Which predefined PHP function is used to find the position of the first occurrence of a substring?
- strpos($string, $substring)
- strfind($string, $substring)
- strstrpos($string, $substring)
- locate($substring, $string)
The correct option is 'strpos($string, $substring)'. It is used to find the position of the first occurrence of a substring within a string. The other options are incorrect functions.
How can you remove the first element from an array in PHP?
- array_shift()
- array_pop()
- unset()
- array_slice($array, 1)
The array_shift() function removes and returns the first element of an array, effectively shifting the array's keys.
PHP is loosely typed, meaning:
- Data types are strictly enforced
- Data types are dynamically determined
- Data types are not used in PHP
- Data types are implicitly cast
PHP is loosely typed, meaning that data types are dynamically determined by the context in which they are used. Variables can change their data type as needed.
To ensure that an email field contains a valid email address, you can use the PHP ________ filter.
- sanitize_email()
- validate_email()
- filter_var()
- check_email()
You can use the PHP filter_var() function with the FILTER_VALIDATE_EMAIL filter to ensure that an email field contains a valid email address.
Which of the following is the correct way to define an associative array in PHP?
- $colors = ['red' => '#FF0000', 'green' => '#00FF00', 'blue' => '#0000FF']
- $colors = ['red', 'green', 'blue']
- $colors = ('red' => '#FF0000', 'green' => '#00FF00', 'blue' => '#0000FF')
- $colors = {'red' => '#FF0000', 'green' => '#00FF00', 'blue' => '#0000FF'}
The correct way to define an associative array in PHP is by using the format shown in Option 1, where keys are associated with values using the => symbol.
Which of the following best describes "defensive programming" in the context of PHP?
- Writing code that anticipates and handles errors
- Writing code that aggressively catches and suppresses all errors
- Writing code that relies on system error messages to identify issues
- Writing code that creates intentional vulnerabilities for testing purposes
Defensive programming in PHP involves writing code that anticipates and handles errors, aiming to make the code robust and resilient to unexpected issues.
How can you include a file from another namespace without using its fully qualified name?
- use statement
- include statement
- require statement
- namespace keyword
You can include a file from another namespace without using its fully qualified name by using the use statement. It allows you to alias namespaces or import classes/functions into the current namespace.
Which PHP configuration directive determines where session files are stored on the server?
- session.save_path
- session.cookie_lifetime
- session.gc_probability
- session.use_strict_mode
The 'session.save_path' directive in PHP determines the directory where session files are stored on the server. Understanding this directive is important for session management.
How can you prevent session fixation attacks in PHP?
- Regenerate session ID after login
- Use HTTPS to encrypt session data
- Use secure cookies
- Implement strong password policies
To prevent session fixation attacks, it's crucial to regenerate the session ID after a successful login to ensure the attacker can't predict the ID in advance. This improves security.
Which of the following is NOT a recommended practice for secure session management?
- Storing sensitive data in sessions
- Using secure and HTTP-only cookies
- Implementing session timeout
- Generating random and unpredictable session IDs
Storing sensitive data in sessions is not a recommended practice for secure session management. Sensitive data should be stored securely on the server, and only a reference (such as a session ID) should be stored in the session. Storing sensitive data in sessions can expose it to potential session data leakage.