PHP Digest number 102 - interesting news, materials and tools (February 1 - 12, 2017)

We offer to your attention another selection with links to news and materials.
Enjoy reading!

News and Releases

• WordPress 4.7.2 - The update is noteworthy in that the critical vulnerability was eliminated without publicity, allowing a remote attacker without authentication to change the content of any page through REST API manipulation.
  Despite the fact that only WordPress versions 4.7.0 and 4.7.1 are vulnerable , a wave of automated attacks has spread across the Internet. More than 1.5 million resources have already been cracked.
• PhpStorm 2017.1 EAP 171.3019 - Codeception support has been added to the latest EAP version.
• Go! AOP Framework 2.1.0 - In release, support for PHP 7.1 and several new features.
• PHPUnit 6.0.0 - This release requires PHP version not lower than 7.0, also for most classes now use namespaces instead of prefixes. Full list of changes here . A small tutorial on migration.
• LiveStreet 2.0 release
• Yii 2.0.11

Php

• RFC: Make Libsodium a Core Extension - The proposal to include the Libsodium cryptographic library into the core has successfully passed the vote and will be implemented already in PHP 7.2. The community also voted to use the sodium_* prefix syntax instead of the \Sodium\* namespace. However, the firehed / sodium wrapper is already available to use functions through the namespace. It should be noted the author's irony .
  
  
• RFC: Arrow Functions - The fourth attempt to add short syntax for anonymous functions in PHP.
  
  The first sentence with the construction of the form: $x ~> $x + $y did not pass the vote. An alternative syntax was then proposed: function($x) => $x + $y . Further syntax was submitted for consideration: ^($x) => $x + $y . This time it is suggested to use fn(parameter_list) => expr :
  ')
  

    function ($x) use ($y) { return $x + $y; } // : fn($x) => $x + $y 

  
  By the way, the 3v4l.org tool allows you to test the code on the RFC, for which there is a branch with the implementation, in particular, for Arrow Functions.

Instruments

• wapmorgan / Morphos - Morphological solution for PHP for the Russian language: the declension of names and nouns, pluralization, cardinal numbers.
• wapmorgan / BinaryStream - Library for easy reading binary files.
• 1ma / RedisSessionHandler - Session handler for Redis, in which, compared to the built-in phpredis, the blocking error is fixed and the session commit protection is implemented.
• peridot-php / peridot - BDD framework for testing. Tutorial for use. There is a plugin for running peridot-php / peridot-concurrency tests in parallel.
• ericmann / sessionz - Alternative session manager. Video Tutorial
• tommy-muehle / php-composer-plugin-devenv - Dev-environment to develop plug-ins for Composer and the post from the author in support.
• maghead / maghead - ORM for PHP 7 with code generation and other chips. Judging by the benchmark , pretty fast.
• wizaplace / github-to-mysql - Script to synchronize data from GitHub (issues, labels, ...) to MySQL.
• maennchen / ZipStream-PHP - The library allows you to create a zip archive on the fly and write to the stream. Post in support.
• patrickschur / language-detection - A library for determining the language for a given string.
• SocialConnect / auth - Library for authentication through social. services (OAuth1 / 2, OpenID, OpenIDConnect). 20+ providers out of the box (VK, FB, G +, Twitter, Steam, etc.).

Study materials

• PHP 7

  
  
  • PHP's not dead! - On migration to PHP 7 in OLX.
  • PHP 7.0 and 7.1 Innovation Guide
  
  

• Symfony

  
  
  • mnapoli / fluent-symfony - Configuration of a DI container with a fluid interface.
  • wallabag / wallabag - Read-it-later (Pocket, Readability, Instapaper) service based on symfony. The code of applications on iOS , Android , and extensions for Chrome is also available .
  • gpslab / geoip2 - Symfony Bundle for the Maxmind GeoIP2 API. Sent by ghost404 .
  • Symfony Demo 1.0.0 - The official application on Symfony with a demonstration of the best practices.
  • PSR-11 for containers will be implemented in Symfony 3.3 - PSR-11 voting is coming to an end and is likely to be successful.
  • Symfony Week # 527 (January 30 - February 5, 2017)
  • Symfony Week # 528 (February 6-12, 2017)
  
  

• Yii

  
  
  • Yii2 Inspections for IntelliJ IDEA (PhpStorm) 1.0.0
  • craftcms / cms - Cii based on Yii 2.
  
  

• Laravel

  
  
  • 13 admin generators for Laravel
  • Scaling Laravel with AWS Elastic Beanstalk
  • Laracon Online - Laravel online conference announced on March 8th.
  
  
• Cryptographically secure PHP development
• Type casting and object embedding - About why it is not safe to use unserialize() with user data using the example of ExpressionEngine research.
• Awesome Composer - A selection of materials, plug-ins, and useful resources on Composer.
• How to make PHP even more modern? With the help of preprocessing! - preprocess.io - the already famous marcioAlmada / yay is used under the hood.
• Reddit API Tutorial
• A quick introduction to TypeScript for PHP developers.
• RabbitMQ introductory tutorial
• Run PHPUnit tests inside the Docker container from PhpStorm
• Pagination of data collections using zend-paginator
• About API Error Responses in PSR-7
• A note on using constants in a PHP application
• Introduction to the design of entities, the problem of creating objects
• Tarantool: Good, Bad, Angry
• How to create a Viber bot using PHP
• Report and materials of the conference MageConf 2016

Entertaining

• A little PHP history - Rasmus Lerdorf published the changelog of earlier versions of PHP 1.90 - 2.0.1.
• hannob / php-crashers - Examples of scripts that call segfault in PHP
• Open source e-commerce platform rating
• XSS game - A mini-game from Google to train your XSS vulnerability search skills.

Thanks for attention!

If you notice an error or inaccuracy - please inform the PM .
Write questions and suggestions by mail or twitter .

Send link
Quick search in all digests
← Previous release: PHP Digest number 101