<?php

// example key-value: name=%3Cscript%3Econfirm%28%29%3C%2Fscript%3E
function dangerousEchoUsage() {
    $name = $_REQUEST['name'];
    // ruleid: printed-request
    print("Hello : $name");
    // ruleid: printed-request
    print("Hello : " . $name);
}

function safeEchoUsage() {
    $name = $_REQUEST['name'];
    // ok: printed-request
    print("Hello : " . htmlentities($name));
}

function doSmth() {
    $name = $_REQUEST['name'];
    // ruleid: printed-request
    print("Hello :".$name);
}

function doSmth2() {
    // ruleid: printed-request
    print("Hello ".$_POST['name']." !");
}

function doSmth3() {
    $name = $_GET['name'];
    if (str_contains($name, 'foobar')) {
        // ruleid: printed-request
        print("Hello :".$name);
    }
}

function doSmth4() {
    // ruleid: printed-request
    print("Hello ".htmlentities($_POST['name'])." !".$_POST['lastname']);
}

function doSmth5() {
     // ruleid: printed-request
    print("Hello ".trim($_POST['name']));
}

function doSmth6() {
    $VAR = $_GET['someval'];
     if(isset($VAR)){ 
         // ruleid: printed-request
         print($VAR); 
     }
 }
 
 function doSmth7() {
     $VAR = $_GET['someval'];
      if(empty($VAR)){ 
          // ruleid: printed-request
          print($VAR); 
      }
  }

function doOK1() {
    // ok: printed-request
    print("Hello ".htmlentities($_POST['name'])." !");
}

function doOK2() {
    $input = $_GET['name'];
    // ok: printed-request
    print("Hello ".htmlspecialchars($input)." !");
}

function doOK3() {
    $safevar = "Hello ".htmlentities(trim($_GET['name']));
    // ok: printed-request
    print($safevar);
}

function doOK4() {
    // ok: printed-request
    print("Hello ".e($_POST['name'])." !");
}

function doOK5() {
    $safevar = esc_attr($_GET['name']);
    // ok: printed-request
    print("Hello $safevar !");
}

function doOK6() {
    $safevar = "Hello ".htmlentities($_GET['name']);
    // ok: printed-request
    print($safevar);
}

function doOK7() {
    $safevar = "Hello ".htmlspecialchars($_GET['name']);
    // ok: printed-request
    print($safevar);
}

function doOK8() {
    // ok: printed-request
    print("Hello ".isset($_POST['name'])." !");
}

function doOK9() {
    $safevar = empty($_GET['name']);
    // ok: printed-request
    print("Hello $safevar !");
}