Comments on: Zend PHP5 certification Exam study review 11: supplementary II

By: john smith

john smith — Wed, 03 Feb 2010 13:02:39 +0000

Hello

I am prepareing ZCE. Anybody can the answer of the following question

when working with a database which of the following can be used to mitigate the possiblilty of exposing your database credientials to malicious user
(1) Moving all database into single file
(2) Moving all database credentials outside of the document root
(3) Restricting access to files not designed to be executed independently
(4) Setting credential information as system enviorment variable
(5) Using php constants instead of variables to store credentials

By: Drunk Naked Bachelorettes

Drunk Naked Bachelorettes — Tue, 04 Aug 2009 05:56:20 +0000

ehh.. really like it.

By: Yahav

Yahav — Wed, 08 Jul 2009 12:10:18 +0000

That is a good article.
but for my knolage, in the “binary safe compare” there is === ans strcmp (i answerd on the exam too… i going to do it tomorow becuse of that i looked for reviews and you helped me alot )

By: admin

admin — Fri, 30 Jan 2009 09:10:50 +0000

Karol, after checked the php.net, I agree. Thanks.

By: Karol

Karol — Thu, 15 Jan 2009 22:54:11 +0000

I think that tmpfile() is better than tempnam() in this case.

Cheers!

PS
This blog is realy great job! It helped me to organize my knowlege a lot

By: admin

admin — Thu, 08 Jan 2009 06:38:11 +0000

Hi, Mike. As all of us knew, I actually don’t know the “real right” answer for any exam question. But, I just do my best to get the most correct information.
Why I think the $params['notification'] is the “context variable”? Well, you can go through three pages on the php,net:

http://cn.php.net/manual/en/function.stream-notification-callback.php
There is a link to the “notification context parameter” on above page.

http://cn.php.net/manual/en/context.params.php#context.params.notification
Then there is a link to the stream_context_set_params() function.

http://cn.php.net/manual/en/function.stream-context-set-params.php

And there is a table of “Supported parameters” for the $params array. The first row of the table is about the “$params['notification']“.

Do you think I got it right?

By: Mike

Mike — Sun, 28 Dec 2008 19:22:07 +0000

“The $params['notification'] context variable allows you to define a callback for the stream that will notify your script of certain events during the course of the transaction.”

Can you provide some references to this that support your answer? I have been unable to find the answer to this question, nor have I been able to find anything that uses $params['notification'].

Thanks!

By: How to preapre for Zend PHP5 Certification Exam « Saidur Rahman Bijon

How to preapre for Zend PHP5 Certification Exam « Saidur Rahman Bijon — Fri, 05 Dec 2008 16:00:22 +0000

[...] n http://readtheweb.info/2008/01/24/zend-php5-certification-exam-study-review-11-supplementary-ii/ [...]

By: admin

admin — Tue, 07 Oct 2008 13:39:12 +0000

tjmcd1963, I knew what you mean. I think, maybe in the case that you want to test if a class is a singleton? E.g.:

$a = new ForeignClass();
$b = new ForeignClass();
if($a === $b) {echo “It is a singleton.”;} else{echo “It is not a singleton.”;}

Of coures, in the real world, this is a very rare scenario, even you got a class from somewhere, and it was not documented and has no comment, you can always check the source code of the Class right? But I also can’t think another example in the real world right now. But, this is may useful in large project, and you use $a=$b; but after pass $a and $b around, in some places, you forgot you used this stating or it is just another person on the project, so use if($a===$b).
P.S., I think “the same instance of an object” is actually “the same instance of an class”. The question itself seem has a problem.

By: admin

admin — Tue, 07 Oct 2008 13:32:57 +0000

Hi Alexey, you are right. My answers were wrong, it should use unset. Actually, I knew they are wrong a long time ago; I forgot to correct it. And, later, I thought, maybe just keep it as is. I never said that all these here are the “correct answers” . Thank you very much for your this comments!

By: Alexey

Alexey — Tue, 07 Oct 2008 08:18:52 +0000

Hi!
On question
“To destroy one variable within a PHP session you should use which method in PHP 5?”
you answered
session_destroy(); session_regenerate_id();
Why? To destroy ONE variable you should use unset() method, like unset ($_SESSION['var'])
P.S. Thank you for interesting article

By: tjmcd1963

tjmcd1963 — Mon, 06 Oct 2008 15:17:54 +0000

Here, $a and $b are not the same instance of an object, they are two different instance of the same class, eventhough the if statement will return true…

Ok, I see your point there, but without simply stating that $a=$b; can you provide a simple example wherein $a and $b would in fact be “the same instance of an object” never mind where $a and $b “contain” the same instance? I confess that I am having some difficulty imagining such a scenario in the real world.

By: admin

admin — Sun, 05 Oct 2008 06:30:16 +0000

Yeah, from the manual, it says instanceof can also used with another object or a string variable. However, look at the example#5 on php.net, the use of another object example is:
$a = new MyClass;
$b =new MyClass;
if($a instanceof $b)…

Here, $a and $b are not the same instance of an object, they are two different instance of the same class, eventhough the if statement will return true.

By: tjmcd1963

tjmcd1963 — Sat, 04 Oct 2008 16:24:59 +0000

When checking to see if two variables contain the same instance of an object, which of the following comparisons should be used?
if($obj1 === $obj2) // ??? are you sure it’s not…
if($obj1 instanceof $obj2) // ???
e.g. (from the manual)…
“Although instanceof is usually used with a literal classname, it can also be used with another object or a string variable:”

if($a instanceof $b) echo “foo”;
if($a === $b) echo “bar”;
//returns foo