PHP Digest number 145 (November 26 - December 10, 2018)

Fresh selection with links to news and materials. In the release: PHP 7.3.0, Symfony 4.2, Composer 1.8.0 and other releases, end of support for PHP 5.6 and PHP 7.0, fresh offers from PHP Internals, a portion of useful tools, video reports and much more.
Enjoy reading!

A short audio version of the digest in the five-minute PHP podcast PHP Issue No. 44

News and Releases

• PHP 7.3.0 - The long-awaited major release of PHP delivered strictly on schedule. Thanks to all contributors and release managers for their work! In the fresh version of the interpreter a number of improvements:
  • Heredoc and Nowdoc RFC syntax enhancements
  • The json_encode() and json_decode() functions will throw an exception if there is an error and the corresponding RFC flag is present .
  • Ability to use a comma after the last argument of the RFC function
  • Added functions array_key_first() and array_key_last() RFC
  • New function hrtime (), which returns high precision time and does not depend on system time PR
  • Added is_countable() function to check for enumeration RFC
  • Using links in list() RFC
  • Significant improvement in garbage collection improves performance with a large number of PR objects.
  • Regular expression engine updated to PCRE2 RFC
  Full list of changes in the document UPGRADING .
  I highly recommend that you look at the migration guide for PHP 7.2.x to PHP 7.3.x , thanks to lex111 for the translation.
  
• Light also saw updates to PHP 5.6.39 , PHP 7.0.33 , PHP 7.1.25 and PHP 7.2.13 . And these are the latest releases of the 5.6 and 7.0 branches , and PHP 7.1 goes into security support mode . Thus, at the moment, only PHP 7.2 and PHP 7.3 are relevant.
• PHP on AWS Lambda - At AWS re: Invent 2018, among other things, support for custom runtimes for AWS Lambda was announced. PHP out of the box is supported via stackery / php-lambda-layer , but you can make your own implementation. This means that instead of crutches in the form of a launch via Nodejs or Go, you can now write full lambdas in pure PHP.
• Composer 1.8.0
• CakePHP 3.7.0
• PHPUnit 7.5.0

Php internals

• [RFC] FFI - Foreign Function Interface - The concept from Dmitry Stogov is now in the form of a full-fledged proposal. The implementation will enable the use of functions and data structures from C-modules directly. As an example, you can look at the PHP binding for TensorFlow . Great opportunities, however, open up a wide scope for potential problems and vulnerabilities, so it is proposed to allow FFI by default only in CLI scripts and preloaded files.
• [RFC] Covariant Returns and Contravariant Parameters - It is proposed to make the types more consistent, in particular, to allow “narrowing” the return type in the heirs, and “expanding” the type of parameters.
  Hidden text

   interface X { function m(Y $z): X; } interface Y extends X { //      function m(X $z): Y; } interface Concatable { function concat(Iterator $input); } class Collection implements Concatable { //       function concat(iterable $input) {/* . . . */} } 

Instruments

• spatie / period — The library allows you to make complex date comparisons, for example, to find the intersection of periods, the difference, spaces, extreme limits, and so on.
• scrivo / highlight.php - Port highlight.js , which allows you to highlight the syntax on the server. Markdown integration via spatie / commonmark-highlighter .
• 3v4l.org/live - Interactive online PHP shell (REPL).
• j6s / phparch - Library for architectural testing of PHP projects, inspired by archlint (C #) and archunit (Java). Development in progress.
• halaxa / json-machine - Stream reading (decoding) JSON. For stream encoding, violet-php / streaming-json-encoder is suitable.
• DivineOmega / password_exposed - Checks using the haveibeenpwned.com API has been password compromised.
• skollro / alexa-php-sdk - SDK for developing skills for Amazon Alexa in PHP.
• pyrech / composer-changelogs - In a convenient form displays information about updated packages after running composer update .
• RubixML / RubixML - Library for the application of machine learning in PHP. Alternative to php-ai / php-ml .

Study materials

• Symfony

  
  
  • Symfony 4.2.0 - A list of the most interesting changes here .
  • Symfony Week # 623 (December 3-9, 2018)
  • Symfony Week # 622 (November 26 - December 2, 2018)
  • EasyCorp / EasyAdminBundle 2.0.0
  • Top PhpStorm Symfony Plugins
  • How to manage configuration in symfony without using the classes Bundle, Extension and Configuration.
  • Five Minutes PHP Release # 43 - SymfonyCon Report: Using Symfony Forms with Rich Domain Models.
  
  

• Yii

  
  
  • cebe / yii2-openapi - REST API generator for Yii2 based on the OpenAPI 3.0 specification.
  
  

• Laravel

  
  
  • beyondcode / laravel-websockets - WebSocket server for Laravel based on Ratchet . Allows you to implement all kinds of real-time applications, without having to use Pusher. There is a demo application . More in the announcement of the tool , documentation, or briefly in the video review .
  • qcod / laravel-gamify - Package for adding gamification elements in the form of points and badges to the Laravel application. There is also an autonomous gamification engine based on symfony sveneisenschmidt / yay .
  • spatie / laravel-collection-macros - A collection of useful macros for Laravel collections.
  • Backing up your Laravel database to Google Drive
  • Quick performance tips in Laravel
  
  

• Async php

  
  
  • friends-of-reactphp / mysql - Asynchronous client for MySQL on ReactPHP. Post in support of the release of the added lazy connections .
  • walkor / shadowsocks-php - Another SOCKS5 proxy, a clone of the popular Workerman asynchronous engine shadowsocks .
  • Korutiny in PHP on Swoole 4.x vs korutiny Golang
  
  

• CMS

  
  
  • WordPress 5.0 “Bebo” - In the release of the new editor Guttenberg and the new theme Twenty Nineteen. The old editor is available in the Classic Editor plugin and will be supported until the end of 2021.
  • WordPress will finally update PHP! In April, the minimum version will be upgraded to 5.6, and by the end of 2019 - to PHP 7 (probably 7.2).
  • Magento Tech Digest # 38: Nov 26 - Dec 03, 2018
  • Magento 2.3.0 GA Platform Release
  • Magento Meetup Kharkiv №4 - video reports
  • Warehouse management system using CQRS and Event Sourcing (Magento)
  
  

• Security

  
  
  • ajinabraham / CMSScan - Vulnerability Scanner in popular CMS Wordpress, Drupal, Joomla, vBulletin. Wrap over wpscan , droopescan , vbscan , joomscan .
  • PHP Security Advent Calendar 2018 - Throughout December, interesting information about vulnerabilities in WordPress plugins is published every day.
  • Vulnerabilities in PHP and PHPMailer
  • Slice Of PIE # 01 - Answers to security questions from ParagonIE.
  • A couple of symfony vulnerabilities: CVE-2018-19789 (disclosure of downloaded files), CVE-2018-19790 (Security \ Http redirect vulnerability)
  • NPM dependency hell: Comparison with Symfony, Laravel and API Platform - Analyzing the dependency maintainers of popular PHP frameworks after malicious code was detected in the popular event-stream JS library.
  
  
• Configuring code generation in PhpStorm
• 14 harmful tips on how to write poorly readable and unsupported PHP code
• We migrate to password_verify and update password hashes in the existing database.
• creating exceptions on the fly - Using anonymous classes for
• How to taxi with legacy code when the project was needed for yesterday
• On-click fame, or how to excite the robot and ... the rest

Audio and video

• Five Minute PHP Release # 44 - An audio version of this PHP Digest release.
• Five Minutes PHP Release 42 - MySQL 8 and caching_sha2_password
• PHP Roundtable Podcast # 81 - About PHP-FIG 3.0, PSR-18 and more.

Entertaining

• MagicalTux / goro - Attempt to implement PHP on Go.

Thanks for attention!

If you notice an error or inaccuracy - please inform the PM .
Write questions and suggestions by mail or twitter .

More news and comments on the PHP Digest telegram channel.

Send link
Search links for all digests
← Previous release: PHP Digest number 144