Pass the Zend PHP and Zend Framework Certifications 200-550 Questions and answers with CertsForce

$_FILES['myImage']['x'] and $_FILES['myImage']['y']

$_POST['myImage']['x'] and $_POST['myImage']['y']

$_POST['myImage.x'] and $_POST['myImage.y']

$_POST['myImage_x'] and $_POST['myImage_y']

simplexml_load_file()

simplexml_load_string()

load()

loadFile()

loadXML()

None of the above.

array_unique_values

array_distinct

array_count_values

array_intersect

array_values

bool(true)

bool(false)

Always using prepared statements for all SQL queries.

Always using the available database-specific escaping functionality on all variables prior to building the SQL query.

Using addslashes() to escape variables to be used in a query.

Using htmlspecialchars() and the available database-specific escaping functionality to escape variables to be used in a query.

All PHP database extensions support prepared statements

All PHP database extensions come with their own special helper functions to escape user data to be used in dynamic SQL queries

All PHP database extensions provide an OOP interface

All PHP database extensions appear in the output of php -m , if installed and enabled

Return the first data faster

Return all data faster

Free connection faster for others scripts to use

Use less memory

e

u

PHP does not support UTF-8 encoded strings

A pattern modifier is not needed

Check with is_uploaded_file() whether the uploaded file $_FILES['myFile']['tmp_name'] is valid

Sanitize the file name in $_FILES['myFile']['name'] because this value is not consistent among web browsers

Check the charset encoding of the HTTP request to see whether it matches the encoding of the uploaded file

Sanitize the file name in $_FILES['myFile']['name'] because this value could be forged

Use $HTTP_POST_FILES instead of $_FILES to maintain upwards compatibility