Posts about PHP

Atom feed

• Unsigned

  Sep 6, 2022

  Unsigned is a fixed (but arbitrary) length unsigned integer arithmetic library for native PHP. It was created as a helper for the Random Extension Polyfill to remove hard dependency on the GMP. It may be useful for weird arithmetic with shifts and unsigned overflows that is used in RNGS, encryptors, hashes, etc. (But it won't be cryptographically secure! Time based attacks are quite possible because of some optimizations) Performance greatly depends on the PHP version, with PHP 8.0+ it performs quite nicely, only slightly slower than GMP.

  https://sandfox.dev/php/unsigned.html

  Category: PHP • Tags: arithmetic, lib

• Polyfill for Random Extension

  Jul 23, 2022

  Announcing my new library, a polyfill for the new sexy ext-random from PHP 8.2 that I mentioned a couple of posts ago. It requires PHP 7.1+ and the GMP extension.

  There will be some limitations with the compatibility but it's already usable for most simple use cases. Grab it here: https://sandfox.dev/php/random-polyfill.html

  Many thanks to Go Kudo for his work on the original extension.

  Category: PHP • Tags: ext-random, php 8.2

• Early Look at PHP 8.2

  Jun 22, 2022

  It's a month before the feature freeze so we can predict what the release will look like. So far it seems like an underwhelming release without any killer features. It still has very nice language improvements.

  These are the things I would like to highlight:

  Read more…

  Category: PHP • Tags: php 8.2

• License Manager for Composer

  Jun 22, 2022

  I found myself in a need to filter away some licenses for my dependencies (AGPL, I'm looking at you). I've found a well known plugin for that: metasyntactical/composer-plugin-license-check.

  The problem that I found with it is that it doesn't prevent you from installing blacklisted packages. I mean it was designed to do that but fails on Composer 2.0+.

  I started investigating for the ways to fix that but ended up with a feature complete plugin. It also offers some more flexibility in the config.

  Grab it here: https://sandfox.dev/php/composer-license-manager.html

  Category: PHP • Tags: composer, license

• PHP 5: if (\false)

  Jan 7, 2022

  I was wondering why the typical class alias boilerplate code uses this weird backslash in if (\false) like here for example.

  It turns out this code will wish you a happy debugging in PHP 5.3-5.6:

  <?php
  
  namespace ns;
  
  define('ns\\false', 1);
  
  if (false) {
      echo "Happy Debugging", PHP_EOL;
  }
  

  Not a very useful knowledge now but an interesting history fact.

  Category: PHP • Tags: php 5, til

• PHP 8.1 Syntax Showcase

  Nov 30, 2021

  PHP 8.1 was released when I was suffering from COVID so I'm a bit late.

  <?php
  
  enum Status
  {
      case OK;
      case Error;
  }
  
  #[SomeAttr(new SomeNestedAttr())]
  class TestTest
  {
      public function __construct(
          public readonly Status $status = Status::OK,
          private Logger $logger = new FileLogger(perm: 0o644),
      ) {}
  
      public function process(Iterator&Countable $value)
      {
          if (count($value) === 0) {
              $this->error();
          }
      }
  
      public function error(): never
      {
          $this->logger->error('Error!');
          exit;
      }
  }
  
  $test = new TestTest();
  
  $arr1 = ['a' => new ArrayObject()];
  $arr2 = ['b' => new ArrayIterator()];
  
  $result = array_map($test->process(...), [...$arr1, ...$arr2]);
  

  Category: PHP • Tags: php 8.1

• Torrent File 2.2

  Nov 30, 2021

  The torrent file library got its biggest update. Versions 2.2 / 3.0 added support for:

  • BEP-5: DHT nodes list

  • BEP-17: HTTP seed urls

  • BEP-19: WebSeed urls

  • BEP-47: sha1 sums, executable files, symlinks, padding

  • Big cleanup to support torrent v2 metadata (BEP-52) in 2.3 / 3.1

  Category: PHP • Tags: torrent

• CVE-2021-41106

  Sep 30, 2021

  Nice, now I have my first CVE :D The one I've found, not the one I've created :D

  • GitHub: https://github.com/advisories/GHSA-7322-jrq4-x5hf

  • CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41106

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-41106

  If you're using lcobucci/jwt, please upgrade.

  Category: PHP • Tags: jwt, security

• IsResource

  Sep 28, 2021

  Inspired by a recent discussion in the PHP Internals, I decided to provide a userland solution. Check this:

  <?php
  
  $hash = hash_init('md5');
  
  // vanilla functions:
  is_resource($hash); // true in PHP <= 7.1, false in PHP >= 7.2
  get_resource_type($hash); // "Hash Context" in PHP <= 7.1, various errors otherwise
  
  // library functions:
  \Arokettu\IsResource\is_resource($hash); // true
  \Arokettu\IsResource\get_resource_type($hash); // "Hash Context"
  

  Get it on my dev portal: https://sandfox.dev/php/is-resource.html

  Category: PHP • Tags: is_resource, php 8, php 8.1

• Pseudolocale Lib for PHP

  Jan 27, 2021

  I haven't found a good standalone pseudolocalization library for PHP so I wrote my own.

  https://sandfox.dev/php/pseudolocale.html

  Or if you're using Symfony Components or you don't mind using huge libraries for simple tasks, there is one good alternative: PseudoLocalizationTranslator in the Symfony Translation Component since version 5.2.

  Category: PHP • Tags: i18n, php, pseudolocale

« Older posts