Last month, news broke of a breach of the PHP community’s development Git server. This breach included the addition of two malicious commits to the language’s source code. The malicious code was immediately identified and removed; the team is taking further steps to ensure this kind of situation never occurs again.

We continue our containerization journey from last month where we covered how to refactor an application that created PDF files to use S3 to store the documents instead of relying on the local server’s storage. Another challenge often found is when an application uses outdated PHP and runs on an unsupported/outdated operating system version. What […]

Over the last few months, I have been slowly building toward something. As you have come along this text journey with me—which thankfully has no Grues—I have been putting into place all the knowledge that you need to start building a web API, and most importantly, to understand what that code will be doing. We […]

Ciphers come in many different forms and have been used since ancient times to encode and decode vital messages. Today, we use complicated mathematics to encrypt and decrypt messages. Typically, we depend on shared and secret keys to ensure the message is only readable by the intended recipients. What if you don’t have the computing […]

Behat, and feature tests overall, are crucial for giving you confidence that when you refactor code, you don’t change how an application works and for helping you understand how an application behaves in practice. Investing in integration and functional tests is worth it in the long term, and in this article, we’ll see how I […]

In the PHP world, if you ask most developers about testing frameworks, the first response you’ll get is PHPUnit. But there are several alternatives, and one of them is atoum. This article introduces you to atoum, the simple, modern, and intuitive unit testing framework! You will discover how to write fluent tests and execute them […]

In the past ten years, PHP has undergone several transformations that made the language faster, stricter, and included support for a large variety of high-quality tooling. But, most importantly, the PHP community continued to mature as well, which led to the introduction of modern development practices, robust application architectures, and top-notch instruments.

By Eric Mann Every web application that allows users to authenticate needs to ensure their users’ credentials are afforded the best protection possible. Conventionally, this is done by storing only the hash of a password rather than the password itself. Luckily, password hashing in PHP is secure, safe, and remarkably straightforward to implement. Last month […]

Every web application that allows users to authenticate needs to ensure their users’ credentials are afforded the best protection possible. Conventionally, this is done by storing only the hash of a password rather than the password itself. Luckily, password hashing in PHP is secure, safe, and remarkably straightforward to implement.

When you encounter extremely costly errors, take steps to prevent the error from happening in the future. The earlier we catch an error, the less expensive it is to fix. Here we discuss two costly situations: a typo in an if statement and upcoming PHP 8 breaking changes.