Reply to thread

Message

<blockquote data-quote="Kooser6" data-source="post: 453420" data-attributes="member: 85580">The slashes avoid naming collisions.<a href="https://stackoverflow.com/questions/3384204/what-are-namespaces/3384384#3384384" target="_blank">https://stackoverflow.com/questions/3384204/what-are-namespaces/3384384#3384384</a>It's also a security enhancement due to the fact of I did not use slashes and the code was vulnerable to code injection they could inject code to modify the function. Now if there was a slash the class will look to the global namespace to prevent that piece of code to vulnerability. Paragonie Initiative Enterprise also states this issue. Here is an example:[CODE=php]&lt;?phpnamespace App;class Foo{&nbsp; &nbsp; public function bar($data) {&nbsp; &nbsp; &nbsp; &nbsp; echo count($data);&nbsp; &nbsp; }}$foo = new Foo();$foo-&gt;bar([1, 2, 3]);// returns 3.&nbsp; }[/CODE]Now here's what could happen:[CODE=php]&lt;?php// injected code.// &lt;?php//// namespace App;//// function count($data) {//&nbsp; &nbsp;&nbsp; return 24;// }//// ?&gt;namespace App;class Foo{&nbsp; &nbsp; public function bar($data) {&nbsp; &nbsp; &nbsp; &nbsp; echo count($data);&nbsp; &nbsp; }}$foo = new Foo();$foo-&gt;bar([1, 2, 3]);// returns 24.&nbsp; [/CODE]With the slash it still returns 3 because it's looking in the global namespace. Feel free to test this out for yourself.[automerge]1569871515[/automerge]Reason i made this wrapper is because not everyone knows how to properly secure their PHP web application.Also you know how many classes are loaded in laravel and it still has optimal performance.</blockquote>

[QUOTE="Kooser6, post: 453420, member: 85580"] The slashes avoid naming collisions. [URL]https://stackoverflow.com/questions/3384204/what-are-namespaces/3384384#3384384[/URL] It's also a security enhancement due to the fact of I did not use slashes and the code was vulnerable to code injection they could inject code to modify the function. Now if there was a slash the class will look to the global namespace to prevent that piece of code to vulnerability. Paragonie Initiative Enterprise also states this issue. Here is an example: [CODE=php]<?php namespace App; class Foo { public function bar($data) { echo count($data); } } $foo = new Foo(); $foo->bar([1, 2, 3]); // returns 3. }[/CODE] Now here's what could happen: [CODE=php]<?php // injected code. // <?php // // namespace App; // // function count($data) { // return 24; // } // // ?> namespace App; class Foo { public function bar($data) { echo count($data); } } $foo = new Foo(); $foo->bar([1, 2, 3]); // returns 24. [/CODE] With the slash it still returns 3 because it's looking in the global namespace. Feel free to test this out for yourself. [automerge]1569871515[/automerge] Reason i made this wrapper is because not everyone knows how to properly secure their PHP web application. Also you know how many classes are loaded in laravel and it still has optimal performance. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members