PHP Reddit – Telegram
PHP Reddit
34 subscribers
288 photos
36 videos
24.8K links
Channel to sync with /r/PHP /r/Laravel /r/Symfony. Powered by awesome @r_channels and @reddit2telegram
Download Telegram
Security review request — Laravel app (MVC + API) with rich-text editor: how to test & harden against XSS and common Laravel attacks?

Hi eweryone! I just deployed a Laravel application that exposes both an MVC frontend and an API. The app includes a rich-text editor, and I want to perform a focused security review before going wider. ’m looking for advanced/practical advice: how to test for XSS (reflected, stored, DOM) and other Laravel-specific risks.

https://redd.it/1ogfd03
@r_php
Concepts i should master before diving into frameworks

Hi,i'm someone with a goal to become a really good PHP developer. Im currently in the making some very basic beginner projects with pure PHP and haven't touched a framework yet like Laravel or Symphony.Can someone please give me some extra advice and a decent list of concepts i need to master before diving into frameworks.Its true that i may not need to get really deep into pure php to dive into frameworks because i have heard other people who succeeded becoming laravel devs without deep diving first into pure PHP,but i really want to become a great at it before touching frameworks. Any advice is greatly aprecciated along the way and i would love if someone could just list me some concepts i must master to make framework learning and then development a lot easier and also just help me as a developer,maybe some resources,anything welcomed and apreciated.

https://redd.it/1ogkcy1
@r_php
What's the best way to implement a Tag entity?

Hey,

Let's say you're making an app with many Users who can all create Properties and Documents with any number of Tags each.

e.g. Property tags would include stuff like "south-facing". Documents might have "rental agreement". Some tags could exist on either like "renovation".

How would you set that up? I can't come up with an optimal solution :(

With a ManyToMany setup:

\- By having only one Tag entity you might see "south-facing" appear in the Document's auto-complete which makes no sense. But by having PropertyTag and DocumentTag you duplicate the "renovation" value.

\- If every user has its own tags, you'll end up with 100 versions of "renovation", "renovated", "RENOVATED", "recently renovated", "restored", "refurbished"... Even though one shared tag would serve them all just fine. So if 10 standard tags all have 100 variants thats 1000 entries instead of 10.

\- But if all users share one tag, they can't edit it and would have to remove "renovation" and add instead "renovated in 2025" on all their properties if they want to edit in that detail. Unless I make the edit action auto-handle foreign key re-assignment, which sounds messy.

With an array field setup, the duplicates are maxed and it's not performant in queries' filter/order operations.

--> How to implement tags without ending up with thousands of entries, many of which are duplicates?

I understand that SQL can handle the load just fine but I'd love a more elegant solution \^\^



https://redd.it/1oglnuh
@r_php
Weekly /r/Laravel Help Thread

Ask your Laravel help questions here. To improve your chances of getting an answer from the community, here are some tips:

What steps have you taken so far?
What have you tried from the documentation?
Did you provide any error messages you are getting?
Are you able to provide instructions to replicate the issue?
Did you provide a code example?
Please don't post a screenshot of your code. Use the code block in the Reddit text editor and ensure it's formatted correctly.

For more immediate support, you can ask in the official Laravel Discord.

Thanks and welcome to the r/Laravel community!

https://redd.it/1ogps9n
@r_php
Weekly Ask Anything Thread

Feel free to ask any questions you think may not warrant a post. Asking for help here is also fine.

https://redd.it/1oh3yso
@r_php
Weekly help thread

Hey there!

This subreddit isn't meant for help threads, though there's one exception to the rule: in this thread you can ask anything you want PHP related, someone will probably be able to help you out!

https://redd.it/1oh7pgr
@r_php
PHP discord server tag

https://discord.gg/Hv6ax6cmsE

This is a Discord server that provides PHP server tags.

I agonized over whether to share it on Reddit, worried it might look like promotion.

I ultimately decided to share it because it's a Discord server “dedicated solely to providing server tags, with absolutely no other activity possible.” There is no space to send messages whatsoever, and we have no plans to lift this restriction in the future.

I bought a booster because I wanted to add a PHP tag next to my nickname, but it felt wasteful to use it alone... so I'm sharing it.

https://redd.it/1ohdtl2
@r_php
CKEditor 5 Livewire integration
https://redd.it/1ohdk18
@r_php
Laravel Cloud now supports Managed Reverb
https://redd.it/1ohjz0r
@r_php
Operator nameof. Why it's stalling?

RFC: https://wiki.php.net/rfc/nameof

I would really like this feature so that I can statically reference any method or attribute. It would be extremely handy for frameworks. I could directly check references to the methods and attributes with static analyze, do a lot of refactoring with an IDE and string references wouldn't be an issue.

Is there anyone here with experience moving RFCs forward? What would need to happen for this RFC to start getting traction? This RFC is 2 years old and discussion died out. It doesn't seems that anything will happen in the nearest future.

https://redd.it/1ohpszv
@r_php
I'm excited to announce the release of Commenter (comment/reply system) v4

**Features**

* 📌 Ability to pin comment/message,
* 😊 Emoji support for reaction icons,

**Improvements**

* 🎨 Design,
* 🌙 Dark mode,
* 📱 Mobile responsiveness,

**Upgrade**

* Tailwind,
* Vite,

Bug fixes and more...

[https://github.com/Lakshan-Madushanka/laravel-comments/releases/tag/4.0.0](https://github.com/Lakshan-Madushanka/laravel-comments/releases/tag/4.0.0)

https://reddit.com/link/1oi2clz/video/shh7y10ussxf1/player

https://redd.it/1oi2clz
@r_php