PHP

Secure PHP Logout and Revoke Sessions Across Devices Image

PHP Secure PHP Logout and Revoke Sessions Across Devices

Logging out should make the current browser stop presenting an authenticated session. Clearing a page variable is not enough: the server-side session ...

PHP Email Activation: Verify Addresses with Expiring Tokens Image

PHP PHP Email Activation: Verify Addresses with Expiring Tokens

Email activation can confirm that a person can receive mail at an address, but it does not prove a legal identity. Treat the activation link as a temp...

One-Time PHP Password Reset Links with Expiration Image

PHP One-Time PHP Password Reset Links with Expiration

A password reset link is a temporary credential. Anyone who obtains it may be able to change the account password, so the token must be difficult to g...

Build a Safer PHP “Remember Me” Login with Rotating Tokens Image

PHP Build a Safer PHP “Remember Me” Login with Rotating Tokens

A “remember me” checkbox creates a credential that lasts longer than the current browser session. Treat it like a password reset token: someone who st...

PHP Session Disappears After Login: Cookie and Storage Checks Image

PHP PHP Session Disappears After Login: Cookie and Storage Checks

A login can appear successful and still lose its session on the next request. PHP sessions depend on a cookie reaching the browser and the server bein...

Catch PHP JSON Errors with JSON_THROW_ON_ERROR Image

PHP Catch PHP JSON Errors with JSON_THROW_ON_ERROR

JSON decoding can fail because a request is malformed, and encoding can fail because a value cannot be represented as valid JSON. If a program ignores...

Why PHP filter_input() Returns NULL Image

PHP Why PHP filter_input() Returns NULL

When filter_input() returns NULL, it is tempting to treat the value as an empty string or a failed validation. Those are different states. A missing i...

WordPress cURL Error 60: Fix Certificate Trust, Not Verification Image

PHP WordPress cURL Error 60: Fix Certificate Trust, Not Verification

cURL error 60 means certificate verification failed during a connection. In WordPress it may appear while contacting an update service, payment provid...

PHP Built-in Functions: array_map, filter_var, trim and explode Image

PHP PHP Built-in Functions: array_map, filter_var, trim and explode

PHP's built-in functions can reduce repetitive code, but misreading a return value introduces new bugs. Distinguish validation from sanitization, and ...

Authentication with JWT (JSON Web Token) in PHP Image

PHP Authentication with JWT (JSON Web Token) in PHP

JSON Web Token (JWT) is a secure and widely used method for authentication and authorization in web applications. In this guide, we’ll build a basic a...

Categories

Sponsors

Apps