Table of Contents
[hemmerling] PHP
Related pages:
Conferences and Workshops
Community Meetings
Conferences
- The commercial International PHP Conference in München ( Autumn ) and Berlin ( early Summer ).
- International PHP Conference "Archive" 2016-2019.
- 2021.
- 2021-06-07 - 2021-06-11 - “Remote. International PHP Conference Berlin”.
- 2021-10-25 - 2021-10-29 - “IPC Munich - The Hybrid Conference”.
-
- PHP Unconference ( #PHPucEU ) 2011-2016.
- PHP Unconference 2013 in Berlin, 2013-05-04 - 2013-05-05.
- The affordable unconference PHP Unconference Hamburg.
- PHP Unconference Hamburg 2016 in Hamburg, 2016-09-17 - 2015-09-18.
- PHP Unconference Hamburg 2015 in Hamburg, 2015-09-19 - 2015-09-20.
- PHP Unconference Hamburg 2014 in Hamburg, 2014-09-20 - 2014-09-21.
- PHP Unconference Hamburg 2013 in Hamburg, 2013-09-21 - 2013-09-22. I participated
. - Twitter.
- Twitter hashtag ”#phpunconf”.
- 2013.
- bread rolls in the morning, warm lunch, cake in the afternoon. Free soft drinks, coffee & tea.
- Saturday, 2013-09-21.
- 09:30 Entry open.
- 10:30 Official opening of the unconference.
- 12:00 First session starts.
- 18:30 Last session ends.
- 19:00 Walk to the evening event “PHProst”
- Sunday, 2013-09-22.
- 10:00 Opening of the second day of the unconference.
- 11:00 First session starts.
- 17:30 Unconference ends.
- PHP.RUHR in Dortmund.
- 2020
. - PHP Ruhr 2019 in Dortmund.
- PHP Ruhr 2018 in Dortmund.
- PHP Ruhr 2017 in Dortmund.
- PHP Ruhr 2016 in Dortmund.
- PHP Ruhr 2015 in Witten.
- PHP Ruhr 2014 in Witten.
- PHPkonf, Turkey.
- PHPkonf 2020 - “Normally, A PHP conference in Istanbul, the city that connects Europe and Asia. But pandemic it's Online”. Tickets “Free”.
- PHPkonf 2021 - “Normally, A PHP conference in Istanbul, the city that connects Europe and Asia. But pandemic it's Online”. Tickets “Free”.
- thePHP.cc, Germany - “Deutsch”.
Workshops
- Roland Golla - “Never Code Alone”.
-
- Live streaming of events ⇒ See “Upcoming live streams” on the channel page, at top.
- Twitter "Never Code Alone, @nevercodealone" - “PHP-Workshops kostenlos in NRW - Initiative für Software-Qualität”.
- Slack "Never Code Alone", 2020.
- Hand-on coding event 2016-08-20.
- Suggested software installation:
- XAMPP ( for Windows fans ).
- “Codeception” framework for browser-based website testing, using “Selenium”.
- PHPUnit.
- PHP Editor, e.g. Sublime2.
- Project: GitHub "Entwicklungshilfe-NRW/magentoModulRefactoringBox" with Magento webshop, PHP Framework “Flow” - the base for the “Neos” -.
- Proceedings:
- “Teilnahme ist kostenlos und idealerweise verbindlich Planungssicherheit und Fairness sind wichtig – gerade bei einer limitierten Anzahl an Teilnehmern. Daher sollte die Zusage zum Event möglichst verbindlich sein. Sich einfach nur 'blind' einzutragen und dann am Ende nicht kommen zu können, ist also eher suboptimal für alle Beteiligten. Deshalb nutzt Never Code Alone den Dienst Eventbrite. Hier zahlt jeder Teilnehmer den symbolischen Ticketpreis von 10,00 Euro zzgl. 1,40 Euro für den Dienst, bekommt die 10,00 Euro jedoch am Event-Tag selbst gegen Vorlage des ausgedruckten Tickets zurückerstattet”.
- “Wir werden zusammen coden mit einer Funktastatur und uns viel austauschen. Du kannst dir schon mal GitHub "Entwicklungshilfe-NRW/magentoModulRefactoringBox" und schauen, ob du auf der Maschine einen Unit-Test ausführen kannst. Ansonsten werden wir an dem Tag ja Live-Coding Sessions haben, wo alle mitmachen und sich einbringen können. Die vierte Session werden wir auch alle coden. Die Tastatur geht rum und da muß jeder mal ran”.
- Roland Golla, "Never Code Alone" - "Fullstack PHP #NCAEvent" in Düsseldorf, 2021-09-18.
- Event:
- Live event:
- The live event was originally planned to happen at new coworking space
“Bauwerk118”, Heyestrasse 152, D-40625 Düsseldorf. - Live event now happens at Krankikom GmbH.
- YouTube live streaming.
- Premium sponsor valantic GmbH.
- Speaker introductions:
- Roland Golla, "DELOS Never Code Alone Event" in Dorsten, 2022-07-09.
-
Runtime
-
- “PHP 5.2 Windows Binaries” are the latest version with W2k support, compiled with legacy Visual Studio 6 compiler.
- “PHP 5.3 Windows Binaries” run on WinXP, Win2003, Vista, Win2008, Win7..., compiled with Visual Studio 2008 compiler.
-
- PHP Manual - The PDO class - “Represents a connection between PHP and a database server”.
- PHP Manual - PDO Drivers "Microsoft SQL Server and Sybase Functions (PDO_DBLIB)" - “PDO_DBLIB is a driver that implements the PHP Data Objects (PDO) interface to enable access from PHP to Microsoft SQL Server and Sybase databases through the FreeTDS libary”.
- PHP Manual "mysqli_fetch_array" - Won't be found by the search engine of the website, just by Google search.
- As of 2016-08, there are 2 versions of PHP:
- PHP 5.6 stable.
- PHP 7 with new features ( similar to JS 4,5,..).
PHP IDEs
Free PHP IDEs
- Archive.org "Codelobster" ( - 2025-04-22 ).
- Latest version “CodeLobster PHP Edition5.15” for Windows.
- “Free Portable PHP IDE (HTML, PHP, CSS, JavaScript code editor)”, “Free portable IDE for PHP/HTML/CSS/JavaScript development”, “PHP/HTML/CSS/JavaScript highlighting; advanced PHP/HTML/CSS/JavaScript autocomplete; a powerful PHP debugger; context and dynamic Help; a code validator; a SQL manager”.
-
- Latest version “CodeLobster IDE multi-platform free version 2.6.0”.
-
- UpToDown "Codelobster PHP Edition" - “codelobster-php-edition-2-6-0.exe”.
-
-
- EN.Wikipedia "Codelobster" - “Since the activation servers have been shut down, it is no longer possible to activate the program to use the Pro features”.
-
- Eclipse "Packages" - “Eclipse for PHP Developers”.
-
- EN.Wikipedia "NetBeans", DE.Wikipedia "NetBeans" - A “NetBeans IDE Bundle for PHP” doesn't exist anymore. Instead, there is now only one unified installer for Apache NetBeans that includes PHP support out of the box.
- phpIDE “PHP Coder”.
- Archive.org "phpIDE 'PHP Coder'" ( - 2010-12-04 ) - “A free IDE developed for PHP programmers. Through tight integration of the PHP interpreter and the PHP documentation, PHP Coder gives you a time-saving Development Interface”.
- Download: Softonic "PHP Coder for Windows".
- For W2k, you might have to install the DLL ”libmysql.dll” in “C:\winnt\system32”.
- PHP documentation → php.net "PHP Documentation Download".
- MySQL documentation → MySQL Documentation: MySQL Reference Manuals. You have to copy the file “index.html” to “manual_toc.html”.
- HTML documentation → Web Design Group's Help file Distribution Page. You have to copy the file “index.html” to “manual_toc.html”.
- PHP runtime → php.net "PHP For Windows: Binaries and sources Releases".
- Archive.org "phpIDE. The Online PHP Web Portal" ( - 2012-01-14 ).
- Sourceforge "Dev-PHP", Sourceforge "Dev-PHP" - “A well-featured integrated development environment (IDE)”.
- Padre - the Perl IDE”.
- “PhpEd 2.96.1.2” - By Ergin Soysal. Latest freeware edition, released on 2008-02-18 of the commercial PHP editor NuSphere PhpEd for Windows, which was shipped at that time with Apache and MySQL servers.
- “Software Studio” - discontinued free IDE for C#, Java, VB.Net, Aspx, C++, Html, Xml, Php, JavaScript, TeX.
- TopShareware "Software Studio", 2004-02-20.
- latest version 2004-05-28.
- The free “Microsoft WebMatrix”, discontinued.
Just-commercial PHP IDEs
Local PHP Development Environment Systems
- DDEV.
Free Smartphone Apps for PHP Development
Free online PHP IDEs & PHP Tools
- OnlinePHP.io # Execute and compare PHP Online - “PHP Sandbox. Test your PHP code with this code tester”.
- PHP Playground - “PHP Playground let you to execute basic PHP code in real time using WebAssembly technology”.
Free PHP Debuggers
- Google Code "Webgrind" - “An Xdebug profiling web frontend in PHP5”.
- George Schlossnagle "PECL" / "apd" - “A full-featured engine-level profiler/debugger”.
Free PHP Tools
- PHP Cleaner - “This little script removes the PHP line brakes you find in a lot of PHP source codes”.
Packages
Composer - Dependency Manager for PHP
Packagist - The PHP Package Repository
Application Execution in Taint Mode
- php Documentation "Taint" - “Taint is an extension, which is used for detecting XSS codes(tainted string). And also can be used to spot sql injection vulnerabilities, and shell inject, etc”.
Testing
- See Testing.
Free PHP Frameworks / PHP Extensions
Neos & Flow
The Frameworks
- The OpenSource Neos, GitHub "neos".
- “Content Application Platform based on its own PHP framework Flow. The content management features are resting within a larger context that allows you to build a perfectly customized experience”.
- “An open source Content Application Platform based on Flow. A set of core Content Management features is resting within a larger context that allows you to build a perfectly customized experience for your users”.
-
- “A PHP web application framework focussed on Domain-Driven Design and clean code. Based on strong conventions and best practices, it allows you to rapidly create powerful web applications”.
- “Flow Application Framework, provides MVC, DI, AOP, Security, …”.
Resources
- t3n.
Kohana: The Swift PHP Framework
- Kohana: The Swift PHP Framework - “An elegant HMVC PHP5 framework that provides a rich set of components for building web applications”.
LampLighter
- LampLighter - “OpenSource rapid application development framework for PHP based on a Model-View-Controller (MVC) architecture.
- The predecessor FUSE - “A Model View Controller framework for PHP”.
PECL
- George Schlossnagle "PECL" - “A repository for PHP Extensions, providing a directory of all known extensions and hosting facilities for downloading and development of PHP extensions”.
PEAR - PHP Extension and Application Repository
- PEAR - PHP Extension and Application Repository - “A framework and distribution system for reusable PHP components”.
PHPforFB
- The OpenSource PHP Web Framework PHPforFB - “welches das Entwickeln und Betreiben von Facebook Anwendungen und Page-Apps vereinfacht”.
Symfony
- The Open-Source PHP Web Framework “Symfony”.
- The outdated Symfony.
- The current Symfony 2.
- Wiki Symfony Wiki.
Yii Framework
- Reference customer are the social communities Flirtmoms & FlirtMuttis.
Zend
Laminas / Zend Framework
- Laminas - “Laminas & Mezzio: enterprise-ready, open-source PHP components and middleware microframework. A community-supported, open-source continuation of Zend Framework”.
Legacy Software Systems
- Once there was a Zend Server Community Edition - “A fast and reliable free PHP application stack”.
- Once there was a Archive.Org "Zend Studio Personal Edition, version 3.5", free for non-commercial use, in 2005.
Embedded Software Projects with PHP
- “Building A Sensor Phalanx on Arduino, controlled by PHP on a client host” - See Fieldbuses and Automation Networks.
Commercial Development Tools
- The commercial IDE JetBrains "PhpStorm" for Windows.
Cronjob Services
Free Cronjob Services
- The free Cronjob service CRONJOB.DE - Europas führender Cronjob-Service!.
- The free Cronjob service Cronless - Online Cron Job Replacement Service.
- The free Cronjob service easycron.com.
- The free Cronjob service free-cronjob24.de.
- The free Cronjob service My Free Web Cron Scheduler Service.
- The free Cronjob service OnlineCronJobs - Free cronjobs on demand.
- The free Cronjob service SetCronJob - Reliable Cron Jobs Service with simple WebCron interface.
Affordable Webspace & Webhosting with Cronjob Services
Resources
Design Tips for Secure Web Applications
-
-
- Github " airbone42/nsa-anti-patterns" - “Talk about security at PHP Unconference 2013 in Hamburg”.
- ”';” - SQL injection → “prepare”.
- Broken authenification and session management
- Don‘t expose session IDs.
- Reduce session lifetime.
- Regenerate session IDs.
- ”<” - XSS → “htmlspecialchars”.
- Validate input.
- Escape output.
- X-content security policy.
- X-frame options.
- Template engine.
- Insecure direct object reference → “require”.
- Validate user input.
- Use indirect object references.
- Check access permissions.
- Security misconfiguration.
- Keep your system up-to-date.
- Remove setup/deployment routines.
- Disable exposure of sensitive data.
- Review server settings.
- Sensitive data exposure passwords.
- Add a salt.
- Use different salts.
- Use a strong algorithm (NOT md5).
- Store data and keys separated.
- Sensitive data exposure - PHP
- “expose_phpOff”.
- Remove “phpinfo();”.
- Sensitive data exposure - Secure URLs.
- Use TLS for all pages.
- Use secure cookie flag.
- Keep sensitive data out of the URL.
- Missing function level access control.
- Standard should disallow all access.
- Use roles to keep ACL simple.
- ACL model should be very flexible.
- Check privileges on each step.
- Cross-site request forgery.
- Use one-time-token and secure it.
- Authenticate user.
- Credentials.
- Captcha.
- Unvalidated redirects and forwards.
- Using components with known vulnerabilities.
- Keep libraries up-to-date ( versioneye.com ).
- Review third party libraries.
- Check mailing lists, boards, news- and vendor-sites.
- Mail header injection.
- Security by obscurity “The neighbours have better stuff”.
Literature
Paper Magazines
- PHP Magazin - “PHP, JavaScript, Open Web Technologies”.
Books
-
- The free HTML online book Sebastian Bergmann "Professionelle Softwareentwicklung mit PHP 5: Objektorientierung, Entwurfsmuster, Modellierung und fortgeschrittene Datenbankprogrammierung", as of 2013-01-15.
- Book Hannes Gassert, Manfred Gildemeister, Mathias Lehn: "PHP de Luxe" - “PHP 5 Edition” #.
- buecherbillig.de 100% ( Hannes Gassert, Manfred Gildemeister, Mathias Lehn: "PHP de Luxe" ).
-
- buecherbillig.de 100% ( Jay Greenspan, Brad Bulger, David Wall: "MySQL/PHP-Datenbankanwendungen" ).
-
- Accompanying website PHP 5 und MySQL 5 - Das Kochbuch.
- The free online HTML book Bruno R. Preiss "Data Structures and Algorithms with Object-Oriented Design Patterns in PHP".
Tips&Tricks
API
Code Style
- StackOverflow "Keep PHP and HTML separated" - ” Use include_once() instead of include”.
Data Structures
- PHP "Variable scope" - “global $a, $b”.
Debugging, Errors, Exceptions
- StackOverflow "phpinfo() is not working it shows blank page but other php working" - “Check your php.ini file, for '386:disable_functions = show_source, system, shell_exec, passthru, exec, phpinfo, popen, proc_open'”.
Dependency Injection
- Fabien Potencier "What is Dependency Injection?" - “This article is part of a series on Dependency Injection in general and on a lightweight implementation of a Container in PHP in particular”.
- StackOverflow "PHP global variable is undefined inside a function even if global keyword is used" - “Do yourself a favor and use Dependency Injection”.
function myfunc($from) { return "from(myfunc)=$from<br />"; } $from = '2010-05-01'; echo myfunc($from);
Execute Code in other PHP Files
- StackOverflow "Executing another PHP file and return the output from a method, is that possible?".
function execute($filename){ include_once($filename); }function execute($filename){ ob_start(); include $filename; $output = ob_get_contents(); ob_end_clean(); return $output; }
Files
- User experience: If a PHP file includes other PHP files by “include” or “require”, the HTML global title attribute of the first included PHP file which has HTML code with a HTML global title attribute, is displayed instead of the HTML global title attribute of the original PHP page.
<head> <title>HTML title of the PHP page "require.php"</title> </head>
- StackOverflow "PHP include relative path"
include(dirname(__DIR__).'/config.php');
- StackOverflow "How to require PHP files relatively (at different directory levels)?" - “For relative paths you can use DIR directly rather than dirname(FILE) (as long as you are using PHP 5.3.0 and above)”.
HTML & Web Server Interface
Migration PHP4/PHP5 ( MySQL ) to PHP 7 ( MySQLi )
- PHP "version_compare" - “if (version_compare(PHP_VERSION, '5.0.0', '>='))”.
PHP & SQL
Tables
- W3Schools "PHP MySQL Create Table".
$sql = "CREATE TABLE MyGuests ( id INT(6) UNSIGNED AUTO_INCREMENT PRIMARY KEY, firstname VARCHAR(30) NOT NULL, lastname VARCHAR(30) NOT NULL, email VARCHAR(50), reg_date TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP )";
Insert Data
Retrieve Data
- Warning “No index used in query/prepared”.
Resources
- PHP Administration:
-
VS.Code on my Development System
- “Settings / Extensions/ PHP / Validate: Executable Path”.
"php.validate.executablePath": "C:\\int\\w64\\net\\xampp\\php\\php.exe"
Resources
- Experts told me, that ( large ) legacy PHP software is hard to convert to make it PHP7 compatible...
-
-
- artmedic webdesign - free PHP scripts which do not need a MySQL database.
- Dynamic Web Pages - “Deutscher Knotenpunkt für PHP seit 1999 - PHP Scripts, PHP Tutorials, PHP News und PHP-Training / Zertifizierung”.
- heise "PHP 5.6 wird zum Sicherheitsrisiko", 2018-10 - “Am 31. Dezember endet der Support für PHP 5.6 – doch viele Websites nutzen noch immer die alte PHP-Version. Experten warnen vor ernsthaften Sicherheitsrisiken”.
- php::bar - “Wissen für Einsteiger & Profis”.
- phpIDE - “PHP News and Tutorials”.
- PHP Frameworks - Directory and comparison of PHP frameworks #.
- php RESOURCE - “PHP Forum, PHP-Scripte, PHP-Tutorials Jobs und vieles mehr zu PHP”.
-
- Stack Exchange "Online IDE or Code Editor for PHP?" - “Are you certain that you want it to be online? The problem that I foresee with that is that it might be ok for single pages, but PHP apps tend to chain from page to page”.
Forums, Newsgroups
- Facebook.
- Facebook "PHP" - many fresh PHP newbies from India are flooding this group, frequently.
- Meetup.
- PHPEdit.net Community - community for the commercial PHP editor PHPEdit.
- PHP test club - “PHPTestClub is a discussion board where developers and test engineers share their experience on automated testing PHP projects. Here we talk about various approaches, frameworks, and best practices in testing. We use PHPUnit, Behat, Codeception, PhpSpec, atoum, and other frameworks, as well as Selenium, PhantomJS, Continuous Integration and delivery systems”.
Appropriate OpenDirectory Directory Pages
When this document changes ! Site Navigation ( My Business ! My Topics ! Imprint / Contact ! Privacy Policy ! Keyword Index ! Google+ Author "Rolf Hemmerling" ! Google+ Publisher "hemmerling" )