Book Image

The PHP Workshop

By : Jordi Martinez, Alexandru Busuioc, David Carr, Markus Gray, Vijay Joshi, Mark McCollum, Bart McLeod, M A Hossain Tonu
Book Image

The PHP Workshop

By: Jordi Martinez, Alexandru Busuioc, David Carr, Markus Gray, Vijay Joshi, Mark McCollum, Bart McLeod, M A Hossain Tonu

Overview of this book

Do you want to build your own websites, but have never really been confident enough to turn your ideas into real projects? If your web development skills are a bit rusty, or if you've simply never programmed before, The PHP Workshop will show you how to build dynamic websites using PHP with the help of engaging examples and challenging activities. This PHP tutorial starts with an introduction to PHP, getting you set up with a productive development environment. You will write, execute, and troubleshoot your first PHP script using a built-in templating engine and server. Next, you'll learn about variables and data types, and see how conditions and loops help control the flow of a PHP program. Progressing through the chapters, you'll use HTTP methods to turn your PHP scripts into web apps, persist data by connecting to an external database, handle application errors, and improve functionality by using third-party packages. By the end of this Workshop, you'll be well-versed in web application development, and have the knowledge and skills to creatively tackle your own ambitious projects with PHP.

Related Content you might be interested in

Current Title:

Small book image
The PHP Workshop
Jordi Martinez | Alexandru Busuioc | David Carr | Markus Gray | Vijay Joshi | Mark McCollum | Bart McLeod | M A Hossain Tonu
Oct, 2019 | 604 pages
Small book image
Beginning PHP
Markus Gray | David Carr
Jul, 2018 | 214 pages
Small book image
Mastering PHP 7
Branko Ajzele
Jun, 2017 | 536 pages
Small book image
PHP 8 Programming Tips, Tricks and Best Practices
Doug Bierer
Aug, 2021 | 528 pages
Table of Contents (12 chapters)
Preface
Preface
About the Book
Free Chapter
1
1. Introducing PHP
1. Introducing PHP
Introduction
Getting Started with PHP Web Development
HyperText Markup Language
Cascading Style Sheets
Using the Server Variable
Summary
2
2. Types and Operators
2. Types and Operators
Introduction
What are Data Types?
Scalar Types
Operators and Expressions
Summary
3
3. Control Statements
3. Control Statements
Introduction
Boolean Expressions
Boolean Constants
Logical Operators
Branching
Looping
Summary
4
4. Functions
4. Functions
Introduction
What is a Callable?
Language Constructs
Introduction to Built-In Functions
Introduction to User-Defined Functions
Summary
5
5. Object-Oriented Programming
5. Object-Oriented Programming
Introduction
The Object-Oriented Approach
Interfaces
Overriding
Traits
Namespaces
Summary
6
6. Using HTTP
6. Using HTTP
Introduction
The Request-Response Cycle of a Web Application
Query Strings
PHP Superglobals
Cross-Site Request Forgery (CSRF)
Summary
7
7. Data Persistence
7. Data Persistence
Introduction
File I/O Handling
Databases
Summary
8
8. Error Handling
8. Error Handling
Introduction
Errors in PHP
Exceptions
Summary
9
9. Composer
9. Composer
Introduction
Dependency Management
Semantic Versioning
Namespaces
Summary
10
10. Web Services
10. Web Services
Introduction
An Example Web Service
HTTP Headers
Summary
Appendix
Appendix
1. Introducing PHP
2. Types and Operators
3. Control Statements
4. Functions
5. Object-Oriented Programming
6. Using HTTP
7. Data Persistence
8. Error Handling
9. Composer
10. Web Services

Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) is an attack that enables the user to execute unwanted actions on a web application in which they're currently authenticated. This attack could succeed in the transfer of funds, changing an account email address, or making a purchase in the name of the user.

This can happen when the attacker knows exactly what data is expected on the affected application for a certain action – changing an email address, let's say. So, the attacker crafts the HTML form on their server, filling it with their preferred data (that is, their own email address). Next, the attacker chooses the victim and uses social engineering to trick them into accessing the URL.

The victim will then land on a malicious website and the browser will be instructed to submit the (invisible) form to the affected application, where the user is logged in. The email will be changed and when the victim realizes this, it may already be too...

Previous Section
End of Section 6
Next Section