14. Glossary

• $

  • $_ENV
    • Useless Global
  • $_GET
    • Don’t Change Incomings
    • Indirect Injection
    • Useless Global
  • $_POST
    • Don’t Change Incomings
    • Indirect Injection
    • Useless Global
  • $_REQUEST
    • Indirect Injection
    • Useless Global
  • $this
    • $this Belongs To Classes Or Traits
    • $this Is Not For Static Methods
    • Closure May Use $this
    • Complex Dynamic Names
    • Method Could Be Static
    • Non Static Methods Called In A Static
    • Static Methods Called From Object
    • Static Methods Can’t Contain $this
    • Unbinding Closures
    • Used Once Variables
    • Using $this Outside A Class

• *

  • **
    • ** For Exponent
    • Exponent Usage
    • Mismatch Type And Default
    • Negative Power

• .

  • …
    • Ellipsis Usage
    • Iffectations
    • Multiple Definition Of The Same Argument
    • Reserved Keywords In PHP 7
    • Should Use Operator

• @

  • @
    • @ Operator

• A

  • abs()
    • Always Positive Comparison
    • No Real Comparison
  • addslashes()
    • Filter To add_slashes()
  • array()
    • Array_merge Needs Array Of Arrays
    • Constant Scalar Expressions
    • Could Be Class Constant
    • Group Use Trailing Comma
    • Short Syntax For Arrays
    • array_merge() And Variadic
  • array_change_key_case()
    • Use Constant As Arguments
  • array_chunk()
    • Use Array Functions
  • array_column()
    • Should Use array_column()
    • Use Array Functions
  • array_count_values()
    • Avoid array_unique()
    • Slow Functions
  • array_diff()
    • Slow Functions
  • array_fill()
    • Array_Fill() With Objects
  • array_fill_keys()
    • Array_Fill() With Objects
    • Could Use array_fill_keys
  • array_filter()
    • Should Use array_filter()
    • Use Array Functions
  • array_flip()
    • Avoid array_unique()
    • Double array_flip()
    • Slow Functions
  • array_intersect()
    • Slow Functions
  • array_key_exists()
    • Always Use Function With array_key_exists()
    • Slow Functions
    • array_key_exists() Speedup
    • array_key_exists() Works On Arrays
  • array_keys()
    • Avoid array_unique()
    • Slow Functions
  • array_map()
    • Altering Foreach Without Reference
    • Callback Needs Return
    • Slow Functions
  • array_merge()
    • Array_merge Needs Array Of Arrays
    • No array_merge() In Loops
    • Unpacking Inside Arrays
    • Use Array Functions
    • array_merge() And Variadic
  • array_merge_recursive()
    • No array_merge() In Loops
    • array_merge() And Variadic
  • array_multisort()
    • Use Constant As Arguments
  • array_pad()
    • Array_Fill() With Objects
  • array_product()
    • Use Array Functions
  • array_push()
    • Avoid array_push()
    • Should Use Operator
    • Use Array Functions
  • array_search()
    • Slow Functions
    • Strpos()-like Comparison
  • array_slice()
    • Use Array Functions
  • array_splice()
    • Use array_slice()
  • array_sum()
    • Avoid Concat In Loop
    • Static Loop
    • Use Array Functions
  • array_udiff()
    • Slow Functions
  • array_uintersect()
    • Slow Functions
  • array_unique()
    • Avoid array_unique()
    • Could Use array_unique
    • Slow Functions
    • Use Constant As Arguments
  • array_unshift()
    • Slow Functions
  • array_walk()
    • Altering Foreach Without Reference
    • Slow Functions
  • arrayaccess
    • $this Is Not An Array
  • arrayobject
    • $this Is Not An Array
  • arsort()
    • Use Constant As Arguments
  • asort()
    • Use Constant As Arguments
  • assert()
    • Assert Function Is Reserved
    • PHP 7.2 Deprecations

• B

  • Break
    • Break With 0
    • Switch Fallthrough
  • basename()
    • Use Basename Suffix
    • Use pathinfo() Arguments
  • break
    • Break Outside Loop
    • Break With 0
    • Break With Non Integer
    • Continue Is For Loop
    • Exit() Usage
    • Long Arguments
    • Negative Start Index In Array
    • No Need For Else
    • No Return Or Throw In Finally
    • Switch Fallthrough
    • Unconditional Break In Loop
    • Unreachable Code

• C

  • Closure
    • Argument Should Be Typehinted
    • Closure Could Be A Callback
    • Could Be Static Closure
    • Unused Inherited Variable In Closure
  • Compact()
    • Compact Inexistant Variable
    • Could Use Compact
  • Count()
    • Can’t Count Non-Countable
    • Uses Default Values
  • call_user_func()
    • Should Use Operator
  • call_user_method()
    • PHP 7.0 Removed Functions
  • call_user_method_array()
    • PHP 7.0 Removed Functions
  • chdir()
    • No Hardcoded Path
  • chmod()
    • Keep Files Access Restricted
  • chr()
    • Should Preprocess Chr()
    • Should Use Operator
  • chroot()
    • No Hardcoded Path
  • class_exists()
    • Undefined ::class
  • closure
    • Closure Could Be A Callback
    • Closure May Use $this
    • Could Be Static Closure
    • Parent, Static Or Self Outside Class
    • Should Use array_filter()
    • Unbinding Closures
    • Using $this Outside A Class
    • preg_replace With Option e
  • collator_compare()
    • Strpos()-like Comparison
  • collator_get_sort_key()
    • Strpos()-like Comparison
  • compact()
    • Compact Inexistant Variable
  • constant()
    • Fully Qualified Constants
    • PHP 7.4 Reserved Keyword
  • continue
    • Break Outside Loop
    • Continue Is For Loop
    • No Need For Else
    • No Return Or Throw In Finally
    • Unconditional Break In Loop
    • Unreachable Code
  • convert_cyr_string()
    • PHP 7.4 Removed Functions
  • count()
    • Always Positive Comparison
    • Cache Variable Outside Loop
    • No Count With 0
    • Use Constant As Arguments
    • Use is_countable
    • Useless Check
    • Uses Default Values
  • crc32()
    • Crc32() Might Be Negative
  • create_function()
    • PHP 7.2 Deprecations
    • PHP 7.2 Removed Functions
  • crypt()
    • Use password_hash()
    • crypt() Without Salt
  • curl_exec()
    • Strpos()-like Comparison
  • curl_multi_errno()
    • New Functions In PHP 7.1
  • curl_setopt()
    • No Weak SSL Crypto
  • curl_share_errno()
    • New Functions In PHP 7.1
  • curl_share_strerror()
    • New Functions In PHP 7.1
  • curl_version()
    • curl_version() Has No Argument
  • current()
    • Foreach Don’t Change Pointer
    • Strpos()-like Comparison

• D

  • DateTime
    • Timestamp Difference
    • Use DateTimeImmutable Class
  • DateTimeImmutable
    • Use DateTimeImmutable Class
  • Datetime
    • Use DateTimeImmutable Class
  • Die()
    • Print And Die
  • date()
    • Abstract Away
  • date_create()
    • PHP 7.1 Microseconds
  • datetime
    • Timestamp Difference
    • Use DateTimeImmutable Class
  • datetimeimmutable
    • Use DateTimeImmutable Class
  • define()
    • Case Insensitive Constants
    • Constants Created Outside Its Namespace
    • Define With Array
    • Fully Qualified Constants
    • Invalid Constant Name
    • Non-constant Index In Array
    • PHP 7.4 Reserved Keyword
    • Use const
  • die
    • Exit() Usage
    • Print And Die
    • Unreachable Code
  • die()
    • Exit() Usage
    • Print And Die
    • Unreachable Code
  • dirname()
    • Could Use __DIR__
    • PHP7 Dirname
    • Use pathinfo() Arguments

• E

  • Each()
    • While(List() = Each())
  • each()
    • PHP 7.2 Deprecations
    • PHP 7.2 Removed Functions
  • easter_days()
    • Use Constant As Arguments
  • empty()
    • Cant Use Return Value In Write Context
    • Empty With Expression
    • Modernize Empty With Expression
    • No Count With 0
    • No isset() With empty()
    • Useless Check
    • Variable Is Not A Condition
  • ereg()
    • PHP 7.0 Removed Functions
  • ereg_replace()
    • PHP 7.0 Removed Functions
  • eregi()
    • PHP 7.0 Removed Functions
  • eregi_replace()
    • PHP 7.0 Removed Functions
  • error_clear_last()
    • New Functions In PHP 7.0
  • error_get_last()
    • $php_errormsg Usage
  • error_reporting()
    • Use Constant As Arguments
  • eval()
    • Eval() Usage
    • preg_replace With Option e
  • exit
    • Exit() Usage
    • Unreachable Code
  • exit()
    • Unreachable Code
  • explode()
    • Implode One Arg
    • Optimize Explode()
    • Should Use Explode Args
  • extract()
    • Configure Extract
    • Foreach With list()
    • Register Globals
    • Use Constant As Arguments
  • ezmlm_hash()
    • PHP 7.4 Removed Functions

• F

  • Foreach()
    • Altering Foreach Without Reference
    • Should Use Foreach
    • Use List With Foreach
    • Useless Check
  • feof()
    • Possible Infinite Loop
  • fgetc()
    • Strpos()-like Comparison
  • fgetcsv()
    • Possible Infinite Loop
  • fgets()
    • Possible Infinite Loop
  • fgetss()
    • Possible Infinite Loop
  • file()
    • Joining file()
  • file_get_contents()
    • Joining file()
    • Strpos()-like Comparison
  • file_put_contents()
    • No array_merge() In Loops
    • Strpos()-like Comparison
  • filter_input()
    • Use Constant As Arguments
    • filter_input() As A Source
  • filter_input_array()
    • filter_input() As A Source
  • filter_var()
    • Use Constant As Arguments
  • fopen()
    • @ Operator
    • Wrong fopen() Mode
  • for()
    • Bracketless Blocks
    • For Using Functioncall
  • foreach()
    • Avoid array_unique()
    • Bracketless Blocks
    • Break Outside Loop
    • Dont Change The Blind Var
    • Foreach Don’t Change Pointer
    • Foreach With list()
    • No Direct Usage
    • Overwritten Source And Value
    • Should Use array_column()
    • Should Use array_filter()
    • Should Yield With Key
    • Slow Functions
    • Useless Referenced Argument
    • preg_match_all() Flag
  • forward_static_call()
    • Callback Needs Return
  • forward_static_call_array()
    • Callback Needs Return
  • fputcsv()
    • fputcsv() In Loops
  • fread()
    • Possible Infinite Loop
    • Strpos()-like Comparison
  • fseek()
    • Use Constant As Arguments
  • func_get_arg()
    • func_get_arg() Modified
  • func_get_args()
    • Wrong Number Of Arguments
    • func_get_arg() Modified

• G

  • gc_mem_caches()
    • New Functions In PHP 7.0
  • generator
    • Don’t Loop On Yield
    • Generator Cannot Return
    • No Return For Generator
  • get_called_class()
    • Detect Current Class
  • get_class()
    • No Need For get_class()
    • No get_class() With Null
  • get_html_translation_table()
    • Use Constant As Arguments
  • get_magic_quotes_gpc()
    • PHP 7.4 Removed Functions
  • get_magic_quotes_runtime()
    • PHP 7.4 Removed Functions
  • glob()
    • Avoid glob() Usage
    • No Direct Usage
  • gmp_div_q()
    • Use Constant As Arguments
  • gmp_div_qr()
    • Use Constant As Arguments
  • gmp_div_r()
    • Use Constant As Arguments
  • gmp_random()
    • PHP 7.2 Deprecations
    • PHP 7.2 Removed Functions

• H

  • hash()
    • Directly Use File
  • hash_equals()
    • Compare Hash
  • hash_file()
    • Directly Use File
  • hash_hmac()
    • Directly Use File
  • hash_update()
    • Directly Use File
  • hash_update_file()
    • Directly Use File
  • header()
    • Should Use SetCookie()
  • hebrevc()
    • PHP 7.4 Removed Functions
  • highlight_file()
    • Directly Use File
  • highlight_string()
    • Directly Use File
  • html_entity_decode()
    • Use Constant As Arguments
  • htmlentities()
    • Htmlentities Calls
    • Use Constant As Arguments
    • Uses Default Values
  • htmlspecialchars()
    • Htmlentities Calls
    • No ENT_IGNORE
    • Use Constant As Arguments
  • htmlspecialchars_decode()
    • Use Constant As Arguments
  • http_build_query()
    • Use Constant As Arguments
    • Use Url Query Functions
  • http_build_url()
    • Use Constant As Arguments
  • http_parse_cookie()
    • Use Constant As Arguments
  • http_parse_params()
    • Use Constant As Arguments
  • http_redirect()
    • Use Constant As Arguments
  • http_support()
    • Use Constant As Arguments

• I

  • Isset
    • Isset() On The Whole Array
  • iconv()
    • Substring First
  • iconv_strpos()
    • Strpos()-like Comparison
  • iconv_strrpos()
    • Strpos()-like Comparison
  • idn_to_ascii()
    • idn_to_ascii() New Default
  • idn_to_utf8()
    • idn_to_ascii() New Default
  • image2wbmp()
    • PHP 7.3 Removed Functions
    • PHP 8.0 Removed Functions
  • imagecolorallocate()
    • Strpos()-like Comparison
  • imagecolorallocatealpha()
    • Strpos()-like Comparison
  • imagepsbbox()
    • PHP 7.0 Removed Functions
  • imagepsencodefont()
    • PHP 7.0 Removed Functions
  • imagepsextendfont()
    • PHP 7.0 Removed Functions
  • imagepsfreefont()
    • PHP 7.0 Removed Functions
  • imagepsloadfont()
    • PHP 7.0 Removed Functions
  • imagepsslantfont()
    • PHP 7.0 Removed Functions
  • imagepstext()
    • PHP 7.0 Removed Functions
  • implode()
    • Avoid Concat In Loop
    • Implode One Arg
    • Implode() Arguments Order
    • Joining file()
    • Use Array Functions
  • import_request_variables()
    • Register Globals
  • in_array()
    • Logical To in_array
    • Processing Collector
    • Slow Functions
    • Strict Comparison With Booleans
  • ini_get()
    • PHP 8.0 Removed Directives
  • instanceof
    • Should Use Operator
    • Undefined ::class
    • Unresolved Instanceof
    • Use Instanceof
    • Useless Interfaces
  • intdiv()
    • Could Use Try
    • New Functions In PHP 7.0
  • intval()
    • Should Typecast
  • is_a()
    • Is_A() With String
  • is_array()
    • Should Use Operator
  • is_callable()
    • Check All Types
  • is_int()
    • Should Use Operator
  • is_integer()
    • Use Instanceof
  • is_iterable()
    • Check All Types
    • New Functions In PHP 7.1
  • is_null()
    • Should Use Operator
    • Use === null
  • is_object()
    • Should Use Operator
    • Use Instanceof
  • is_real()
    • Avoid Real
  • is_scalar()
    • Use Instanceof
  • is_string()
    • Check All Types
    • Use Instanceof
  • isset
    • Isset Multiple Arguments
    • Isset() On The Whole Array
    • No isset() With empty()
    • Should Use array_column()
    • Should Use array_filter()
    • Slow Functions
    • Use Instanceof
    • Useless Check
    • Variable Is Not A Condition
    • array_key_exists() Speedup
    • isset() With Constant
  • iterator_to_array()
    • Should Yield With Key

• J

  • jdtojewish()
    • Use Constant As Arguments
  • jpeg2wbmp()
    • PHP 7.2 Removed Functions
    • PHP 8.0 Removed Functions
  • json_decode()
    • Use json_decode() Options

• K

  • krsort()
    • Use Constant As Arguments
  • ksort()
    • Use Constant As Arguments

• L

  • List()
    • List With Appends
  • ldap_sort()
    • PHP 8.0 Removed Functions
  • list()
    • Empty List
    • Foreach With list()
    • List Short Syntax
    • List With Keys
    • No List With String
    • Overwritten Source And Value
    • Use List With Foreach
    • list() May Omit Variables
  • ltrim()
    • Substr To Trim

• M

  • magic_quotes_runtime()
    • PHP 7.0 Removed Functions
  • mb_chr()
    • New Functions In PHP 7.1
    • New Functions In PHP 7.2
  • mb_encoding_aliases()
    • Mbstring Unknown Encoding
  • mb_list_encodings()
    • Mbstring Unknown Encoding
  • mb_ord()
    • New Functions In PHP 7.1
    • New Functions In PHP 7.2
  • mb_scrub()
    • New Functions In PHP 7.1
    • New Functions In PHP 7.2
  • mb_split()
    • Optimize Explode()
  • mb_stripos()
    • Mbstring Third Arg
  • mb_stristr()
    • Mbstring Third Arg
  • mb_strlen()
    • No Count With 0
    • Strpos()-like Comparison
  • mb_strpos()
    • Mbstring Third Arg
  • mb_strrchr()
    • Mbstring Third Arg
  • mb_strrichr()
    • Mbstring Third Arg
  • mb_strripos()
    • Mbstring Third Arg
  • mb_strrpos()
    • Mbstring Third Arg
    • mb_strrpos() Third Argument
  • mb_strstr()
    • Mbstring Third Arg
  • mb_substr()
    • Avoid Substr() One
    • Mbstring Third Arg
    • No mb_substr In Loop
    • Substr To Trim
  • mcrypt_cbc()
    • Functions Removed In PHP 5.5
    • PHP 7.0 Removed Functions
  • mcrypt_cfb()
    • Functions Removed In PHP 5.5
    • PHP 7.0 Removed Functions
  • mcrypt_ecb()
    • Functions Removed In PHP 5.5
    • PHP 7.0 Removed Functions
  • mcrypt_ofb()
    • Functions Removed In PHP 5.5
    • PHP 7.0 Removed Functions
  • md5()
    • Directly Use File
  • md5_file()
    • Directly Use File
  • microtime()
    • Use random_int()
  • mkdir()
    • Keep Files Access Restricted
    • Mkdir Default
  • money_format()
    • PHP 7.4 Removed Functions
  • move_uploaded_file()
    • move_uploaded_file Instead Of copy
  • mt_rand()
    • Use random_int()
  • mt_srand()
    • Use random_int()

• N

  • NULL
    • $this Is Not For Static Methods
    • Check JSON
    • Static Methods Can’t Contain $this
    • Strpos()-like Comparison
    • array_key_exists() Speedup
  • Null
    • Avoid Optional Properties
    • Duplicate Literal
    • Indices Are Int Or String
    • Null Or Boolean Arrays
    • Scalar Or Object Property
  • next()
    • Foreach Don’t Change Pointer
    • Static Loop
    • Strpos()-like Comparison
  • nl2br()
    • Joining file()
  • null
    • Always Positive Comparison
    • Assumptions
    • Avoid Optional Properties
    • Break With Non Integer
    • Cast Unset Usage
    • Casting Ternary
    • Check All Types
    • Could Be Null
    • Don’t Unset Properties
    • Hidden Nullable
    • Mismatch Properties Typehints
    • No Reference For Ternary
    • No get_class() With Null
    • Null On New
    • Nullable With Constant
    • Reserved Keywords In PHP 7
    • Scalar Or Object Property
    • Should Use Coalesce
    • Should Use Operator
    • Unbinding Closures
    • Use === null
    • Use Nullable Type
    • Useless Type Check
    • Weak Typing
    • isset() With Constant

• O

  • opendir()
    • Avoid glob() Usage
  • openssl_random_pseudo_bytes()
    • Random Without Try
    • Use random_int()
    • openssl_random_pseudo_byte() Second Argument

• P

  • PARENT
    • Use Lower Case For Parent, Static And Self
  • Parent
    • Avoid Self In Interface
    • Parent, Static Or Self Outside Class
  • pack()
    • Invalid Pack Format
  • parent
    • Abstract Or Implements
    • Abstract Static Methods
    • Already Parents Trait
    • Cancel Common Method
    • Could Be Abstract Class
    • Could Be Parent Method
    • Could Use __DIR__
    • Cyclic References
    • Fossilized Method
    • Incompatible Signature Methods
    • Incompatible Signature Methods With Covariance
    • Mismatch Properties Typehints
    • Must Call Parent Constructor
    • Never Used Properties
    • PHP7 Dirname
    • Parent First
    • Parent, Static Or Self Outside Class
    • Redefined Property
    • Repeated Interface
    • Should Use Local Class
    • Undefined Parent
    • Undefined static:: Or self::
    • Unused Arguments
    • Unused Interfaces
    • Use Lower Case For Parent, Static And Self
    • self, parent, static Outside Class
  • parse_ini_file()
    • Directly Use File
    • Use Constant As Arguments
  • parse_ini_string()
    • Directly Use File
    • Use Constant As Arguments
  • parse_str()
    • PHP 7.2 Deprecations
    • Register Globals
    • Use Url Query Functions
    • parse_str() Warning
  • parse_url()
    • Pathinfo() Returns May Vary
    • Use Constant As Arguments
    • Use Url Query Functions
  • parsekit_compile_file()
    • Directly Use File
  • parsekit_compile_string()
    • Directly Use File
  • password_hash()
    • Compare Hash
    • Use password_hash()
  • password_verify()
    • Compare Hash
  • pathinfo()
    • Pathinfo() Returns May Vary
    • Use Constant As Arguments
    • Use Pathinfo
    • Use pathinfo() Arguments
  • pcntl_getpriority()
    • Strpos()-like Comparison
  • pg_result_status()
    • Use Constant As Arguments
  • pg_select()
    • Use Constant As Arguments
  • php_egg_logo_guid()
    • Functions Removed In PHP 5.5
  • php_logo_guid()
    • Functions Removed In PHP 5.5
  • php_real_logo_guid()
    • Functions Removed In PHP 5.5
  • php_sapi_name()
    • Use Constant
  • phpcredits()
    • Use Constant As Arguments
  • phpinfo()
    • Phpinfo
    • Use Constant As Arguments
  • phpversion()
    • Use Constant
  • pi()
    • Use Constant
  • png2wbmp()
    • PHP 7.2 Removed Functions
    • PHP 8.0 Removed Functions
  • posix_access()
    • Use Constant As Arguments
  • pow()
    • ** For Exponent
    • Negative Power
  • preg_filter()
    • Regex On Arrays
  • preg_grep()
    • Regex On Arrays
    • Use Constant As Arguments
  • preg_match()
    • Results May Be Missing
    • Strpos()-like Comparison
    • Use Constant As Arguments
  • preg_match_all()
    • preg_match_all() Flag
  • preg_replace()
    • Make One Call With Array
    • Possible Missing Subpattern
    • Processing Collector
    • Slow Functions
    • preg_replace With Option e
  • preg_replace_callback()
    • Make One Call With Array
    • Regex On Arrays
    • preg_replace With Option e
  • preg_replace_callback_array()
    • Make One Call With Array
    • New Functions In PHP 7.0
    • Regex On Arrays
    • preg_replace With Option e
  • preg_split()
    • No mb_substr In Loop
    • Optimize Explode()
    • Use Constant As Arguments
  • prev()
    • Strpos()-like Comparison
  • printf()
    • Echo Or Print
    • Printf Number Of Arguments
  • proc_nice()
    • New Functions In PHP 7.2

• R

  • rand()
    • Use random_int()
  • random_bytes()
    • New Functions In PHP 7.0
    • Random Without Try
    • Use random_int()
  • random_int()
    • Abstract Away
    • New Functions In PHP 7.0
    • Random Without Try
    • Use random_int()
  • readdir()
    • Strpos()-like Comparison
  • readfile()
    • Joining file()
  • recode()
    • Directly Use File
  • recode_file()
    • Directly Use File
  • recode_string()
    • Directly Use File
  • register_shutdown_function()
    • Callback Needs Return
  • register_tick_function()
    • Callback Needs Return
  • restore_include_path()
    • PHP 7.4 Removed Functions
  • round()
    • Use Constant As Arguments
  • rsort()
    • Use Constant As Arguments
  • rtrim()
    • Substr To Trim
  • runkit_import()
    • Use Constant As Arguments

• S

  • Self
    • Avoid Self In Interface
  • Static
    • $this Is Not For Static Methods
    • Abstract Static Methods
    • No Reference For Static Property
    • Non Static Methods Called In A Static
    • Parent, Static Or Self Outside Class
    • Should Be Single Quote
    • Should Use Local Class
    • Static Loop
    • Static Methods Called From Object
    • Static Methods Can’t Contain $this
    • Undefined static:: Or self::
    • Wrong Access Style to Property
  • Strtr()
    • Strtr Arguments
  • Substr()
    • Drop Substr Last Arg
  • Switch()
    • Missing Cases In Switch
  • scandir()
    • Avoid glob() Usage
    • Use Constant As Arguments
  • self
    • Abstract Static Methods
    • No Self Referencing Constant
    • Parent, Static Or Self Outside Class
    • Undefined static:: Or self::
    • Unused Methods
    • Unused Private Methods
    • Upload Filename Injection
    • Use Lower Case For Parent, Static And Self
    • self, parent, static Outside Class
    • strip_tags Skips Closed Tag
  • session_start()
    • Use session_start() Options
  • set_error_handler()
    • Avoid set_error_handler $context Argument
  • set_exception_handler()
    • set_exception_handler() Warning
  • set_magic_quotes_runtime()
    • PHP 7.0 Removed Functions
  • set_socket_blocking()
    • PHP 7.0 Removed Functions
  • setcookie()
    • Set Cookie Safe Arguments
    • Should Use SetCookie()
  • setlocale()
    • Setlocale() Uses Constants
  • setrawcookie()
    • Set Cookie Safe Arguments
    • Should Use SetCookie()
  • settype()
    • Should Typecast
  • sha1()
    • Directly Use File
  • sha1_file()
    • Directly Use File
  • show_source()
    • Directly Use File
  • simplexml_load_file()
    • Directly Use File
  • simplexml_load_string()
    • Directly Use File
  • sizeof()
    • Useless Check
  • sleep()
    • Avoid sleep()/usleep()
  • socket_read()
    • Use Constant As Arguments
  • sort()
    • Use Constant As Arguments
  • split()
    • PHP 7.0 Removed Functions
  • spliti()
    • PHP 7.0 Removed Functions
  • sql_regcase()
    • PHP 7.0 Removed Functions
  • srand()
    • Use random_int()
  • static
    • $this Belongs To Classes Or Traits
    • $this Is Not For Static Methods
    • Abstract Static Methods
    • Ambiguous Static
    • Cant Use Return Value In Write Context
    • Closure Could Be A Callback
    • Constant Scalar Expressions
    • Could Be Static
    • Could Be Static Closure
    • Dependant Abstract Classes
    • Dependant Trait
    • Don’t Unset Properties
    • Forgotten Visibility
    • Magic Visibility
    • Method Could Be Static
    • Mismatch Type And Default
    • Modified Typed Parameter
    • No Direct Call To Magic Method
    • No Need For get_class()
    • No Net For Xml Load
    • No Reference For Static Property
    • No Return Used
    • Non Static Methods Called In A Static
    • Only Variable For Reference
    • Only Variable Passed By Reference
    • Only Variable Returned By Reference
    • Order Of Declaration
    • Parent, Static Or Self Outside Class
    • Property Used In One Method Only
    • Should Use Local Class
    • Static Global Variables Confusion
    • Static Loop
    • Static Methods Called From Object
    • Static Methods Can’t Contain $this
    • Too Many Dereferencing
    • Too Many Local Variables
    • Unbinding Closures
    • Undefined Variable
    • Undefined static:: Or self::
    • Unused Private Properties
    • Use Class Operator
    • Use Lower Case For Parent, Static And Self
    • Use PHP7 Encapsed Strings
    • Used Once Variables
    • Useless Abstract Class
    • Useless Unset
    • Using $this Outside A Class
    • Wrong Access Style to Property
    • self, parent, static Outside Class
  • str_ireplace()
    • Make One Call With Array
  • str_pad()
    • Could Use str_repeat()
    • Use Constant As Arguments
  • str_repeat()
    • Could Use str_repeat()
  • str_replace()
    • Joining file()
    • Make One Call With Array
  • stream_isatty()
    • New Functions In PHP 7.2
  • stream_socket_client()
    • Use Constant As Arguments
  • stream_socket_server()
    • @ Operator
    • Use Constant As Arguments
  • strip_tags()
    • strip_tags Skips Closed Tag
  • stripos()
    • Simplify Regex
    • Strpos()-like Comparison
    • strpos() Too Much
  • strlen()
    • Always Positive Comparison
    • No Count With 0
  • strpos()
    • Simplify Regex
    • Slow Functions
    • Strpos()-like Comparison
    • strpos() Too Much
  • strripos()
    • Strpos()-like Comparison
  • strrpos()
    • Strpos()-like Comparison
  • strstr()
    • Slow Functions
  • strtok()
    • Strpos()-like Comparison
  • strtotime()
    • Next Month Trap
    • time() Vs strtotime()
  • strtr()
    • Strtr Arguments
  • strval()
    • Concat Empty String
  • substr()
    • Avoid Substr() One
    • No List With String
    • No mb_substr In Loop
    • Substr To Trim
    • Substring First
    • Use Basename Suffix
    • Use array_slice()
    • strpos() Too Much
  • substr_replace()
    • Make One Call With Array
  • switch()
    • Bracketless Blocks
    • Break Outside Loop
    • Missing Cases In Switch
    • Strict Comparison With Booleans
    • Switch To Switch
    • Switch With Too Many Default
    • Switch Without Default
    • Use Case Value
  • sys_get_temp_dir()
    • No Hardcoded Path
    • Use System Tmp

• T

  • Throwable
    • Can’t Throw Throwable
    • Empty Try Catch
  • throwable
    • Can’t Throw Throwable
  • time()
    • Use random_int()
    • time() Vs strtotime()
  • token_get_all()
    • @ Operator
  • traversable
    • Cant Implement Traversable
  • trigger_error()
    • Use Constant As Arguments
  • trim()
    • Substr To Trim
    • Substring First

• U

  • Unset()
    • Multiple Unset()
  • Usort()
    • Usort Sorting In PHP 7.0
  • uasort()
    • Slow Functions
    • Usort Sorting In PHP 7.0
  • uksort()
    • Slow Functions
    • Usort Sorting In PHP 7.0
  • uniqid()
    • Use random_int()
  • unpack()
    • Invalid Pack Format
  • unserialize()
    • Unserialize Second Arg
  • unset()
    • Multiple Unset()
  • urlencode()
    • Use Url Query Functions
  • usleep()
    • Avoid sleep()/usleep()
  • usort()
    • Slow Functions

• V

  • var_dump()
    • var_dump()… Usage
  • var_export()
    • var_dump()… Usage
  • vprintf()
    • Printf Number Of Arguments

• W

  • while()
    • Bracketless Blocks
    • Break Outside Loop
    • Minus One On Error

• Y

  • yaml_parse()
    • Directly Use File
  • yaml_parse_file()
    • Directly Use File

• Z

  • zend_logo_guid()
    • Functions Removed In PHP 5.5

• _

  • __CLASS__
    • ::class
    • Detect Current Class
  • __DIR__
    • Could Use __DIR__
    • No Hardcoded Path
    • __DIR__ Then Slash
  • __FILE__
    • Could Use __DIR__
    • No Hardcoded Path
  • __call
    • Check On __Call Usage
    • Must Return Methods
    • No Direct Call To Magic Method
    • Useless Typehint
  • __callStatic
    • Must Return Methods
  • __clone
    • Direct Call To __clone()
    • No Direct Call To Magic Method
    • Should Deep Clone
  • __construct
    • Cant Instantiate Class
    • Could Use Promoted Properties
    • Don’t Send $this In Constructor
    • Must Call Parent Constructor
    • Old Style Constructor
    • Should Chain Exception
  • __debugInfo
    • Must Return Methods
    • __debugInfo() Usage
  • __get
    • Must Return Methods
    • No Direct Call To Magic Method
    • Useless Typehint
  • __invoke
    • Must Return Methods
  • __isset
    • Must Return Methods
  • __set
    • Useless Typehint
  • __set_state
    • Must Return Methods
  • __sleep
    • Must Return Methods
  • __toString
    • Could Be Stringable
    • Must Return Methods
    • No Direct Call To Magic Method
    • Reflection Export() Is Deprecated
    • __toString() Throws Exception