Quantcast
Channel: PHPDeveloper.org
Viewing all 1515 articles
Browse latest View live

PHP.net: Release of PHP 5.4.36, 5.5.20 and 5.6.4 (Includes Security Fix)

$
0
0

The PHP.net has announced the releases of several new versions in all of the current major series, all correcting several bugs including a CVE-related (security) related to unserialization. This security issue was reported in CVE-2014-8142 and relates to this bug report. It is highly recommended that you upgrade your versions to correct this potential security vulnerability. The latest versions are:

As always, you can download these latest releases directly from the downloads page or http://windows.php.net/download for the Windows users. If you're interested in the other bugs fixed in these releases, check out the full Changelog.

Link: http://php.net/archive/2014.php#id2014-12-18-3

Efficient Chinese Search with Elasticsearch

$
0
0

On the SitePoint PHP blog a new tutorial has been posted showing you how to effectively search Chinese content with ElasticSearch. ElasticSearch is a "powerful open source search and analytics engine that makes data easy to explore" and plays nice with PHP via a JSON based query format.

If you have played with Elasticsearch, you already know that analyzing and tokenization are the most important steps while indexing content, and without them your pertinency is going to be bad, your users unhappy and your results poorly sorted. Even with English content you can lose pertinence with a bad stemming, miss some documents when not performing proper elision and so on. And that's worse if you are indexing another language; the default analyzers are not all-purpose. When dealing with Chinese documents, everything is even more complex, even by considering only Mandarin which is the official language in China and the most spoken worldwide.

He starts by explaining exactly what the problem is with searching Chinese content including the fact that some words can actually be a combination of two or more characters (words). He then lists out a few plugins and tools that can be integrated with ElasticSearch to help with analyzing the content. He goes through each of them and provides instructions on installation and usage. He ends the post with a sample of the results for a set of three search terms, comparing the matches each found.

Link: http://www.sitepoint.com/efficient-chinese-search-elasticsearch/

Developer Drive: Simplify your documentation process with Couscous

$
0
0

On the Developer Drive site today there's a quick post introducing you to Couscous, a PHP-based documentation generation tool. Couscous translates your Markdown files into HTML output that's professional and clean looking.

If there's one thing I hate more than tracking down bugs, it's documenting code. It takes forever, it's almost a project in itself, and I never seem to factor it into my project lifecycle. Setting out to solve that problem for me, and anyone else whose life is too short, is Couscous. Couscous takes markdown files and converts them into professional standard HTML docs that colleagues, or fellow developers, can easily follow. You can preview the resulting site on your local machine, correct any issues, and then deploy straight to GitHub where it will be hosted for you.

They walk you through the (brief) process of getting the tool installed via Composer and using it to show you a preview of your documentation. The "deploy" command then allows you to easily deploy the results out to a GitHub Pages location on the gh-pages branch. You can find out more about Couscous on the project website.

Link: http://www.developerdrive.com/2014/12/simplify-your-documentation-process-with-couscous/

Community News: Packagist Latest Releases for 12.20.2014

$
0
0
Recent releases from the Packagist:

Community News: Packagist Latest Releases for 12.21.2014

$
0
0
Recent releases from the Packagist:

Community News: Latest PEAR Releases for 12.22.2014

Community News: Packagist Latest Releases for 12.22.2014

$
0
0
Recent releases from the Packagist:

SitePoint PHP Blog: No More var_dump - Introducing Symfony VarDumper!

$
0
0

The SitePoint PHP blog has a recent post about an addition to the Symfony framework that can make debugging (or just outputting errors) a more pleasant experience: the VarDumper component.

Recently, Symfony went from Zend-like bloat and rigidity to extreme decoupling and modularity. [...] One factor that contributes to this factor a lot is their continuous pushing out of new components that are incredibly useful outside of Symfony's context. One such component is the new VarDumper.

He talks first about the "why" the component was created and why you might want to use it. He links to the documentation and what kinds of features come along with it. He also shows a quick install of the component, some usage of it in the code and the resulting output of both simple and complex data structures, including method structure, visibility and closure information.

Link: http://www.sitepoint.com/var_dump-introducing-symfony-vardumper/

Anthony Ferrara: On PHP Version Requirements

$
0
0

In his latest post Anthony Ferrara talks about PHP version requirements and how it's a bit of "chicken and egg" problem. If hosting providers are slow adopting even PHP 5.4, can we realistically bump up the minimum to PHP 5.4+ and potentially shun users not at that level yet?

Most people agreed with me [saying new software with a PHP requirement <= 5.2 is beyond irresponsible, it's negligent], saying that not targeting 5.4 or higher is bad. But some disagreed. Some disagreed strongly. So, I want to talk about that.

[...] Now, these are pretty interesting arguments. It boils down to making the logical argument that if hosts don't support 5.4+, then moving to require 5.4+ would leave the users who use those hosts abandoned. And some projects don't want to abandon users. It's a warm and logical idea; Open your arms to everyone, and include them all. Don't leave anyone behind. Really, it's a good argument. The problem is, is it based on a flawed premise...?

He suggests that it sounds somewhat like an appeal to emotion and that by enforcing a bump up like this would be "abandoning the users". He gets into some of the statistics he worked up regarding PHP versions, WordPress usage and how, because of these large numbers, hosting companies would make the move if only for business reasons. He talks about the "Go PHP5" initiative and the impact it made on versions supported across the board. He also looks at some of the reasons why keeping up with these versions is good for the hosting companies too: security, education of users and the new features that come with later versions.

So I put this to you, WordPress, CodeIgniter and every other CMS and Framework still supporting PHP 5.2 and 5.3 (and earlier versions): Step up and lead. Step up and be the change you want to see. Don't follow and react, lead and be proactive. After all, if we can move forward together, we can all benefit. But if we walk separate paths, we build walls and we all lose...
Link: http://blog.ircmaxell.com/2014/12/on-php-version-requirements.html

Cal Evans: Five influencers you should thank this year for making the PHP community so awesome

$
0
0

Cal Evans, PHP community member extraordinaire, has a new post sharing his suggestions of the top five influencers in the PHP community that "make it awesome" and help make it one of the best he's been involved in.

It is no surprise to anyone who has talked to me for more than five minutes that I think the PHP community is the most vibrant and engaging developer community out there. So as we approach the end of the year, I am going to list out the influencers that help keep this community at the top. These are the people that you need to seek out and thank because without them, the PHP community would not be what it is today.

He goes with categories rather than mentioning names (because, really, there's way too many too name them all):

  • 5: Core Developers
  • 4: User Group Leaders
  • 3: Conference Organizers
  • 2: Conference Speakers, Bloggers, and Teachers
  • 1: Any developer using PHP

That last one, while it might seem like an "everyone else" kind of category, is one of the most important in my opinion. After all, what is a language without its users. Core developers and community group/event leaders wouldn't have anything to talk about if no one was there to talk. There would be no one to teach or be taught to and the core developers wouldn't have any reason to drive the language forward. Even if you're not well-known in the PHP community, you and your code are making a contribution to the community, even if only in a small way.

Link: http://blog.calevans.com/2014/12/21/five-influencers-thank-year-making-php-community-awesome/

/Dev/Hell Podcast: Episode 53: Let's Get This Thing Over With

$
0
0

The /Dev/Hell podcast has posted their latest episode with hosts Chris Hartjes and Ed Finkler: Episode 53: Let's Get This Thing Over With.

Guest-less and listless, Chris and Ed slouch their way back to their studios. Chris talks about the time he tried to murder a disabled woman with his new luxury sedan, we discuss artisanal PHP-Nuke sites, and how we got our local user groups started. Then It really goes off the rails with a discussion of the awesomeness of Dragon Age: Inquisition, and what happens to games and other services that rely on Internet connectivity.

You can listen to this latest episode either through the in-page audio player or by downloading the mp3 for listening at your leisure. If you enjoy the episode be sure to subscribe to their feed and get the latest episodes as they're released.

Link: http://devhell.info/post/2014-12-18/lets-get-this-thing-over-with/

Community News: Latest PEAR Releases for 12.29.2014

Community News: Packagist Latest Releases for 12.29.2014

$
0
0
Recent releases from the Packagist:

SitePoint PHP Blog: 3 Ways to Implement Embeddable Custom Badges

$
0
0

The SitePoint PHP blog has a recent tutorial showing you how you can use one of three different ways to embed badges into your site. These "badges" are a common practice among sites allowing other sites/applications to embed small statistics such as number of Tweets or Likes about a page.

One great way of organically promoting your application is to provide "badges"; snippets of content that people can embed on their own websites. [...] This can contain up-to-the-minute information from your application about a user, piece of content or another object, dynamically generated and inserted into other websites. In this article I'm going to take a look at some of the ways you can implement this.

He walks you through the creation of a simple application based on Silex, using Twig for template rendering and the WideImage library for creating the images. His datastore, a static array, lists an image, rank and number of "trophies" for each user of the system. He creates a main page showing all of the badges at once, making use of an "iframe" to contain the dynamically created image. He shows how to use the WideImage library to pull in the background, avatar and trophy images, merge them together and add a bit of text with the username and level ranking. Finally he includes the Javascript needed so the remote site can just use a "script" tag to pull in the rendered image and place it on their page.

Link: http://www.sitepoint.com/3-ways-implement-embeddable-custom-badges/

Symfony Blog: Symfony 2014 Year in Review: symfony.com website

$
0
0

The Symfony framework blog has posted their end of year review for 2014 with happenings in both the Symfony framework and community.

2014 has been the busiest year in the entire history of the Symfony project website. First, we redesigned our website to bring in a more modern look and feel. Then, we added two new sections: Symfony Marketplace, which is the place where you can find all the products and services built around Symfony ecosystem and Symfony Jobs, which is the official job board to look for and post Symfony related job offers.

In addition, we boosted the official Symfony Blog with lots of new articles and a faster post publishing pace to provide you more contents.

They list out their "top ten" of most popular posts on the site including articles about performance, the v 3.0 roadmap and developer experience. They end the post with a reminder about another new part of the site coming soon - the Symfony Showcase showing off sites built with the framework.

Link: http://symfony.com/blog/symfony-2014-year-in-review-symfony-com-website

Community News: Packagist Latest Releases for 12.30.2014

$
0
0
Recent releases from the Packagist:

Anthony Ferrara: Being A Responsible Developer

$
0
0

In his latest post Anthony Ferrara is back with more discussion around the "only supporting the latest versions" debate (here is the previous article). In this new post he talks about being a "responsible developer" and how that relates to keeping your software up to date.

The general consensus [shared during a DevHell and PHPTownHall Mashup ] was that as an ideology, only supporting latest versions is correct. From a practical standpoint though they said that it's unrealistic. That there are tons of legacy systems out there that are running just fine and can't justify the cost of upgrading. So they shouldn't have to upgrade "for ideological reasons". From one point of view, this certainly makes sense. [...] This point of view disturbs me deeply. And it further disturbs me that it came from the same person who preaches for testing.

He makes the connection between being responsible and the software upkeep through testing. He points out that the real effectiveness of automated testing is in preventing regressions - that is, when software is updated, that bugs don't reappear. He then goes on to share his opinion on some of the other arguments presented in the recording like the "if it ain't broke, don't fit it" and security issues topics. He also shares some number of the reality of what can happen if software is not up to date (or even patched) and how this circles back around to his previous points about software versions driving the OS and PHP versions forward.

Link: http://blog.ircmaxell.com/2014/12/being-responsible-developer.html

Laravel News: 75 Laravel Tutorials, Packages, and Resources from 2014

$
0
0

The Laravel News site has posted their own kind of wrap-up of 2014 in this latest post sharing a monthly list of tutorials, packages and resources they've found useful for the Laravel community.

2014 is coming to a close and to celebrate I put together this post of all the greatest hits each month. This features cool packages, resources, and tutorials that came out over the year.

Among the items on their list are things like:

Check out the full post for the complete list.

Link: https://laravel-news.com/2014/12/75-laravel-tutorials-packages-resources-2014/

Three Devs & A Maybe Podcast: The Christmas Episode

$
0
0

The latest episode of the Three Devs and a Maybe podcast, #52, is their Christmas episode (posted back on the 23rd) with hosts Michael Budd, Fraser Hart, Lewis Cains and Edd Mann talking about a wide range of topics.

It is two days before Christmas but that will not stop us from recording a new episode. This week we discuss Frasers gambling hot-streak at Ascot, Micks move and how horrible Martinis are. We then move on to how Fraser is getting on in his new job up in London and Micks University presentation on Fuzzy Logic. This leads us on to how 'unrandom' humans are, and professional Rock-Paper-Scissors tournaments. Finally, Edd brings up some interesting talks by Greg Young (on EventStore) and Rich Hickey (on software design). Have a great Christmas everyone and thanks for your loyal listenership!

You can listen to this latest episode either through the in-page audio player or by downloading the mp3 directly and listening at your leisure. If you enjoy the show, be sure to subscribe to their feed too!

Link: http://threedevsandamaybe.com/the-christmas-episode/

Marco Pivetta: roave/security-advisories: Composer against Security Vulnerabilities

$
0
0

As Marco Pivetta has mentioned in his latest post to his site, Roave has released a tool for use with Composer that helps prevent vulnerable versions of software from even being installed (based on the data from the security-advisories data from FriendsOfPHP).

Since it's almost christmas, it's also time to release a new project! The Roave Team is pleased to announce the release of roave/security-advisories, a package that keeps known security issues out of your project.

The tool makes use of a "conflict" metapackage, mentioned in the Composer spec, and fails when the software and version is listed in the FriendsOfPHP information. This integration with Composer means that there's no need to run a separate tool for the checks to be made. It's integrated into the workflow and will dynamically fail without the need for you to update anything.

Link: http://ocramius.github.io/blog/roave-security-advisories-protect-against-composer-packages-with-security-issues/
Viewing all 1515 articles
Browse latest View live


Latest Images