mask as T_ML_COMMENT for PHP 4.

*/

if (!defined('T_ML_COMMENT')) {

   define('T_ML_COMMENT', T_COMMENT);

} else {

   define('T_DOC_COMMENT', T_ML_COMMENT);

}



$source = file_get_contents('example.php');

$tokens = token_get_all($source);



foreach ($tokens as $token) {

   if (is_string($token)) {

       // simple 1-character token

       echo $token;

   } else {

       // token array

       list($id, $text) = $token;



       switch ($id) { 

           case T_COMMENT: 

           case T_ML_COMMENT: // we\'ve defined this

           case T_DOC_COMMENT: // and this

               // no action on comments

               break;



           default:

               // anything else -> output 'as is'

               echo $text;

               break;

       }

   }

}?>

<?php 

echo wddx_serialize_value("PHP to WDDX packet example", "PHP packet");?>

<?php 

class Strings

{

    static function fix_string($a)

    {

        echo

            xdebug_call_class().

            "::".

            xdebug_call_function().

            " is called at ".

            xdebug_call_`file() <https://www.php.net/file>`_.

            ":".

            xdebug_call_line();

    }

}



$ret = Strings::fix_string( 'Derick' );?>

<?php 

$request = xmlrpc_encode_request('method', array(1, 2, 3));

$context = stream_context_create(array('http' => array(

    'method' => 'POST',

    'header' => 'Content-Type: text/xml',

    'content' => $request

)));

$file = file_get_contents('http://www.example.com/xmlrpc', false, $context);

$response = xmlrpc_decode($file);

if ($response && xmlrpc_is_fault($response)) {

    trigger_error('xmlrpc: '.$response['faultString'].' ('.$response['faultCode']));

} else {

    print_r($response);

}?>

<?php 

$xw = xmlwriter_open_memory();

xmlwriter_set_indent($xw, TRUE);

xmlwriter_start_document($xw, NULL, 'UTF-8');

xmlwriter_start_element($xw, 'root');

xmlwriter_write_attribute_ns($xw, 'prefix', '', 'http://www.php.net/uri');

xmlwriter_start_element($xw, 'elem1');

xmlwriter_write_attribute($xw, 'attr1', 'first');

xmlwriter_end_element($xw);

xmlwriter_full_end_element($xw);

xmlwriter_end_document($xw);

$output = xmlwriter_flush($xw, true);

print $output;

// write attribute_ns without start_element first

$xw = xmlwriter_open_memory();

var_dump(xmlwriter_write_attribute_ns($xw, 'prefix', 'id', 'http://www.php.net/uri', 'elem1'));

print xmlwriter_output_memory($xw);?>

<?php 

<?php /*A*/// Example from the PHP manual



$xmldoc = new DOMDocument();

$xsldoc = new DOMDocument();

$xsl = new XSLTProcessor();



$xmldoc->loadXML('fruits.xml');

$xsldoc->loadXML('fruits.xsl');



libxml_use_internal_errors(true);

$result = $xsl->importStyleSheet($xsldoc);

if (!$result) {

    foreach (libxml_get_errors() as $error) {

        echo "Libxml error: {$error->message}\n";

    }

}

libxml_use_internal_errors(false);



if ($result) {

    echo $xsl->transformToXML($xmldoc);

}?>

<?php 

$addr = array(

    'given' => 'Chris',

    'family'=> 'Dumars',

    'address'=> array(

        'lines'=> '458 Walkman Dr.

        Suite #292',

        'city'=> 'Royal Oak',

        'state'=> 'MI',

        'postal'=> 48046,

      ),

  );

$invoice = array (

    'invoice'=> 34843,

    'date'=> '2001-01-23',

    'bill-to'=> $addr,

    'ship-to'=> $addr,

    'product'=> array(

        array(

            'sku'=> 'BL394D',

            'quantity'=> 4,

            'description'=> 'Basketball',

            'price'=> 450,

          ),

        array(

            'sku'=> 'BL4438H',

            'quantity'=> 1,

            'description'=> 'Super Hoop',

            'price'=> 2392,

          ),

      ),

    'tax'=> 251.42,

    'total'=> 4443.52,

    'comments'=> 'Late afternoon is best. Backup contact is Nancy Billsmer @ 338-4338.',

    );



// generate a YAML representation of the invoice

$yaml = yaml_emit($invoice);

var_dump($yaml);



// convert the YAML back into a PHP variable

$parsed = yaml_parse($yaml);



// check that roundtrip conversion produced an equivalent structure

var_dump($parsed == $invoice);?>

<?php 

$zip = new ZipArchive();

$filename = './test112.zip';



if ($zip->open($filename, ZipArchive::CREATE)!==TRUE) {

    exit('cannot open <$filename>');

}



$zip->addFromString('testfilephp.txt' . time(), '#1 This is a test string added as testfilephp.txt.'.PHP_EOL);

$zip->addFromString('testfilephp2.txt' . time(), '#2 This is a test string added as testfilephp2.txt.'.PHP_EOL);

$zip->addFile($thisdir . '/too.php','/testfromfile.php');

echo 'numfiles: ' . $zip->numFiles . PHP_EOL;

echo 'status:' . $zip->status . PHP_EOL;

$zip->close();?>

<?php 

$filename = tempnam('/tmp', 'zlibtest') . '.gz';

echo "<html>\n<head></head>\n<body>\n<pre>\n";

$s = "Only a test, test, test, test, test, test, test, test!\n";



// open file for writing with maximum compression

$zp = gzopen($filename, 'w9');



// write string to file

gzwrite($zp, $s);



// close file

gzclose($zp);?>

<?php 

<?php /*A*/// A closure is also a unnamed function

$closure = function ($arg) { return 'A'.strtolower($arg); }?>

<?php 

<?php /*A*/// classic empty function

function emptyFunction() {}



class bar {

    // classic empty method

    function emptyMethod() {}



    // classic empty function

    function emptyMethodWithParent() {}

}



class barbar extends bar {

    // NOT an empty method : it overwrites the parent method

    function emptyMethodWithParent() {}

}?>

<?php 

<?php /*A*/// A function

function aFunction() {}



// Closures (not reported)

$closure = function ($arg) {  }



// Methods

class foo {

    function aMethod() {}

}?>

<?php 

if (version_compare(PHP_VERSION, 7.0) > 0) {

    function split($separator, $string) {

        return explode($separator, $string);

    }

}



print_r( split(' ', '2 3'));?>

<?php 

<?php /*A*/// here, array, myObject and string are all typehints.

function foo(array $array, myObject $x, string $string) {



}?>

<?php 

<?php /*A*/// an empty interface

interface empty {}



// an normal interface

interface normal {

    public function i() ;

}



// a constants interface

interface constantsOnly {

    const FOO = 1;

}?>

<?php 

<?php /*A*/// interfaceName is reported

interface interfaceName {

    function interfaceMethod() ; 

}?>

<?php 

<?php /*A*/// This is an alias

use stdClass as aClass;



// This is not an alias : it is not explicit

use stdClass;



trait t {

    // This is not an alias, it's a trait usage

    use otherTrait;

}?>

<?php 

<?php /*A*/// One reported namespace

namespace one\name\space {}



// This global namespace is reported, as it is explicit

namespace { }?>

<?php 

spl_autoload_register('my_autoloader');



// Old way to autoload. Deprecated in PHP 7.2

function __autoload($class ) {}?>

<?php 

<?php /*A*/// open this file

$fp = fopen(__FILE__, 'r');



// seek file pointer to data

fseek($fp, __COMPILER_HALT_OFFSET__);



// and output it

var_dump(stream_get_contents($fp));



// the end of the script execution

__halt_compiler(); the installation data (eg. tar, gz, PHP, etc.)?>

<?php 

<?php /*A*/// A is label. 

goto A:



A:



// A label may be used by several gotos.

goto A:?>

<?php 

if ($divisor === 0) {

    // Throw native exception

    throw new DivisionByZeroError("Shouldn't divide by one");

}



if ($divisor === 1) {

    // Throw custom exception

    throw new DontDivideByOneException("Shouldn't divide by one");

}?>

<?php 

if ($divisor == 0) {

    trigger_error('Cannot divide by zero', E_USER_ERROR);

}?>

<?php 

<?php /*A*/// This analyzer reports MyException and Exception

try {

    doSomething();

} catch (MyException $e) {

    fixIt();

} catch (\Exception $e) {

    fixIt();

}?>

<?php 

<?php /*A*/// Avoid using incoming data to build the `eval() <https://www.php.net/eval>`_ expression : any filtering error leads to PHP injection

    $mathExpression = $_GET['mathExpression']; 

    $mathExpression = preg_replace('#[^0-9+-*/(/)]#is', '', $mathExpression); // expecting 1+2

    $literalCode = '$a = '.$mathExpression.';';

    eval($literalCode);

    echo $a;



    // If the code code given to `eval() <https://www.php.net/eval>`_ is known at compile time, it is best to put it inline

    $literalCode = '`phpinfo() <https://www.php.net/phpinfo>`_;';

    eval($literalCode);?>

<?php 

<?php /*A*/// Throw an exception, that may be caught somewhere

throw new Exception('error');



// Dying with error message. 

die('error');



function foo() {

    //exiting the function but not dying

    if (somethingWrong()) {

        return true;

    }

}?>

<?php 

<?php /*A*/// an iffectation : assignation in a If condition

if($connexion = mysql_connect($host, $user, $pass)) {

    $res = mysql_query($connexion, $query);

}



// Iffectation may happen in while too.

while($row = mysql_fetch($res)) {

    $store[] = $row;

}?>

<?php 

<?php /*A*/// Set x with incoming value, or else null. 

$x = @$_GET['x'];?>

<?php 

<?php /*A*/// Explicit code

    $b = (boolean) $x; 

    $b = (bool) $x; 



    // Wrong type casting

    $b = !!$x;?>

<?php 

<?php /*A*/// Including a library. 

include 'lib/helpers.inc';



// Including a library, and avoiding double inclusion

include_once 'lib/helpers.inc';?>

<?php 

if (DEBUG) {

    `phpinfo() <https://www.php.net/phpinfo>`_;

}?>

<?php 

<?php /*A*/// This is the best comparison

if (strpos($string, 'a') === false) { }



// This is OK, as 2 won't be mistaken with false

if (strpos($string, 'a') == 2) { }



// strpos is one of the 26 functions that may behave this way

if (preg_match($regex, $string)) { } 



// This works like above, catching the value for later reuse

if ($a = strpos($string, 'a')) { }



// This misses the case where 'a' is the first char of the string

if (strpos($string, 'a')) { }



// This misses the case where 'a' is the first char of the string, just like above

if (strpos($string, 'a') == 0) { }?>

<?php 

<?php /*A*/// $e is useful, though not by much

    $e = new() Exception();

    throw $e;



    // $e is useless

    throw $e = new Exception();?>

<?php 

if ($error) {

    // Debugging usage of var_dump

    // And major security problem 

    var_dump($query);

    

    // This is OK : the $query is logged, and not displayed

    $this->log(print_r($query, true));

}?>

<?php 

class myString {

    private $string = null;

    

    public function __construct($string) {

        $this->string = $string;

    }

    

    public function __toString() {

        // Do not throw exceptions in __toString

        if (!is_string($this->string)) {

            throw new Exception("$this->string is not a string!!");

        }

        

        return $this->string;

    }

}?>

<?php 

$a = 0b10;

$b = 0B0101;?>

<?php 

$email = 'contact@exakat.io';?>

<?php 

$a = <<<EOD

heredoc

EOD;?>

<?php 

$hexadecimal = 0x10;



$anotherHexadecimal =0XAF;?>

<?php 

header('Location: http://www.example.com/');



// Parseable headers are also reported

header('Location: http://www.example.com/');



// UnParseable headers are not reported

header('GarbagexxxxXXXXxxxGarbagexxxxXXXXxxx');

header($header);?>

<?php 

http_response_code(418);



header('HTTP/1.1 418 I\'m a teapot');?>

<?php 

<?php /*A*/// 32 

   $a = '0cc175b9c0f1b6a831c399e269771111';?>

<?php 

$mimeType = 'multipart/form-data';

$mimeType = 'image/jpeg';

$mimeType = 'application/zip';



header('Content-Type: '.$mimeType);?>

<?php 

$nowdoc = <<<'EOD'



EOD;?>

<?php 

$a = 1234; // decimal number

  $a = 0123; // octal number (equivalent to 83 decimal)



  // silently valid for PHP 5.x

  $a = 01283; // octal number (equivalent to 10 decimal)/*B*/ ?>?>

<?php 

preg_match('/[abc]/', $haystack);



preg_replace('#[0-9A-Z]+#is', $y, $z);?>

<?php 

<?php /*A*/// 21 is the default port for FTP

$ftp = ftp_connect($host, 21, $timeout = 90);?>

<?php 

<?php /*A*/// 86400 is the number of seconds in a day

$day = 86400;



// 1400 is the number of minutes in a day

$day = 1440;?>

<?php 

$string = 'string';



$query = <<<SQL

Heredoc

SQL;?>

<?php 

$a = "zoo"; 



$b = "ఒ"; // Telugu character

$b = "\u{0C12}"; Same as above



$b = "人"; // Chinese Mandarin character

$b = "\u{4EBA}"; Same as above?>

<?php 

<?php /*A*/// the first argument is recognized as an URL

ftp_connect('http://www.example.com/', $port, $timeout);



// the string argument  is recognized as an URL

$source = 'https://www.other-example.com/';?>

<?php 

function foo() {

    // static variable

    static $count = 0;

    

    echo ++$count;

}



class bar {

    // This is not a static variable : 

    // it is a static property

    static $property = 1;

}?>

<?php 

<?php /*A*/// Quite a long variable name

$There_is nothing_wrong_with_long_variable_names_They_tend_to_be_rare_and_that_make_them_noteworthy = 1;?>

<?php 

<?php /*A*/// person, in Simplified Chinese

class 人 {

    // An actual working class in PHP.

    public function __construct() {

        echo __CLASS__;

    }

}



// people = new person();

$人民 = new 人();?>

<?php 

<?php /*A*/// The variables below never appear again in the code

$writtenOnce = 1;



foo($readOnce);?>

<?php 

abstract class foo {

    function foobar(); 

}



class bar extends foo {

    // extended method

    function foobar() {

        // doSomething()

    }



    // extra method

    function barbar() {

        // doSomething()

    }

}?>

<?php 

<?php /*A*/// abstract class

abstract class foo {

    // abstract method

    function foobar(); 

}



class bar extends foo {

    // extended abstract method

    function foobar() {

        // doSomething()

    }



    // extra method

    function barbar() {

        // doSomething()

    }

}?>