PHP：在关联数组索引中使用空格

发布于 2024-08-16 18:49:31 字数 122 浏览 3 评论 0原文

这是不好的做法/会导致问题吗？

$_SESSION['stuff to keep']

与在索引上调用 str_replace() 相反。

原文

Is this bad practice/can cause problems?

$_SESSION['stuff to keep']

As opposed to calling str_replace() on the indices.

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

素手挽清风 2024-08-23 18:49:31

这是不好的做法，但不是因为空间。

// file foo.php
$_SESSION['stuff to keep'] = 42;

// file bar.php
if ($_SESSION['stufft o keep'] == 42) frobnicate();

在这里，您的代码默默地出现了错误，并且可能需要一段时间才能发现该错误。好的做法是使用 PHP 强制的名称，例如类常量：

$_SESSION[Stuff::TO_KEEP] = 42;

if($_SESSION[Stuff::TOO_KEEP] == 42) 
// error: no constant TOO_KEEP in class Stuff

然后您可以将该常量定义为您认为有趣或可读的任何常量，例如 "stuff to keep" （带空格）。当然，extract() 和转换为 object 将不再起作用，但无论如何您都不应该在会话中这样做。

当然，允许用户在会话密钥中输入文本是一个明显的安全错误。

This is bad practice, but not because of the space.

// file foo.php
$_SESSION['stuff to keep'] = 42;

// file bar.php
if ($_SESSION['stufft o keep'] == 42) frobnicate();

Here, your code is silently misbehaving, and the bug can take a while to be found. Good practice is to use a PHP-enforced name, such as a class constant:

$_SESSION[Stuff::TO_KEEP] = 42;

if($_SESSION[Stuff::TOO_KEEP] == 42) 
// error: no constant TOO_KEEP in class Stuff

You may then define that constant to any constant you find interesting or readable, such as "stuff to keep" (with spaces). Of course, extract() and casting to object won't work anymore, but you shouldn't be doing that anyway with your session.

Allowing user-entered text into session keys is, of course, a blatant security fault.

回复收藏 0 原文