What is HTTP “Host” header?

The Host Header tells the webserver which virtual host to use (if set up). You can even have the same virtual host using several aliases (= domains and wildcard-domains). In this case, you still have the possibility to read that header manually in your web app if you want to provide different behavior based on … Read more

Is REST DELETE really idempotent?

Idempotence refers to the state of the system after the request has completed In all cases (apart from the error issues – see below), the account no longer exists. From here “Methods can also have the property of “idempotence” in that (aside from error or expiration issues) the side-effects of N > 0 identical requests … Read more

what’s the difference between Expires and Cache-Control headers?

Cache-Control was introduced in HTTP/1.1 and offers more options than Expires. They can be used to accomplish the same thing but the data value for Expires is an HTTP date whereas Cache-Control max-age lets you specify a relative amount of time so you could specify “X hours after the page was requested”. HTML Cache control … Read more

What is q=0.5 in Accept* HTTP headers?

This is called a relative quality factor. It specifies what language the user would prefer, on a scale of 0 to 1, as can be seen from the HTTP/1.1 Specification, §14.4: Each language-range MAY be given an associated quality value which represents an estimate of the user’s preference for the languages specified by that range. … Read more

Difference between no-cache and must-revalidate for Cache-Control?

I believe that must-revalidate means : Once the cache expires, refuse to return stale responses to the user even if they say that stale responses are acceptable. Whereas no-cache implies : must-revalidate plus the fact the response becomes stale right away. If a response is cacheable for 10 seconds, then must-revalidate kicks in after 10 … Read more

What is the http-header “X-XSS-Protection”?

X-XSS-Protection is a HTTP header understood by Internet Explorer 8 (and newer versions). This header lets domains toggle on and off the “XSS Filter” of IE8, which prevents some categories of XSS attacks. IE8 has the filter activated by default, but servers can switch if off by setting X-XSS-Protection: 0 See also http://blogs.msdn.com/b/ieinternals/archive/2011/01/31/controlling-the-internet-explorer-xss-filter-with-the-x-xss-protection-http-header.aspx

Create a CSV File for a user in PHP

header(“Content-Type: text/csv”); header(“Content-Disposition: attachment; filename=file.csv”); function outputCSV($data) { $output = fopen(“php://output”, “wb”); foreach ($data as $row) fputcsv($output, $row); // here you can change delimiter/enclosure fclose($output); } outputCSV(array( array(“name 1”, “age 1”, “city 1”), array(“name 2”, “age 2”, “city 2”), array(“name 3”, “age 3”, “city 3”) )); php://output fputcsv