Next milestone for version 5.2 in the making - and almost finished! Stay tuned for a next update somewhere in the next two weeks!
See milestone here:
Join Gábor Hojtsy and dive into the world of PHP development at #DrupalConVienna!
Get ready for these 3 powerhouse sessions:
@derickr – Better Debugging with Xdebug
@sebastian – So You Think You Know PHPUnit
@OndrejMirtes – Writing Custom PHPStan Rules for Drupal Projects
Which one are you most excited about?
Don’t miss a single session — join us in Vienna, 14–17 October 2025!
Nová verze pohoda-raiffeisenbank 1.3.8 je venku!
V této verzi jsme vylepšili import bankovních výpisů, přidali lepší podporu pro cizí měny, zpřesnili detekci duplicitních transakcí a rozšířili chybové hlášení v angličtině. Kód nyní plně odpovídá standardu PSR-12, je lépe dokumentovaný a připravený na PHP 8.4.
Děkujeme všem, kteří se podílejí na vývoji a používání našeho open-source řešení pro propojení Raiffeisenbank s účetním systémem Pohoda!
Více informací a zdrojové kódy najdete na GitHubu:
https://github.com/Spoje-NET/pohoda-raiffeisenbank
- NoDiscard attribute
- new URI API
- Pipe operator
- Closures in constant expressions
#PHP 8.5 is going to be fun
A grumpy ItSec guy walks through the office when he overhears an exchange of words.
Dev0: Hey, this isn't working, I hate containers...
Dev1: Maybe just add the --privileged flag!
ItSec: Just… no. Simply no. No privileged mode - the grumpy fellow interjects as he walks away.
Dev0: Jesus, fine - no privileged mode.
Dev1: Okay, but… why?
Here's why (one, simple example):
Docker's --privileged flag lifts almost all restrictions from your container - exactly the opposite of --cap-drop=ALL. Let's demo the difference.
1) Start two containers.
docker run -itd --privileged --name ubuntu-privileged ubuntu
docker run -itd --name ubuntu-unprivileged ubuntu
2) Inspect /dev in the unprivileged container.
docker exec -it ubuntu-unprivileged bash
ls /dev
exit
You'll only see a limited set of devices. No disk access.
3) Now inspect /dev in the privileged container.
docker exec -it ubuntu-privileged bash
ls /dev
/dev/sda exposed! Sometimes you may see /dev/mapper when LVM is in place. Then "apt update && apt install -y lvm2" and "lvscan" may help during next phase.
4) Exploitation part (inside the privileged container) - simply mount /dev/sda to any writable path in container.
mkdir /tmp/whatever
mount /dev/sda1 /tmp/whatever
5) You can now enumerate - and access - the Docker host's logical volume.
ls -la /tmp/whatever
6) If you wish, you can even chroot into the host:
chroot /tmp/whatever /bin/bash
The moral of the story is to avoid privileged mode, because in the event of an incident (e.g. an attacker compromising an app running inside a container), you significantly increase the likelihood of successful lateral movement from the container to the Docker host - and from there into the rest of your infrastructure.
Usually the grumpy guy means well. He just doesn't know how to explain it properly.
【初心者向け】10分で学べる!PHP入門編 #01 文法ルールの基本【Webデザイン・プログラミング】
thank you #kiki users for your gracious patience over the past few months
kiki v1.1.0 is now available on itch. it includes many new requested features, including preliminary support for the gopher protocol.
if you haven't heard of kiki before: it's a tiny home page construction set written to be fast and easy to modify. it's my response to 20 years of dealing with the bloated, frustrating, and exhausting world of wordpress and other heavyweight CMSes.
if you're into writing things with just a text editor, then uploading your document over ftp - then kiki is for you.
(conversely, if you're into dragging and dropping widgets in a massive javascript interface - kiki is *not* for you )
truth be told, gopher support may or may not survive the year. it's an absolutely gnarly protocol that barely deserves to be called one - there are SO many different implementations and revisions. i tried to implement only what made sense to me, and it's basic at best.
What #libre #IDE (integrated development environment for programming code) would y'all want to coalesce around using, supporting, and developing? Asking especially for coding websites and applications with #PHP, #JavaScript, #CSS, and #HTML but #Python, #Elixir, #Rust, and #Go would all be great for us @agaric too.
Optimizing large PHP codebases without breaking everything? I just shared my approach, with code samples and tooling tips.
https://mikelopez.com/blog/1140
#PHP #Performance #Refactoring #DevTips #Backend
I started as a PHP dev. Now I lead a team. The shift was tougher than expected. Here’s what I wish I knew before stepping into leadership.
https://mikelopez.com/blog/1134
#PHP #Leadership #DevLife #Engineering
Hey #PHP,
https://krakjoe.github.io/ort/
Click on "The Solution" and try Tensor Math in your browser ...
Terms and condition apply - web assembly has no threads or intrinsics: it's a demo (which is free to host), not a route to deployment ;)
I've published a new blog entry on supercharging my Open Source project Flow #PHP with Claude Code to tackle those dull, repetitive chores! Check out how AI can boost your productivity.
https://norbert.wip/blog/2025-01-22/ai-automate-boring-coding-tasks
Die Debugger-Klassen der #ConLite sind sehr hilfreich bei der Entwicklung von Modulen und Plugins.
More than 50% of all websites run with #PHP, but some douchebags still say "and more." Crazy...
Huh. I'm trying to work with Mastodon and Bluesky RSS in a php twig based plugin (Grav Twigfeeds). Mastodon feeds work fine, first few words parse as title, each post URL links to the post. Bluesky doesn't work *at all*. If I shove thru FetchRss it sort of works but post URLs only link to the account. RSS.app converts much better but is a paid service.
I think it's to do with no declared XML header, maybe.
Nb in raw php BS feeds do work.