Parse Untrusted XML Safely with PHP XMLReader
Bound the input, disable network access, reject DTDs, and avoid entity-expansion flags when parsing untrusted XML with PHP XMLReader.
Validate API JSON before Reading Array Length
Check the HTTP response and JSON shape before reading length, then render an empty array separately from a malformed API response.
Remove SQL Server STX Characters before FOR XML
Locate the U+0002 STX character in archived SQL Server text and remove it in the export query without changing the source table.
Validate Symfony Integer and Boolean Query Parameters
Distinguish missing Symfony query parameters from empty or invalid values, apply ranges, and return a clear 400 response for bad input.
Detect Hidden Document Text before LLM Ingestion
Compare extracted document text with OCR from rendered pages, quarantine mismatches, and keep untrusted files away from tool-enabled LLM agents.
Handle PHP zlib Warnings and Exceptions Consistently
Validate zlib options, bound decompression output, and convert operation warnings into a local exception without hiding unrelated PHP failures.
Store MySQL Dates beyond the 2038 TIMESTAMP Limit
Use DATETIME for future MySQL dates beyond 2038, store a defined UTC value, and keep time-zone conversion in a controlled application boundary.
Replace Curly-Brace String Offsets in PHP 8
Replace legacy $value{0} offset syntax with square brackets, then verify whether the code expects bytes, characters, or array elements.
Return Data from a Popup Window with postMessage
Send a small result from a popup to its opener with postMessage, while checking the exact origin, window source, and message shape.
Close PHP ZipArchive before Deleting Source Files
Call ZipArchive::close explicitly and check its result before deleting files added to the archive, because writing may be deferred until close.