Giải pháp thiết kế web động với PHP - p 53 pdf

INDEX

501
multidimensional arrays, 48, 56
nowdoc syntax, 54
NULL data type, 48
object data type, 48
online documentation for PHP syntax, 47
performing calculations, 49
PHP as a weakly typed language, 48
PHP quick checklist of main language
points, 67
precedence of arithmetic operators, table of,
50
print_r(), using to inspect the contents of an
array, 57
resource data type, 48
return keyword, 66
side-effects of PHPs weak typing, 48
single and double quotes, 52
string data type, 48
switch statement, 60
ternary operator, 61
variables inside strings, 52
while loop, 62
See also overview of PHP
referential integrity
maintaining, 417, 431
preserving on record deletion, 452
RegexIterator class, 198, 202
register.php, 259, 261, 264–265, 268

register_01.php, 259
register_02.php, 262
register_03.php, 264–265
register_04.php, 267
register_05.php, 269
register_2way_mysqli.inc.php, 469
register_2way_pdo.inc.php, 470
register_db.php, 461, 465
register_globals, leaving turned off, 108
register_user_mysqli.inc.php, 462
register_user_pdo.inc.php, 462
register_user_text.inc.php, 265–267, 269
register_user_text.inc_01.php, 267
register_user_text.inc_02.php, 269, 461
register_user_text.php, 461
regular expressions (regex), 119
Relation view, 455
Reply-To header, 122
$_REQUEST, 108
require(), 71
require_once(), 71
$required array, 115, 134
required attribute, 105
resources, 48
return keyword, 66
rewind(), 188, 193
root superuser account, 288
rowCount(), 309–310, 322, 362, 375, 456, 465
<rss> tag, 204
RSS 2.0 feed

RSS Specification, online location, 205
structure of, 204
rtrim(), 187
S
safe_mode_include_dir, 181
Save as file check box, 298
scandir(), 168, 195
scope, 66
scope resolution (double colon) operator, 404
secretpage.php, 255–257
secretpage_01.php, 255
Secure Sockets Layer (SSL), 469
using for secure data transmission, 107
security
checking user input before processing it, 6
using insecure email scripts, 6
SEEK_END, 193
SELECT command, 315, 355, 419
DISTINCT option, 377
linking tables in a SELECT query, 422
syntax of, 369, 377
WHERE clause, 377
<select> tag, 138
selected attribute, 138
self-processing form, 111
semicolons
ending commands or statements with, 34, 40
using in SQL queries along with PHP, 315
$_SERVER, 37, 77, 100
server-side include, definition of, 69

session_start(), 258, 271
sessions
adding a salt to a password before
encryption, 258
array_merge(), 266
authenticate.inc.php, 253, 270
basename(), 274
buffering output with ob_start() (PHP
Solution 9-2), 250
building a login page (PHP Solution 9-3), 251
byte order mark (BOM), 247
check(), 260–263
CheckPassword.php, 259, 262, 265
INDEX
502
CheckPassword_01.php, 262
CheckPassword_02.php, 264
contents of a simple session file, 245
creating a file-based user registration
system (PHP Solution 9-7), 265
creating a password strength checker (PHP
Solution 9-6), 258
creating a random salt for each password,
270
creating a reusable logout button (PHP
Solution 9-5), 256
creating a simple session (PHP Solution
9-1), 247
creating PHP sessions, 245
creating session variables, 246

definition of, 243
destroying a session, 246
disabled cookies and, 245
encrypted.txt, 269
encrypting passwords with SHA-1, 258
ending a session after a period of inactivity
(PHP Solution 9-9), 270
file(), 251
file-based authentication, 251
filesize(), 267
filetest_02.txt, 251
fopen(), 267
getErrors(), 261
handling the "headers already sent" error,
247, 249
header(), 247, 254–255, 275
ini_set(), 270
invalidating the session cookie, 246
login.php, 251, 255, 257, 269, 271
login_01.php, 269
login_02.php, 270
logout.inc.php, 257
making passwords more secure, 258
menu.php, 255–257
menu_01.php, 255
menu_02.php, 256
multiform.inc.php, 274–275
multiple_01.php, 273–274
multiple_02.php, 276
multiple_03.php, 276

multiple_04.php, 277
never using session variables to store
sensitive information, 245
ob_end_clean(), 258
ob_end_flush(), 247, 251, 258
ob_start(), 247, 258
one-way encryption, 258
PHPSESSID, 244
preg_match(), 260, 264
preg_match_all(), 264
Ps2_CheckPassword class, 260
regenerating the session ID, 247
register.php, 259, 261, 264–265, 268
register_01.php, 259
register_02.php, 262
register_03.php, 264–265
register_04.php, 267
register_05.php, 269
register_user_text.inc.php, 265–267, 269
register_user_text.inc_01.php, 267
register_user_text.inc_02.php, 269
removal of inactive session files, 245
restricting access to a page with a session
(PHP Solution 9-4), 255
secretpage.php, 255–257, 272
secretpage_01.php, 255
$_SESSION, 37, 246
session ID, 243
session variables, 244
session_01.php, 247

session_02.php, 247, 250
session_03.php, 248, 250
session_destroy(), 246
session_name(), 246
session_regenerate_id(), 247
session_register(), 246
session_start(), 245, 247, 250, 258, 271
session_timeout.inc.php, 271
session_unregister(), 246
setcookie(), 247, 250
setting a time limit on sessions, 270
sha1(), 269
str_replace(), 275
strlen(), 260
time(), 271
trim(), 259
unsetting session variables, 246
using an encrypted login (PHP Solution 9-8),
269
using sessions for a multipage form (PHP
Solution 9-10), 273
using sessions to restrict website access,
247
See also encryption; one-way encryption;
passwords; SHA-1; two-way encryption
SET data type, 301
set_include_path(), 98, 100
Download from Wow! eBook <www.wowebook.com>
INDEX

503
setDate(), 406
setDestination(), 225
setMaxSize(), 164, 226
setPermittedTypes(), 162, 165
setter methods, 222
setThumbDestination(), 239
setTime(), 406
setTimezone(), 407
creating a DateTimeZone object, 209
setting up PHP (Mac OS X)
installing MAMP, procedure for, 19
testing and configuring MAMP, procedure
for, 20
See also PHP test environment
setting up PHP (Windows)
choosing a web server, 12
configuring XAMPP, procedure for, 14
developing web pages using ASP or
ASP.NET, 12
displaying filename extensions, 11
installing MySQL on IIS, 17
installing PHP using the Web Platform
Installer (Web PI), procedure for, 16
installing phpMyAdmin on IIS, 18
installing XAMPP, procedure for, 12
Internet Information Services (IIS), 12
logging on as an Administrator before
installing, 11
starting Apache and MySQL automatically

with XAMPP, 15
troubleshooting, 14
See also PHP test environment
SHA-1, 265
encrypting passwords with, 258
one-way encryption, 258
sha1(), 269, 463, 468
See also encryption; one-way encryption;
passwords; sessions; two-way
encryption
SimpleXML, 58, 179
consuming an RSS news feed (PHP Solution
7-5), 206
Coordinated Universal Time (UTC), 209
DateTime class, 208
<description> tag, 208
extracting information from XML, 205
getOffset(), 209
newsfeed.php, 206
<pubDate> tag, 208
setTimezone(), 209
simplexml_load_file(), 205, 207
SimpleXMLElement class, 205
SimpleXMLIterator class, 207
<title> tag, 208
See also Extensible Markup Language
(XML)
single-line comments, 35
site-root-relative path, 100
Skype, changing the incoming port, 11

<span> tag, 114
SplFileInfo, table of methods, 197
SQL Server, using with PHP, 17
SQLyog, 284
Standard PHP Library (SPL), 179
DirectoryIterator class, 196
SplFileInfo, 196
static methods, 404
stmt_init(), 326
Storage Engine drop-down menu, 433, 452
storage_engines.php, 434
store_result(), 327
str_replace(), 81, 167, 275
strftime(), 401
strict, 46
strings, 48
concatenation (.) operator, 45
escaping single quotes and apostrophes in a
single-quoted string, 53
joining strings in PHP, 45
single and double quotes, 52
variables inside strings, 52
See also quotes
strip_tags(), 204
strlen(), 260
strpos(), 224, 385
strrpos(), 168, 385
strtolower(), 82
strtotime(), 403, 410
strtoupper(), 82

Structure icon, 293
Structure tab, 453, 455
Structured Query Language (SQL)
adding comments to queries, 315
affected_rows property, 361
AS keyword, 384, 391
ASC keyword, 317
assigning an alias to a column, 384
BETWEEN, 378
BINARY keyword, 319
bind_param(), 328, 360
bind_result(), 327
bindColumn(), 331
INDEX
504

binding the parameters, 360, 362
changing column options through user input
(PHP Solution 11-10), 332
close(), 327
CONCAT(), 378
controlling the sort order, 316
COUNT(), 310, 348
cross-reference (linking) table, 417
DELETE command, 355, 375, 380
DESC keyword, 316
embedding variables in MySQLi prepared
statements, 326
embedding variables in PDO prepared
statements, 329

errorInfo(), 331
establishing relationships between tables
through foreign keys, 415
execute(), 330–331, 361
fetch(), 327, 329
fetch_assoc(), 329
finding records that dont have a matching
foreign key, 427
foreign key constraints, 432
formatting dates in a SELECT query with
DATE_FORMAT(), 390
free_result(), 327
handling numbers, 315
handling security and error messages, 380
IN(), 378
INNER JOIN, 422
INSERT command, 357, 359, 379, 419
inserting a foreign key in a table, 419
inserting a new record with MySQLi (PHP
Solution 13-1), 359
inserting a new record with PDO (PHP
Solution 13-2), 361
inserting a string with real_escape_string()
(PHP Solution 11-7), 323
inserting an integer from user input into a
query (PHP Solution 11-6), 320
INTO, 379
is_numeric(), 319, 321
joint primary key, 417
keywords as case-insensitive, 314

LEFT JOIN, 427
LEFT(), 384
LIKE keyword, 318, 325
LIMIT clause, 349, 379
LIMIT keyword, 347
linking tables in a SELECT query, 422
main operators used in MySQL WHERE
expressions, table of, 377
many-to-many relationship, 417
mysqli_03.php, 316
mysqli_integer_01.php, 320
mysqli_prepared_02.php, 329
named placeholders, 330
ON, 422
one-to-many relationship, 416
one-to-one relationship, 415
ORDER BY clause, 316, 379
pdo_03.php, 316
pdo_integer_01.php, 320
percentage sign as a wildcard character, 318
performing a case-sensitive search, 319
prepare(), 328
prepared statements, using, 320
preventing SQL injection attacks, 319
query(), 322
question mark placeholders, 330
quoting strings, 315
real_escape_string(), 320
referential integrity, maintaining, 417, 431
reversing the sort order, 316

reviewing the four essential SQL commands,
376
SELECT command, 355, 369, 377, 419
selecting columns, 315
stmt_init(), 326
store_result(), 327
understanding table relationships, 415
UPDATE command, 357, 367, 370, 380, 419
updating a record with MySQLi (PHP Solution
13-4), 367
updating a record with PDO (PHP Solution
13-5), 371
using a MySQLi prepared statement in a
search (PHP Solution 11-8), 327
using a PDO prepared statement in a search
(PHP Solution 11-9), 331
using a variable for a column name, 320
using semicolons in queries along with PHP,
315
USING() clause, 424, 427
WHERE clause, 317, 375, 424
whitespace ignored, 315
writing SQL queries, 314
See also databases; foreign keys; MySQL;
PHP Data Objects (PDO);
phpMyAdmin; phpsols database;
primary keys; tables
INDEX

505

sub(), 406, 409
SUBDATE(), 392
substr(), 168, 220, 223, 384–385
Sun Microsystems, 280
superglobal arrays
$_FILES, 37, 144
$_GET, 36, 107, 109
get method, 36
$_POST, 36, 106–107, 109–111, 113, 116,
120–121, 132
post method, 36
$_REQUEST, 108
$_SERVER, 37
$_SESSION, 37, 246
See also arrays
switch statement
break keyword, 60
case keyword, 60
comparison operators and, 61
default keyword, 61
example of, 60
syntax of, 60
See also conditional statements; loops;
operators
Symfony, 100
T
tables
adding an extra column to a table (PHP
Solution 15-1), 418

altering the structure of an existing table,
417
composite primary key, 436
converting an InnoDB table back to MyISAM,
455
converting tables from MyISAM to InnoDB,
452
cross-reference (linking) table, 417, 436
establishing relationships between tables
through foreign keys, 415
finding records that dont have a matching
foreign key, 427
INNER JOIN, 422
inserting a foreign key in a table, 419
inserting data into multiple tables (PHP
Solution 16-4), 444
LEFT JOIN, 427
linking tables in a SELECT query, 422
many-to-many relationship, 417
one-to-many relationship, 416
one-to-one relationship, 415
referential integrity, maintaining, 417, 431
parent and child (dependent) tables, 417
understanding table relationships, 415
updating records in a cross-reference table,
449
See also databases; foreign keys; MySQL;
PHP Data Objects (PDO);
phpMyAdmin; phpsols database;
primary keys; Structured Query

Language (SQL)
tags, opening and closing, 30
ternary operator, syntax of, 61
test(), 220, 225, 228, 233
text
array_pop(), 388
blog_mysqli.php, 389
blog_pdo.php, 389
blog_ptags_mysqli.php, 387
blog_ptags_pdo.php, 387
count(), 388
displaying a text extract, 383
displaying database text as paragraphs, 386
displaying the first two sentences of an
article (PHP Solution 14-1), 388
ending an extract on a complete word, 385
extracting a fixed number of characters, 384
extracting complete sentences, 387
getFirst(), 387–388
implode(), 388
LEFT(), 384
nl2br(), 386
preg_replace(), 386
preg_split(), 387
strpos(), 385
strrpos(), 385
substr(), 384–385
using the PHP_EOL constant, 385
utility_funcs.inc.php, 387–388
See also file system; fopen()

<textarea> tag, 105, 118
TextEdit, 6, 9
$this->, 33, 153, 158
throwing an exception, 46–47
thumbnail images
generating, 217
Ps2_Thumbnail class, building, 218
Thumbnail.php, 218, 222, 236
Thumbnail_01.php, 222
Thumbnail_02.php, 226–227
Thumbnail_03.php, 229, 231
Thumbnail_04.php, 234
INDEX
506

ThumbnailUpload.php, 236
See also gallery (online); images;
Ps2_Thumbnail class;
Ps2_ThumbnailUpload class
thumbs folder, 337
time(), 271, 463
TIMESTAMP column, 394
automatically updating in a MySQL table,
356–357
TIMESTAMP data type, 300
timezones.php, 407
TINYBLOB data type, 301
<title> tag, 205, 208
title.inc.php, 79, 81–82
tmp_name, 148

toggle_fields.js, 442
transaction, definition of, 435
trim(), 187, 259
troubleshooting
catch block, 95–96
display_errors directive, turning off, 94
open_basedir directive has been set, 94
Parse error, 10
server is running in safe mode, 93
suppressing error messages in a live
website, 94
try block, 47, 95
See also error messages
true keyword, 58
two-way encryption
advantages and disadvantages of, 460
AES_DECRYPT(), 472
creating a login page with, 471
decrypting a password with, 472
storing a password in a database as a binary
object, 469
using, 469
See also encryption; one-way encryption;
passwords; sessions; SHA-1
type juggling, 166
U
ucfirst(), 80
ucwords(), 81–82
underscores, 33, 36
Unicode (UTF-8), 117, 122

unlink(), 239
UNSIGNED, 300
UPDATE command, 357, 370, 419
syntax of, 367, 380
WHERE clause, 380
Update Entry button, 370, 375
Upload.php, 155, 160, 236
Upload_01.php, 156–157
Upload_02.php, 160, 162
Upload_04.php, 170, 172
Upload_05.php, 176
Upload_06.php, 438
upload_test folder, 164, 170
uploading files
$this->, 158
adapting the Ps2_Upload class to handle
multiple file uploads (PHP Solution 6-6),
172
adding a file-upload field to an HTML form,
143
adding the multiple attribute to the <input>
tag, 171
addPermittedTypes(), 162–163, 165
allowing different MIME types and sizes to
be uploaded (PHP Solution 6-4), 161
array_merge(), 162
casting operators, 162, 166
checkError(), 158–160, 173–174
checking an uploaded files name before
saving it (PHP Solution 6-5), 166

checking the suitability of uploaded content,
141
checking upload errors, 156
checkName(), 169–170, 173
checkSize(), 158–159, 173–174
checkType(), 164–165, 173
common MIME types, table of, 161
configuration settings affecting file uploads,
table of, 142
converting the Ps2_Upload class to use a
namespace (PHP Solution 6-7), 176
copy(), 150
creating a basic file-upload class (PHP
Solution 6-2), 151
creating a basic file-upload script (PHP
Solution 6-1), 148
creating an upload folder for local testing on
Mac OS X, procedure for, 147
creating an upload folder for local testing on
Windows, 146
error levels in the $_FILES array, table of,
157
file_upload.php, 144, 150, 155–156, 160,
164–165, 170
file_upload_01.php, 144
file_upload_02.php, 144, 161
INDEX

507
file_upload_03.php, 148

file_upload_04.php, 148
file_upload_05.php, 156
file_upload_06.php, 171
file_upload_07.php, 171
file_uploads, 142
getMaxSize(), 158–159
getMessages(), 157
giving global access (chmod 777) to upload
directories, 146
hosting companies and file/directory
permissions, 146
how PHP handles file uploads, 142
how the $_FILES array handles multiple files,
171
in_array(), 163, 168–169
inspecting the $_FILES array, 144
is_int(), 163
is_numeric(), 163
isset(), 145
isValidMime(), 162–163
making changes to protected properties on
the fly, 161
max_execution_time, 142
MAX_FILE_SIZE, 148, 150, 164
max_input_time, 142
move(), 158–159, 164, 170, 173–174
move_uploaded_file(), 148–150, 154,
159–160, 173
moving a temporary file to the upload folder,
148

number_format(), 159
post_max_size, 142–143
preventing existing files from being
overwritten, 166
print_r(), 145
processFile(), 173–175
Ps2_Upload class, 151
scandir(), 168
security recommendations for file uploads,
178
setMaxSize(), 164
setPermittedTypes(), 162, 165
specifying a maximum size for an uploaded
file in an HTML form, 148
steps required to ensure a secure file-upload
process, 150
str_replace(), 167
strrpos(), 168
substr(), 168
testing the error level, file size, and MIME
type (PHP Solution 6-3), 157
tmp_name, 148
type juggling, 166
Upload button, 146, 149
upload directory, establishing, 146
Upload.php, 151, 155, 160
Upload_01.php, 156–157
Upload_02.php, 160, 162
Upload_03.php, 167
Upload_04.php, 170, 172

Upload_05.php, 176
upload_max_filesize, 143
upload_test folder, 146–147, 149–150, 164,
170
upload_tmp_dir, 143
uploading multiple files, 171
using the Ps2_Upload class in a script, 177
See also Ps2_Upload class
URL encoding, 106
users table
creating, 460
table of columns, 460
users_2way table
creating, 469
table of columns, 469
USING() clause, 424, 427
utility_funcs.inc.php, 387–388, 396–398, 424
V
value attribute, 139
Value field, 295
variables, 32
assigning values to, 33
assignment (=) operator, 33
camel case, 33
ending commands or statements with a
semicolon, 34
rules for naming variables, 33
scope of, 66
$this->, 33
underscores, 33

using a variable variable, 126
variables inside strings, 52
virtual host
setting up a virtual host for testing, 101
setting up your site in a virtual host, 27
INDEX
508

W
WampServer, 12
warnings, 46
websites
building PHP pages dynamically in response
to a browser request, 3
checking for PHP support on your website, 9
checking the current running version of PHP,
9
displaying the current year in a copyright
notice, 2
how PHP makes web pages dynamic, 2
include files, 3
suppressing error messages in a live
website, 94
testing your pages on your own website, 10
uses for PHP, 1
using PHP to introduce logic into web pages,
4
using the W3Cs Markup Validation Service,
5
WHERE clause, 317, 375, 377, 380, 424

while loop
syntax of, 62
while.php, 62
whitespace in code, 42
wordwrap(), 126
World Wide Web Consortium (W3C),
Markup Validation Service, 5
X, Y
XAMPP
configuring, procedure for, 14
confirming that Apache and MySQL are
running, 13
Control Panel, 13
Explore button, 14
installing on Windows, procedure for, 12
Port-Check button, 14
troubleshooting, 14
Z
Zend Framework, 100, 176
Zend Studio, 8

INDEX

509