Linting
Static code checking against configured rules. Linters detect some defects and inconsistencies but do not replace behavioural tests or architectural review.
Definition and sourcesTechnology, explained clearly. Find a term, choose a letter or narrow the topic. Definitions include sources and their review date.
Static code checking against configured rules. Linters detect some defects and inconsistencies but do not replace behavioural tests or architectural review.
Definition and sourcesExploiting an application flaw to include or read unintended local files. Defences include allowlisted paths and limited process permissions.
Definition and sourcesA relational database system originating from MySQL. Compatibility is broad but not complete across all versions, features and tools.
Definition and sourcesA layer processing requests or responses between application stages. It can check authentication, limits or headers; execution order matters.
Definition and sourcesA document database storing structures in BSON. Flexible modelling does not remove the need for schema design, indexes and consistency rules.
Definition and sourcesA workflow-automation tool connecting applications and services. Connection permissions, secrets and error handling need controls, including in self-hosted deployments.
Definition and sourcesA React framework offering routing and multiple rendering approaches. Rendering and caching choices affect SEO, data freshness and infrastructure cost.
Definition and sourcesBuilding solutions through configuration and visual tools instead of writing most code. It still needs data modelling, access control and platform-limit assessment.
Definition and sourcesA JavaScript runtime outside the browser. Asynchronous operations support I/O handling, but heavy computation can block the main event loop.
Definition and sourcesAn umbrella term for nonrelational database models, such as documents and key-value stores. It names neither one technology nor an automatic advantage over SQL.
Definition and sourcesA JavaScript package-registry and tooling ecosystem. Dependencies need version, licence and supply-chain checks; popularity does not guarantee safety.
Definition and sourcesA Vue-based framework with routing and multiple rendering models. Server and cache configuration affect production behaviour.
Definition and sourcesA framework for delegated resource access without giving the client the user's password. OAuth alone does not define sign-in; identity often uses OpenID Connect.
Definition and sourcesImproving a solution against a defined goal and constraints, such as response time. It requires before-and-after measurement and checks for side effects.
Definition and sourcesAn organisation and community developing open application-security resources. OWASP Top 10 describes important risk classes rather than certifying an entire product as secure.
Definition and sourcesA visual tool assembling pages or interfaces from components and settings. It can operate within a CMS or independently. It reduces manual coding, while more complex behaviour can still require development.
Definition and sourcesA secret used to authenticate a user. It should be unique; systems should store suitable password hashes rather than recoverable plaintext passwords.
Definition and sourcesAuthorised attempts to exploit weaknesses within an agreed scope. Reports describe the tested state; finding no flaws does not prove none exist.
Definition and sourcesTests of response time, throughput and load behaviour. Conditions must match the goal; one fast request does not prove peak-load resilience.
Definition and sourcesA PHP framework delivered as a runtime extension. Deployment needs compatible PHP and extension versions, which should be checked before selecting hosting.
Definition and sourcesImpersonating a trusted entity to obtain information or induce action. It can use email, messages, calls and fraudulent websites.
Definition and sourcesA web framework for Elixir and Erlang/OTP. It supports real-time applications among other uses and is not a PHP framework.
Definition and sourcesA programming language used mainly on servers and in command-line scripts. It handles data, logic and HTTP responses. PHP need not produce HTML; it can return JSON, files or other outputs.
Definition and sourcesA PHP release whose changes included new object model. This branch has ended official support and should not be treated as a secure foundation for new deployments.
Definition and sources