Php

PHP: Hypertext Preprocessor (or simply PHP) is a server-side scripting language designed for web development but also used as a general-purpose programming language. It was originally created by Rasmus Lerdorf in 1994.

The PHP interpreter only executes PHP code within  its delimiters. Anything outside its delimiters is not processed by PHP, although non-PHP text is still subject to control structures described in PHP code. stackofcodes.in

The most common delimiters are  to close PHP sections. The shortened form <? also exists. This short delimiter makes script files less portable, since support for them can be disabled in the local PHP configuration and it is therefore discouraged.However, there is no recommendation against the use of the echo short tag <?=Prior to PHP 5.4.0, this short syntax for echo() only works with the short_open_tag configuration setting enabled, while for PHP 5.4.0 and later it is always available. The purpose of all these delimiters is to separate PHP code from non-PHP content, such as JavaScript code or HTML markup

How to Get the Header Data CakePHP or PHP?

I Personally Tried a lot for getting the posted header data in cakephp.

The Header data required to check the posted token. Token validation , to check the posted request is valid or not.

Finally I found the Solution.
PHP It self has a function named, getallheaders()

Syntax: getallheaders ( void ) : array
Description: Fetches all HTTP headers from the current request.

Return Values::
An associative array of all the HTTP headers in the current request, or FALSE on failure.

Example #1 getallheaders() example

$headers = getallheaders();
foreach( $headers as $name => $value) {
     echo "$name: $value\n";
}

Example: Received Data:

Array
(
     [Host] => 127.0.0.1
     [Connection] => keep-alive
     [Content-Length] => 264
     [auth_token] => 20dea7c13dada345dgf80815d3546393a98
     [device_id] => adada23456
     [Cache-Control] => no-cache
     [Origin] => chrome-extension://fhbjgjbdggehcddcbncdddomop
     [User-Agent] => Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36
     [Postman-Token] => 2d5b612b-e2db-1202-50f1-925cb2f8fa05
     [Content-Type] => multipart/form-data; boundary=----WebKitFormBoundarySssj4jB1U7xNxnHy
     [Accept] => */*
     [Accept-Encoding] => gzip, deflate, br
     [Accept-Language] => en-GB,en-US;q=0.9,en;q=0.8
     [Cookie] => PHP=lm68fsfbhedsvbb6b96
)

Source: https://www.php.net/manual/en/function.getallheaders.php

How to Create Unique Number in PHP?

Option-1: 

$mt_rand = mt_rand(1000000000, 9999999999); 
echo $mt_rand;

Option-2:

$unique_id = uniqid();
echo $unique_id;
 uniqid( prefix, more_entropy )

prefix:
Can be useful, for instance, if you generate identifiers simultaneously on several hosts that might happen to generate the identifier at the same microsecond.

With an empty prefix, the returned string will be 13 characters long. If more_entropy is TRUE, it will be 23 characters.

more_entropy:
If set to TRUE, uniqid() will add additional entropy (using the combined linear congruential generator) at the end of the return value, which increases the likelihood that the result will be unique.

source: https://www.php.net/manual/en/function.uniqid.php

Option-3:

$mt_rand = mt_rand(1000000000, 9999999999);
$timestamp = time();
$temp = $mt_rand + $timestamp;
$temp2= substr($tmp, 0,10);

echo $temp2;

This page isn’t working Chrome detected unusual code on this page and blocked it to protect your personal information. ERR_BLOCKED_BY_XSS_AUDITOR

This page isn't working
 Chrome detected unusual code on this page and blocked it to protect your personal information (for example, passwords, phone numbers, and credit cards).
 ERR_BLOCKED_BY_XSS_AUDITOR




This page isn’t working – ERR_BLOCKED_BY_XSS_AUDITOR

Mainly,

This error message is occurs when we are trying to post a content with HTML tags or Scripts Tags or Like When Google Chrome believes a “cross-site scripting” attack is happening. These attacks happen when a browser is tricked into rendering HTML or JavaScript that is not meant to be a part of the website being displayed.

Then Chrome Generates This ERROR ”
ERR_BLOCKED_BY_XSS_AUDITOR “

For PHP and All Other PHP Frameworks: Add this below line before post

 header('X-XSS-Protection:0');