PHP Digest number 85 - interesting news, materials and tools (April 24 - May 15, 2016)

We offer to your attention another selection with links to news and materials.

Enjoy reading!

')

News and Releases

• PHP 5.5.35 , 5.6.21 , 7.0.6 - Updates of current branches with fixes for security issues.
• JetBrains IDE Security Issue - Vulnerability is found in all IDEs on IntelliJ platform version v2016.1 and older, including PhpStorm. Updates released, updated.
• Multiple vulnerabilities in ImageMagick, one of which leads to RCE
• PSR-14 Event Manager - Draft new standard from the PHP-FIG group.
• State of the FIG - Several representatives of PHP-FIG expressed their desire to leave the group, since they practically do not take part in the discussion of new standards: Laravel , Propel , Doctrine , Guzzle . Also, in response to excessive bureaucratization, the PHP Community Driven Standards initiative appeared, within which it is proposed to give everyone the opportunity to participate in the creation of standards. Let's hope for further effective work of PHP-FIG and interesting suggestions from the community.
• DevConf-2016 - June 17 in Moscow will host the next annual conference for web developers. The PHP section is presented with interesting applications: “Development of PHP-7. * Branch” from Dmitry Stogov, “Security: from basic principles to PHP features” from Alexander Makarov, “How Badoo switched to PHP7 and saved $ 1M” from Yuri Nasretdinov and others .
• Yii 2.0.8 - Under the hood, hundreds of fixes and improvements.
• Bolt 3.0.0 - Release of the popular CMS on symfony components.
• Go! AOP Framework 2.0.0

Php

• RFC: Pipe Operator - It is proposed to port the operator |> from Hack, which will allow you to record chains of nested calls in a more readable form:
  

   $ret = scandir($arg) |> array_filter($$, function($x) { return $x !== '.' && $x != '..'; }) |> array_map(function ($x) use ($arg) { return $arg . '/' . $x; }, $$) |> getFileArg($$) |> array_merge($ret, $$); 

  
  
• RFC: Semi-Automatic CSRF Protection - It is proposed to implement semi-automatic protection against CSRF out of the box using sessions.
  Form
  

   <form action="http://example.com/edit.php" method="POST"> <textarea name="comment"></textarea> <input type="submit" /> 

  
  can automatically be secured by calling
  

   session_start(['csrf_rewrite'=>SESSION_CSRF_POST, 'csrf_validate'=SESSION_CSRF_POST]); 

  
  
• RFC: Intersection Types — It is proposed to make it possible to specify a group of types for arguments. In this case, the transmitted value must implement all types:
  

   function RecordsToList(Countable & Traversable $input): String { } 

  
  In the event that the RFC: Union Types proposal is also accepted, a flexible indication of the types will be possible:
  

   function RecordsToList(Array | (Countable & Traversable) $input): String { } 

  
  
• RFC: Simple Annotations - Simplified annotations as opposed to the attributes proposed earlier. In this case, the annotation is an array of PHP expressions.
• RFC: Nullable Types - A clause is accepted that allows you to pass null as an argument with the specified type:
  

   function foo_nullable(?Bar $bar) {} foo_nullable(new Bar); // valid foo_nullable(null); // valid foo_nullable(); // invalid 

  
  
• RFC: Catching Multiple Exception Types - Offer accepted. In PHP 7.1, it will be possible to catch several types of exceptions in a single catch block:
  

   try { // Some code... } catch (ExceptionType1 | ExceptionType2 $e) { // Code to handle the exception } catch (\Exception $e) { // ... } 

  
  
• PHP 7.1 - In June, the first alpha of PHP 7.1 is expected. Also for the upcoming version release managers were chosen: Davey Shafik and Joe Watkins .
• @PHPRFCBot - Twitter account for those who want to keep track of new RFCs for PHP. Also recall about the special resource php-rfc-watch.beberlei.de for RFC monitoring.

Instruments

• undemanding / difference - The library allows you to evaluate the differences between images.
• sensiolabs-de / deptrac - A static code analysis tool for determining dependencies between application layers. Video tutorial and post support.
• ronanguilloux / IsoCodes - Library for validating various standard codes: Zip codes for 175 countries, phone numbers, credit card numbers, ISBNs , national identification codes, and others.
• rocketeers / rocketeer - A tool for running tasks and deploying applications. Tutorial for use.
• paragonie / halite - PHP cryptographic library. Wrap over libsodium . Post about using in support.
• K-Phoen / Rusty - The tool allows you to implement tests in annotations a la Rust .
• webdevops / clitools - A set of console tools to speed up work with Docker, PHP, MySQL.
• usmanhalalit / pixie - Fit query builder.
• cboden / Binky - Console mini client for AMQP.
• tightenco / collect - Collections from Laravel in a separate package.
• ihor / Nspl - A set of useful functions for programming in a functional style.
• slevomat / coding-standard - Advanced coding standard for PHP_CodeSniffer.
• bartblaze / PHP-backdoors - Selection of backdoors for PHP.

Study materials

• Symfony

  
  
  • Filtering data in symfony
  • SonataAdminBundle: Creating an Object from a List View (Part 2)
  • Symfony and command bus
  • Super Symfony with nginx
  
  

• Yii

  
  
  • Yii: best practices
  • pgaultier / yii2-redis-rbac - Extension for storing RBAC information in Redis.
  • axiles89 / yii2-sharding - Component for working Active Record models with a shard database.
  • axiles89 / yii2-coordinator - Coordinator for yii2 sharding.
  
  

• Laravel

  
  
  • spatie-custom / blender - Template and skeleton of an application on Laravel.
  • laravel / valet - A lightweight desktop environment for Laravel (and not only) on Mac OS X. It uses the Caddy , Dnsmasq , and ngrok web server.
  
  

• Zend Framework

  
  
  • Renamed Zend Framework repository - To simplify the smooth transition to the third version of the framework, the version is removed from the repository name: zf2 -> zendframework.
  • Removing the ServiceLocatorAware interface in ZF3
  
  
• Unidentified objects - What is, what is needed and how to use.
• INI directives are evil - About the cost of adding new configuration directives to enable / disable features in PHP.
• In the direction of CQRS, Command Bus - About using the command bus in building applications according to the Command Query Responsibility Segregation pattern.
• Never use null - What is better to use instead of null as property values ​​and return values.
• About PHP Session Garbage Collector
• In searching for a factory of anonymous classes , 2 - The author is experimenting with eval() to add traits to the class dynamically.
• Writing SQL, which works on PostgreSQL, MySQL and SQLite
• A small overview of alternative implementations of PHP: HippyVM, JPHP, Tagua VM, Peachpie
• Binary web shell via OPcache in PHP 7 - An interesting post about how malicious code can be hidden in OPcache.
• Talk about MVC and web application architecture
• Work with WAV files using PHP
• The digest of interesting materials from the world of Drupal # 20
• Upgrading PHP to 7.0.6 can break your code
• PHP 7 Checker
• Confessions of Bitrix Hayter
• Chat bot development for Facebook Messenger
• 5 stages of the API: what we understood by writing two versions

Thanks for attention!

If you notice an error or inaccuracy - please inform the PM .
Write questions and suggestions by mail or twitter .

Send links to interesting articles or useful tools that were not in PHP Digests , and your name will be next to the sent link in the release.

Send link
Quick search in all digests
← Previous release: PHP Digest number 84