Superglobals su PHP variables na aka gina kakasu gida wanda suke ba tare da takowa karako a kowane scope — suna riƙe da bayanan buɗa, bayanan sawar, jerin aiki, da wɗa. Hanya ce kamar yadda PHP scripts suke samun bayanan HTTP request da ya shigo.
Wannan sune akwai a gida ko'ina (babu buƙatun global keyword), daban da normal variables wadda suke da scope zuwa aikin su kawai.
// query parameters and form data
$id = $_GET['id'] ?? null; // ?? provides a default if missing
$username = $_POST['username'] ?? '';
// request info
$method = $_SERVER['REQUEST_METHOD']; // "GET", "POST"
$uri = $_SERVER['REQUEST_URI'];
$ip = $_SERVER['REMOTE_ADDR'];
// ❌ DANGEROUS — using raw input directly enables attacks
$query = "SELECT * FROM users WHERE id = " . $_GET['id']; // SQL INJECTION!
echo $_GET['name']; // XSS!
// ✅ ALWAYS validate, sanitize, and escape user input
$id = (int) $_GET['id']; // cast/validate
$stmt = $pdo->prepare("SELECT * FROM users WHERE id = ?"); // parameterized query
echo htmlspecialchars($_GET['name']); // escape for output (prevent XSS)
Data daga $_GET, $_POST, $_COOKIE, $_REQUEST ba tabbataccen shawar mahigi ba — amfani da shi kai tsaye yana ba da damar SQL injection, XSS, da wɗa wuta. A koyaushe tabbatar, yi amfani da queries masu daidaituwa don databases, da kallon gi.
Superglobals sune ainihin PHP web development — hanya ne kamar yadda scripts suke karɓa bayanan HTTP request (query strings, shiryar takaitu, cookies, jerin aiki, faɗuwan faɗa, bayanan sawar), saboda haka fahimtar su shine mahimman ilimi ga koyaushe ga sha'ani na bayanan mahigi. Sanin abin da kowane superglobal ya ƙunshi ($_GET, $_POST, $_SERVER, $_SESSION, jn) da yadda za mu samun bayanan buɗa shine dole ga gina kowane aikiki ta PHP.
",