Why security is critical in PHP - See It in Action

Understanding Why Security is Critical in PHP

📖 Scenario: You are building a simple PHP web application that handles user login information. Security is very important to protect users' data and prevent hackers from accessing the system.

🎯 Goal: Learn why security is critical in PHP by creating a simple user data array, setting a security level, filtering unsafe input, and displaying safe output.

📋 What You'll Learn

Create an array called users with exact usernames and passwords

Create a variable called security_level and set it to high

Use a foreach loop with variables $username and $password to filter out unsafe characters from passwords

Print the filtered users array to show safe user data

💡 Why This Matters

🌍 Real World

Web applications often handle sensitive user data like passwords. Filtering and securing this data helps prevent hackers from stealing information or breaking into accounts.

💼 Career

Understanding basic security practices in PHP is essential for web developers to build safe and trustworthy websites.

1

DATA SETUP: Create the users array

Create an array called users with these exact entries: 'alice' => 'pa$$word123', 'bob' => '1234abcd!', 'charlie' => 'qwerty!@#'

PHP

<?php

// Create the users array with usernames and passwords
// Your code here

Need a hint?

Use PHP array syntax with usernames as keys and passwords as values.

2

CONFIGURATION: Set the security level

Create a variable called security_level and set it to the string 'high'

PHP

 'pa$$word123',
    'bob' => '1234abcd!',
    'charlie' => 'qwerty!@#'
];

// Set the security level to 'high'
// Your code here

Need a hint?

Assign the string 'high' to the variable $security_level.

3

CORE LOGIC: Filter unsafe characters from passwords

Use a foreach loop with variables $username and $password to iterate over $users. Inside the loop, replace all $ characters in $password with * and update the $users array with the filtered password.

PHP

 'pa$$word123',
    'bob' => '1234abcd!',
    'charlie' => 'qwerty!@#'
];

$security_level = 'high';

// Filter passwords to replace '$' with '*'
// Your code here

Need a hint?

Use str_replace to replace $ with * in each password.

4

OUTPUT: Print the filtered users array

Write print_r($users); to display the filtered $users array

PHP

 'pa$$word123',
    'bob' => '1234abcd!',
    'charlie' => 'qwerty!@#'
];

$security_level = 'high';

foreach ($users as $username => $password) {
    $filtered_password = str_replace('$', '*', $password);
    $users[$username] = $filtered_password;
}

// Print the filtered users array
// Your code here

Need a hint?

Use print_r to show the array content in a readable format.