Top Tweets for #PhpTip
@otter_astro Quelle version de #PHP?
J'ai aussi cette version: https://t.co/SvsUkW9TGq
#phptip #phptrick
@AkubueAlexander One of the neat feature of ??= is that it skips entirely the call to the method when the value exists. You can use it as a failsafe, and when it is always defined, it is zero-cost.
https://t.co/1WiiYW3FaX
#phptip #phptrick
@brendt_gd He is fighting the classic bug of the 'trailing unmatched subpattern': #PHP skips the last subpatterns without match.
To apply the final list() = array() without error, he then needs a default value, hence the + [null]
#phptip #phptrick
https://t.co/qdN9xjlezz
@PovilasKorop That is a great #phptip #phptrick, worth reminding on a regular basis.
Note that it works on any #PHP number formats 0b111_111_1111, hexa, octal, etc.
It doesn't work inside strings, so you need.... 🥁🥁🥁 eval()! or strtr()-like.
https://t.co/FNQmNqDz51
$_FILES['avatar']['type'] in #PHP is a string the attacker typed. 🔐
main/rfc1867.c reads the Content-Type header of the multipart part, cuts it at the first ";" and hands it to you. No sniffing. No validation. NOTHING reads the bytes on disk.
curl -F "avatar=@shell.php;type=image/png" and your check sees image/png.
finfo_file() on tmp_name is the one that actually opens the file.
![alexdaubois's tweet photo. $_FILES['avatar']['type'] in #PHP is a string the attacker typed. 🔐
main/rfc1867.c reads the Content-Type header of the multipart part, cuts it at the first ";" and hands it to you. No sniffing. No validation. NOTHING reads the bytes on disk.
curl -F "avatar=@shell.php;type=image/png" and your check sees image/png.
finfo_file() on tmp_name is the one that actually opens the file.](https://pbs.twimg.com/media/HP034mLW4AAJ8y8.jpg)
Some code structures are... very creative!
Can you guess what is result of this call?
.
.
.
Result: https://t.co/VKjqzjf7j7

Last Seen Hashtags on Sotwe
robloxscat
Seen from Korea
khmersex()filter:native_video
informationsMédicales
Seen from United States
Alternancia
Seen from United States
นัดเย็ดแก่งคอย
Seen from Thailand
ipcam
Seen from Spain
نوتي_نوتيلا
Seen from Jordan
FEMBOYBR
Seen from Netherlands
ESalumni
Seen from United States
wriothesley #NSFW
Most Popular Users

Elon Musk 
@elonmusk
241M followers

Barack Obama 
@barackobama
118.8M followers

Cristiano Ronaldo 
@cristiano
114.5M followers

Donald J. Trump 
@realdonaldtrump
111.9M followers

Narendra Modi 
@narendramodi
107M followers

Rihanna 
@rihanna
98.7M followers

NASA 
@nasa
92.2M followers

Justin Bieber 
@justinbieber
91.8M followers

KATY PERRY 
@katyperry
90M followers

Taylor Swift 
@taylorswift13
84M followers

Lady Gaga 
@ladygaga
75.5M followers

Virat Kohli 
@imvkohli
73.4M followers

Kim Kardashian 
@kimkardashian
70.8M followers

YouTube 
@youtube
68.7M followers

Neymar Jr 
@neymarjr
66.4M followers

Bill Gates 
@billgates
65.2M followers

Selena Gomez 
@selenagomez
63.1M followers

The Ellen Show
@theellenshow
62.2M followers

CNN 
@cnn
61.7M followers

X 
@x
60.6M followers














