PHP Digest 160 (July 1 - 15, 2019)

Fresh selection with links to news and materials. In the release: PHP 7.4.0 alpha 3, ReactPHP 1.0 LTS, a portion of useful tools, video from conferences, podcasts and more.

Enjoy reading!

News and Releases

PHP 7.3.7
PHP 7.2.20
PHP 7.4.0 alpha 3 - The latest alpha release of the planned . The fic-freeze should be on July 22, therefore the current list of changes can be supplemented only by those for which voting started no later than July 8. Total now on the vote:
• Deprecations for PHP 7.4
• Escape PDO "?" parameter placeholder
• Deprecate curly brace syntax for accessing array elements and string offsets
• Add str_starts_with (), str_ends_with () and related functions .

Also a couple of fresh changes without separate RFCs:
• proc_open will take arguments as an array, they do not need to be escaped, and the process will start directly without running an intermediate shell:
```
 proc_open(['php', '-r', 'echo "Hello World\n";'], $descriptors, $pipes); 
```
• In PHP 7.4, notice will be thrown when attempting to misuse scalar types as arrays. Previously, such calls simply returned null :
```
 $null = null; var_dump($null[0]); // NULL $int = 42; var_dump($int['foo']); // NULL var_dump(true[0] === false[0]); // true 
```

Instruments

humbug / php-scoper - The tool allows in one step to add the prefix to all namespaces in the specified folder. It can be useful when you need to use multiple versions of the same package, an example of use for WordPress-plugins .
CaptainHookPhp / captainhook - Git-hook manager for PHP projects.
sebastianfeldmann / phpbu - A tool for creating backup copies of files and databases. Able to encrypt backups and send to storage.
localheinz / http-method - A set of constants with the names of HTTP-methods.
spiral / roadrunner - PHP application server on Golang. Added support for FastCGI, CORS settings out of the box, embedded metrics on Prometheus. A detailed review of the report from the author .
leocarmo / circuit-breaker-php - Implementing the Circuit Breaker pattern for PHP. Alternative: ackintosh / ganesha .

Symfony

Laravel

10 useful methods of Laravel Collections
Research Testase in Laravel and load acceleration by 50% during tests.
Making Event Sourcing in Laravel with EventSauce

Yii

Async php

ReactPHP 1.0 LTS - 7 years ago the first release of ReactPHP v0.1.0 was released. And now, the project team has announced version 1.0 of the reactphp / dns , reactphp / cache packages and the reactphp / react meta package. Thus, all major packages have now reached a stable version. The release comes with the LTS mark and it will be supported for at least two years.
We write RESTful API using ReactPHP: Add routes , Refactor adding controllers , Test endpoints , Add error handling
Use ReactPHP to run Drupal commands.
swoft-cloud / swoft 2.0 - Swoole- based framework for implementing microservices, inspired by Spring Cloud from Java. Implements PSR-7, PSR-14, PSR-15 and uses AOP. Introductory post in support.

Security

nbs-system / snuffleupagus - The extension blocks the launch of potentially unsafe code in runtime. About use to prevent recently published vulnerabilities.
paragonie / argon2-refiner - A tool to help you find the optimal parameters for hashing using the Argon2id algorithm added in PHP 7.3 .
We use the nuances of the PHP query parser to bypass the network intrusion prevention / detection systems.
Magento 2.3.1: Unauthenticated Stored XSS to RCE - Vulnerability Analysis in Magento (<2.3.1), which allowed an unauthenticated user to seize the store and redirect payments.

Study materials

Audio Video

DevConf 2019, Moscow
PHPDay 2019, Verona
PHP Town Hall Episode 67 - About Zend Framework 3 and Laminas with Adam Culp .
That Podcast Episode 60 - O Twig, Drupal, and Sculpin with Oliver Davies .
That Podcast Episode 61 - About the new HTTP Client component in symfony with Nicolas Grekas . Nicholas says that PSR-18 is not compatible with HTTP / 2, because the standard is synchronous in nature.