Install
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
I Built a Modern PHP Framework From Scratch — Veldora PHP
4+ day, 11+ hour ago (191+ words) Hey everyone! I'm Shahriyar, the creator of Veldora PHP. I've been building Veldora as an independent PHP framework focused on clean architecture, developer experience, and giving developers more ownership over their applications. Veldora is a modern PHP 8.2+ MVC framework for…...
I built an open-source static flow analyzer for Symfony — PHPFlow v0.1.0
1+ week, 28+ min ago (158+ words) I’ve just released the first public version of PHPFlow, an open-source static flow analyzer for PHP/Symfony applications. The idea came from a problem I regularly run into on larger applications: answering a question like “what actually happens when this…...
The POST was guarded, the GET on the same URL was not: cross-tenant PII disclosure in CoopCycle (GET /api/stores/{id}/addresses)
1+ week, 4+ day ago (268+ words) TL;DR What: In coopcycle-web — the open-source logistics and marketplace platform that... Tagged with security, php, symfony, appsec....
L'autocomplétion zsh avec Composer et Symfony console
1+ week, 5+ day ago (475+ words) Le script de completion est sur ce gist, et cette commande installe tout d'un coup: Dans les versions suivantes, Symfony a ajouté le support de fish, puis de zsh. Si tu es sur zsh (comme moi) et que ton projet…...
When HTTP Retries Become Dangerous: Idempotency in Symfony Without the Fairy Tales
1+ week, 6+ day ago (1560+ words) Retries are one of those things that look harmless until the first time they duplicate a real business operation. A request times out, so the client retries it. But what if the first request actually reached the server? What if…...
A modern API reference for Symfony with Scalar
2+ week, 6+ hour ago (301+ words) Symfony had no official integration with Scalar — the open-source API Reference renderer that makes Swagger UI look its age. Laravel got one back in 2024: scalar/laravel has 231,862 installs on Packagist. Symfony got nothing — not a single package on Packagist, and…...
Catching Risky Doctrine Migrations Before Production
2+ week, 2+ day ago (671+ words) Database migrations are one of those things that often look harmless during code review. A migration may contain only a few lines of SQL, the application tests are green, and everything seems ready to deploy. But a small migration can…...
Preventing lost updates in Symfony APIs with ETags and Doctrine
3+ week, 21+ hour ago (775+ words) There is a concurrency problem in APIs that is easy to miss. Two clients read the same resource: Both receive the same version. Client A changes the title and saves it. Then Client B, still working with the older representation,…...
I made a Symfony bundle for masking sensitive data
3+ week, 1+ day ago (237+ words) I recently released a small open-source Symfony bundle called MaskedBundle. The reason for building it was quite simple: logs are useful, but sometimes they can contain values that should not be there. I wanted something I could reuse in Symfony…...
Row-level security in Symfony: the role that ran your migrations bypasses every policy you wrote
3+ week, 1+ day ago (989+ words) Then came the warning: their two RLS bugs had both been invisible in tests, because the test connection was a superuser and superusers bypass RLS. The trap is wider than superusers, and the wider version is the one that lands…...