Programming MCQ

Q: Submitted form fields with method="post" arrive in:

Correct answer: $_POST. POST data populates the $_POST superglobal.

Q: The single habit that prevents XSS in PHP output is:

Correct answer: Escaping output with htmlspecialchars(). Escaping converts into harmless text entities.

Q: The correct way to store user passwords is:

Correct answer: password_hash() with password_verify() for checking. password_hash uses strong adaptive hashing; plain text and encodings are catastrophic.

Q: SQL injection is prevented primarily by:

Correct answer: PDO prepared statements with bound parameters. Parameter binding separates SQL structure from data, neutralising injection.

Q: session_start() must be called:

Correct answer: Before using $_SESSION, early in the script. Sessions must start before output and before session data access.

HTML, CSS, JavaScript, PHP and MySQL programming questions.

Q41. Submitted form fields with method="post" arrive in: Medium

Permalink →

Q42. The single habit that prevents XSS in PHP output is: Medium

Permalink →

Q43. The correct way to store user passwords is: Medium

Permalink →

Q44. SQL injection is prevented primarily by: Medium

Permalink →

Q45. session_start() must be called: Medium

Permalink →

Q46. Redirect-after-POST exists to: Medium

Permalink →

Q47. A CSRF token protects against: Medium

Permalink →

Q48. In production, PHP errors should be: Medium

Permalink →

Q49. Writing files concurrently requires: Medium

Permalink →

Q50. Parsing CSV with explode(',') fails because: Medium

Permalink →

🎯 Want a real test?

Take a timed quiz on this topic and see your rank on the leaderboard.

Browse Quizzes