CVE-2025-54068 (9.2/10) - Livewire v3 is vulnerable to remote command execution during component property update hydration
https://github.com/advisories/GHSA-29cq-5w36-x7w3

https://redd.it/1m3xbk8
@r_php

Testing Laravel Sanctum SPA auth in Postman (CSRF + session login)

I’ve seen a few tutorials about getting Laravel Sanctum working with Postman (mostly video or blog form), but I figured I’d write a proper GitHub README version — something minimal and straight to the point.

Here’s the repo:
https://github.com/maikeru-desu/postman-laravel-sanctum-auth

It covers:

Setting up your Postman environment
Getting the CSRF cookie
Adding a pre-request noscript that handles `X-XSRF-TOKEN` \+ `Referer`
Making sure protected routes work without hitting auth errors

Main goal was just to make it easier to test Sanctum like a frontend SPA would — without needing to run your React/Vue app.

Hope it helps someone. Feel free to suggest improvements too.

Star it if you find it useful! 👍

https://redd.it/1m40zko
@r_php

Appraising PostgreSQL with laravel-cache-evict
https://medium.com/@vectorial1024/appraising-postgresql-with-laravel-cache-evict-d8c2f3f1b95c

https://redd.it/1m42p7z
@r_php

Year 0 php dev ,the things one should focus on in their first year to lay a solid groundwork

what should i be learning in my "zero" year??

https://redd.it/1m49j4n
@r_php

CancerStan: My Attempt at autofixing PHPStan errors

I really hate tools that only cry and don't fix "obvious" cases. So i tried to do it myself.
Doesn't cover much cases yet but i've had some fun trying to autodetermine types and building it in general :p
https://github.com/tetreum/cancerstan

https://redd.it/1m4kivu
@r_php

Replace dependency injection and mocking with algebraic effects
https://olleharstedt.github.io/programming/php/fibers/dependency/injection/mocking/effects/2025/06/28/replace-di-mocking-with-algebraic-effects-fibers-php.html

https://redd.it/1m4lle7
@r_php

New PDF Parser: maintainable, fast & low-memory; built from scratch

Hi everyone! I've worked at several companies that used some sort of PDF Parsing, and we often ran into memory issues, unsupported features or general bugs. Text/Image extraction from PDFs in PHP has never been easy, until now! I just released v2.2.0 which adds support for rasterized images, which means that text and image extraction are now supporting almost all features!

You can find the package here: https://github.com/PrinsFrank/pdfparser Let me know if you have any feedback!

https://redd.it/1m4r3zt
@r_php

Releasing Laravel Chat
https://novu.link/l/zI1numM

https://redd.it/1m4qyjr
@r_php

Weekly /r/Laravel Help Thread

Ask your Laravel help questions here. To improve your chances of getting an answer from the community, here are some tips:

What steps have you taken so far?
What have you tried from the documentation?
Did you provide any error messages you are getting?
Are you able to provide instructions to replicate the issue?
Did you provide a code example?
Please don't post a screenshot of your code. Use the code block in the Reddit text editor and ensure it's formatted correctly.

For more immediate support, you can ask in the official Laravel Discord.

Thanks and welcome to the r/Laravel community!

https://redd.it/1m4u0mz
@r_php

Weekly Ask Anything Thread

Feel free to ask any questions you think may not warrant a post. Asking for help here is also fine.

https://redd.it/1m583od
@r_php

Weekly help thread

Hey there!

This subreddit isn't meant for help threads, though there's one exception to the rule: in this thread you can ask anything you want PHP related, someone will probably be able to help you out!

https://redd.it/1m5b212
@r_php

Why should I use Live Components over a dedicated frontend framework?

I'm working on a project where one of our Symfony Forms is actually a Live Component, and I must say I find it extremely convoluted and harder to grasp than if we had a backend Symfony API with a react/angular frontend.

Maybe it's because it wasn't done properly in the first place, or maybe I am missing something, so I'd like to know other Symfony developer's point of views on the matter.

https://redd.it/1m5crqu
@r_php

How to add URL to errorlog file?

Recently I noticed some errors in my error\log file, like this one:

>[20-Jul-2025 06:23:41 UTC\] PHP Fatal error: Uncaught OutOfBoundsException: Seek position 10 is out of range in /home/XXXX
Stack trace:
\#0 [internal function\]: ArrayIterator->seek(10)
\#1 /home/XXXXX(147): LimitIterator->rewind()
\#2 {main}
thrown in /home/XXXXXX.php on line 147

So, I know where to look in my code, line 147, but I want to find out which (in my case dynamic) page this triggers. How can I add an URL to this error message?

I can do it for my connections:

if ($mysqli->connecterror) {
$logEntry = date("d/M/Y H:i:s",time()).' '.$SERVER'HTTP_HOST'.$SERVER['REQUESTURI'].' '.$SERVER['REMOTEADDR'];
errorlog($logEntry);
die("Sorry, connection failed. Please refresh the page (press F5): " . $mysqli->connecterror);
}

But I don't know how to do this with other errors. Thanks for your help.

https://redd.it/1m5cmgp
@r_php

PHP RFC: Deprecate type juggling to and from bool in the function type juggling context
https://wiki.php.net/rfc/deprecate-function-bool-type-juggling

https://redd.it/1m5n2ru
@r_php

Install Jaxon DbAdmin on Backpack

https://medium.com/@thierry.feuzeu/install-jaxon-dbadmin-on-backpack-89c06b70edee

If you are not a Medium member,
https://www.jaxon-php.org/blog/2025/07/install-jaxon-dbadmin-on-backpack.html

https://redd.it/1m5pmg7
@r_php

Websockets in php

So i have been looking into rachetPHP for websockets and I just cant seem to get it working, as I am able to connect but then messages are not sent to the server as I am not seeing them in the browser nor in the command line from which i have initiated the server. If you have more experience with this please shine some light on me as I am clueless on setting up and managing web sockets in php.

https://redd.it/1m5ov9a
@r_php

Dockerized PHP environments – images for CLI, FPM, and full LEMP/LAMP stacks

Hey folks,

I wanted to share a personal project I’ve been maintaining:
👉 https://github.com/fbraz3/php-system-docs

It’s a collection of Docker images for PHP that I’ve built and refined over time. The goal was to have clean, flexible images for everything from basic CLI tasks to full LEMP/LAMP stacks—ideal for dev environments, CI/CD, or even small-scale production workloads.

Some highlights:

Weekly automated builds
Multi-version support
Lightweight and optimized images
Includes tools like WP-CLI, Composer, Symfony CLI, phpMyAdmin, etc.

Even though I’m not working with PHP on a daily basis anymore, the language played a huge role in my journey as a developer, and I wanted to give something back to the community that helped me grow.

Any feedback or suggestions are welcome—and feel free to open issues, contribute, or just give it a star if you find it useful!

Cheers 🍻

https://redd.it/1m5uih9
@r_php

Tell me about your code quality controls

What have you found to be effective in your ci/cd for code quality?

I want to maximize automated quality enforcement without annoying the Devs. I've already got Pint / phpcsfixer commiting fixes to PRs, via GitHub actions.

My last job was legacy spaghetti hell.

Now I'm tech lead at a scale up with a 1 year old modern code base (TALL11/ php83).
We're taking over as an internal team from an agency.

They've done a good job but the code has been written quite free and breezy, with speed over quality as you'd expect from an MVP product.


https://redd.it/1m5va55
@r_php

Entreprise grade reporting engine

We're in the process of rewriting our desktop app to a web app. Our backend is in PHP (Laravel) and we're evaluating what reporting egines are available to us.

Our app has more than 50 reports, some are quite complex and have very precise layouts.

Dompdf or PhpSpreadsheet would not be enough in our case (we need a real report designer, page header/footer, multiple levels of groups with header/footer...) hence why I'm saying "Entreprise grade"

I'm looking for ideas and feedback (good or bad) about reporting engines.

Right now at the top of my list is Stimulsoft's "Report.php" which ticks all our boxes, we're starting a POC in a few weeks.

We also like Jasper reports, even if the report serrver needs Java.

Do you have on-field experience about those two, or did you go with something else, and why ?

https://redd.it/1m5wlry
@r_php

The State of Laravel 2025 survey started
https://stateoflaravel.com/participate?ref=2025

https://redd.it/1m69mth
@r_php

The State of Laravel Survey, 2025
https://stateoflaravel.com/participate?ref=2025

https://redd.it/1m6aajj
@r_php