Logic #1 is checking the returned value of the preg_match function with respect to 0 and with operator ===. That means the returned value of the preg_match function has to be (int) 0 or (string) 0. And after that it is checking if $_REQUEST['author'] is empty or not.
And in Logic #2 is checking the same thing above, but with !()(not) operator. And this method also additionally check the $_REQUEST['author'] is integer or not.
Checking the $_REQUEST['author'] data type actually makes Logic #2 better than above Logic #1, I think. Cause, though data type doesn’t matter in PHP (PHP is a loosely typed language) but it’s better to use them. It defines a concrete base for your application and ensures some core security as well as it’s the best practice.
Hope that answer satisfies your quest.
Related Posts:
- Basic auth WordPress REST API dilemma
- security+best practices: root or www-data on a wordpress content folder?
- Any reason to be concerned by a wave of “zombie” blog signups?
- How to change WordPress user ID?
- Setting WP Admin passwords to expire
- What do spammers gain by signing up as a user?
- How can I secure a WordPress blog using OpenID from a single provider?
- Force user to change their password on the frontend at the first login and password policy
- Should I encrypt the response that triggers an Ajax action? Is nonce sufficient?
- Are there mutiple ways to get usernames (as a hacker)
- Reset Password policy
- How do I protect user_activation_key?
- Failed login attempts
- Separate Out Real Users
- WordPress Password security related questions
- Force users to use password with specifications
- Iterating users while user iteration is suppressed
- Require confirmation of current user’s email before updating database and before send_email_change_email
- Securely log in a user without a password using a link?
- What techniques can a user employ to achieve a password rated “strong” in the WordPress password checker
- WordPress – Security Question at Login from User’s Meta Data
- (How) does WordPress protect direct access of user data?
- If the current user is an administrator or editor
- Getting a List of Currently Available Roles on a WordPress Site?
- Editor can create any new user except administrator
- How do I add a field on the Users profile? For example, country, age etc
- How do I display logged-in username IF logged-in?
- How to allow an user role to create a new user under a role which lower than his level only?
- user_login vs. user_nicename
- How to programatically change username (user_login)?
- Change the Author Slug from Username to Nickname
- Remove Ability for Other Users to View Administrator in User List?
- Difference between update_user_meta and update_user_option
- Make display name unique
- Make WooCommerce pages accessible for logged in users only
- Find out if logged in user is not subscriber
- WordPress usermeta scaling for thousands of users
- How to get WordPress Username in Array format
- Display user registration date
- Get multiple roles with get_users
- get_user_meta() doesn’t include user email?
- Confirmation required on email change
- How to Merge Two Authors Into One?
- Whats the best way to share user data across multiple WordPress websites?
- get_current_user_id() returns 0?
- How to get userid at wp_logout action hook?
- Groups of capabilities: users with multiple roles?
- Is there a way to merge two users?
- User-edit role setting distinct from wp_capabilities? [closed]
- List users by last name in WP_User_Query
- What’s the difference between the capability remove_users and delete_users?
- How to restrict access to uploaded files?
- Automatically delete inactive users after 2 months
- How to change user_login with wp-cli?
- Delete all subscribers from wp_users and wp_usermeta a few thousand at a time
- Email user when password is reset by admin
- Replacing the WordPress password validation
- Ban a user and end their session
- Allowing users to edit only their page and nobody else’s
- How can 2 blogs share the same users
- alphabetically order role drop-down selection in dashboard
- WordPress auto login after registration not working
- Change the author slug from nickname to ID
- Execute a function when admin changes the user role
- How to let contributors to create a new revision(draft) editing their published posts
- how to use joomla password format in wordpress?
- How to do get_users() with multiple meta_keys
- Disallowing Users of a Custom Role from Deleting or Adding Administrators?
- What the user_status column?
- How to limit users to one comment per post
- Different back-end language for different users?
- Is it safe to store a user setting you don’t want the user to ever modify as a user option?
- Hide Admin Menu for Specific User ID who has administrator Role
- Migrating WordPress users into Disqus
- Problem with Hebrew characters in username
- Is there an upper limit for users in WP?
- How to display the status of users (online – offline) in archive.php
- Remove email verification when new user register
- How to change user`s avatar?
- How to set up User email verification after Signup?
- Allow up to 5 Concurrent Login Sessions
- How to let user set password on registration
- How to hide media uploads by other users in the Media menu?
- Show admin bar only for some USERS roles
- How to display custom user meta from registration in backend?
- Allowing an email as the username?
- How to work around “that email address has already been used” error?
- Get the name of user who updated post
- Disable delete user
- Grouping users under parent user
- How to get the Gravityform entry ID from current user’s form submission? [closed]
- Retrieve all users from wordpress database via REST/JSON API
- Is there a way to set a user profile to Draft?
- Display edit link if post author is current user
- Check if specific username is logged in
- Best way to send users password?
- Limiting the number of users
- How can I get users email (and additional data) from the rest API?
- Force display name as full name
- Get users with atleast one post