Hi everyone,
We're already halfway through the year and we all hope you're all having the time of your lives. In this week's newsltetter, we have articles on The AI Agent Ecosystem, A Technical Breakdown of What Actually Matters in Symfony 8.1, and A real world case of recursion done right in PHP. In Tutorials we have guides on How to Redact Data Leaks, Laravel Observers, and How to Deploy Laravel 13 on Shared Hosting . Finally in our Reading section we have articles on Laravel AI SDK Sub-Agents, How an Undocumented Magento 2 REST Route Bypasses reCAPTCHA, and how Your Laravel App Isn’t the Target Anymore –Your Dependencies Are.
We have all that and more, so we do hope you enjoy this week's newsletter. If you have an article, tutorial or podcast that you would like to be featured in our newsletter, feel free to reach out to us at [email protected].
All the best,
Adrian
|
Please help us by clicking to our sponsors:
Give Your Unused Startup a Second Chance
List your unfinished SaaS, app, or project for free. Sell it, find a co-founder, or let someone else bring it to life. No fees, no hassle - just new opportunities!
|
Articles
PHP Generics Already Exist: They're Just Hidden in PHPDoc
Every Laravel dev has written PHP generics. You just wrote them inside a comment and pretended it didn't count.
PII Protection in PHP without a framework holding the leash
Every app that touches personal data eventually hits the same wall. You've got a national_id column, an email, a phone number, maybe a credit card.
Elevating Legacy PHP Authentication to Enterprise Standards: A Zero-Trust Approach
This article presents a practical, code-level case study on transforming a highly vulnerable, legacy PHP authentication script into an enterprise-ready, OWASP-compliant system.
The AI Agent Ecosystem in PHP - From Simple OpenAI Calls to Multi-Agent Platforms
Over the last two years, an entire industry has emerged around AI development within the PHP ecosystem.
5 places to bolt an AI agent onto a PHP/Laravel app without rebuilding
If you run a Laravel or PrestaShop app, "add AI to it" arrived on your roadmap sometime in the last twelve months. Probably from a CEO who saw a Claude demo, or a customer-success person watching support tickets pile up.
AI coding tools for PHP developers in 2026: who actually handles Laravel, Symfony, and the WordPress swamp?
TL;DR: PHP developers face a harder AI-tool landscape than Python or Go shops because the language's three dominant ecosystems — Laravel, Symfony, and WordPress — have divergent conventions that most tools handle inconsistently.
A real world case of recursion done right in PHP
In this article, I show a real case where I used recursion, and where I think that it is much simpler than its iterative counterpart.
Update Composer Now. Version 2.10 Blocks the Exact Attack That Hit Laravel on May 22.
Six days after the Laravel-Lang supply chain attack, the Composer team just shipped the fix.
Symfony 8.1: A Technical Breakdown of What Actually Matters
Fewer abstractions, less boilerplate, better performance — what the latest release means for PHP developers shipping real applications.
The Future of PHP: What PHP 8.5 Means for Modern Web Development
In this article, we explore the major improvements expected in PHP 8.5, practical developer benefits, Laravel ecosystem impact, and how AI is changing the way PHP applications are built.
|
Tutorials and Talks
How to Deploy Laravel 13 on Shared Hosting (Without Moving Files)
There's a particular kind of frustration that comes from finishing a Laravel app, feeling proud of it, and then realizing you still have to deploy it.
How I Built a Permanent Testing Server Using Cloudflare Tunnel
At work, we were constantly running into the same problem. A tester needs to check something, a client wants to preview a build, someone's on a different network - and the only options were spinning up a cloud server (overkill for testing), using ngrok (URLs die the moment you close the terminal), or asking everyone to physically come to the machine. None of these were sustainable.
Laravel Collections Bug Caused by Arrow Functions
Freek recently shared a post on X about a bug related to Laravel Collections. The issue was surprising to me because the fix looks almost identical to the original code.
How to Build a Clean, Light Bulk Data Importer for WordPress Custom Post Types (Without Heavy Plugins)
In this short tutorial, we will write a clean, native script to parse data and programmatically create Custom Post Types (CPTs) with their accompanying custom fields (meta data).
Stop RAM Crashes: Stream Massive File Downloads in Laravel
In B2B SaaS engineering at Smart Tech Devs, giving enterprise clients the ability to export data—such as downloading 500,000 application logs, customer lists, or transaction histories into a CSV—is a mandatory requirement.
How to Redact Data Leaks in Text Using AI in PHP
Regex patters for PII detection don’t age too well. The moment someone adds a new phone number format, or a credential shows up in an unexpected position, there’s suddenly a significant gap in your carefully maintained PII pattern library.
How I Use the Factory Method Pattern in Laravel
When I build web applications, one of the biggest traps I try to avoid is making my code too rigid. If my code is locked into using specific classes, making changes down the road becomes a massive headache.
Laravel Observers Explained: A Guide to Eloquent Lifecycle Events
So, the other day I was wrestling with React hooks and component lifecycles (you know, the classic frontend mid-life crisis 😅). Amidst the chaos of state management and endless re-renders, a sudden thought struck me. |
News and Announcements
Improving Accessibility in JetBrains IDEs: What’s New and What’s Next in 2026
Making software accessible often comes down to removing small but repeated points of friction in everyday workflows.
Twig 3.27.1 released
Twig 3.27.1 is a patch release that fixes two regressions introduced by the sandbox hardening shipped in 3.27.0. Both involve how the sandbox inspects values that can be coerced to a string, and both are transparent once you upgrade.
May 25–31, 2026 - A Week of Symfony #1013
This week, Symfony 8.1 was released. In addition, we published dozens of security advisories and released the security updates Symfony 5.4.53, 6.4.41, 7.4.13, 8.0.13, Twig 3.27, Symfony UX 2.36 and 3.1, and Polyfill 1.38.1. We also published more information about the upcoming SymfonyOnline June 2026 conference.
The PHP Foundation’s Elizabeth Barron to keynote JetBrains PHPverse 2026
PHP has undergone a remarkable transformation in recent years, and The PHP Foundation has played a major role in contributing to the development and maintenance of the language. The upcoming JetBrains PHPverse conference is a great opportunity to reflect on what has been done to reinforce PHP's position as a robust, modern language for web development.
Laracon AU 2026 Announces Full Speaker Lineup, Schedule, and Workshops
Laracon AU has officially unveiled its full 2026 schedule, including all speakers, talks, and workshops for this year's event.
Malware Blocking and Dependency Policies in Composer 2.10
Composer 2.10 is now available with native malware filtering, a new dependency policy configuration system, and several security-related changes for PHP projects.
|
Podcasts and Vlogs
Laravel News: Passkeys, Moats, and Scheduling Models
Jake and Michael discuss all the latest Laravel releases, tutorials, and happenings in the community.
The Stack Overflow: What it takes to be a player in the international AI game
From the floor of HumanX, Ryan welcomes Songyee Yoon, managing partner at Principal Venture Partners (PVP), to chat about AI development outside the US, from the need to adapt models to local languages and culture to the challenges of the global supply-chain for things like semiconductors to how venture capital is looking at international AI companies.
Software Engineering Radio: SE Radio 722: Dwayne McDaniel on the Engineering Challenges of Secrets Management
Dwayne McDaniel, developer advocate at GitGuardian.com, joins host Priyanka Raghavan to talk about the engineering challenges of secrets management. They explore what “secrets” really are in modern systems.
Developer Tea: What the Science Actually Says About Effective Feedback
In this episode, Jonathan explores how to give and receive feedback that leads to real growth — starting with setting your ego aside, getting clear on your goal, and using behavior-based models like SBI and Netflix's Four A's. It's a durable skill that turns a contentious, dreaded conversation into a genuine pathway to career development.
Shoptalk Show: Better DX for Web Components, What Was Popular That Now We’re Used To?
Dave's changing up his camera angles, Chris has been upgrading his Sprinter van, how many hobbies is too many, what kinds of web tech was popular years ago that now seems normal, why isn't the DX around web components better, how can I structure my code to compose other custom elements, and what still can't be done on the web these days?
WP Builds: 470 – Alex Standiford on using AI for personal knowledge management and team productivity
Today, the podcast is focused on the practical and personal impact of AI in daily workflows and business operations. One theme that emerged was the creation of a custom AI-powered journaling and knowledge management system, Navigator, used for personal insights, team collaboration, and onboarding.
PHP Architect: The PHP Podcast 2026.05.28
PHP barely avoided disaster – YouTube CVE-2026-45793: Anatomy of a 14-Hour PHP Supply-Chain Near-Miss.
Mostly Technical: 134: The Edge of Safety
Ian and Aaron discuss Aaron's new employee, the latest on Outro, a surprise trip to Portland, and more.
Syntax: 54% AI-Generated and Climbing — State of AI
Scott and Wes react to the freshly released State of AI 2026 survey, covering everything from skyrocketing AI adoption and the rise of coding agents to the pain points, job security fears, and big philosophical questions developers are wrestling with right now.
|
|
The Ghost Endpoint: How an Undocumented Magento 2 REST Route Bypasses reCAPTCHA
Imagine waking up to a Slack alert showing 200+ failed payment transactions per hour on a production Magento store. Order increment IDs are jumping exponentially, customer names look like random strings, and credit cards are being declined in massive waves.
PHP Is Better Than JavaScript, And I Don't Care If This Starts A Fight
A few years ago, if you told me I'd eventually enjoy writing PHP more than JavaScript, I would've laughed.
Stop Reinventing the Wheel: 5 Hidden Gems in PrestaShop's Tools.php File
There’s a tension I often feel when talking with developers coming from the pure Symfony universe. On one side, the ideal: clean code, decoupled, respecting SOLID principles. On the other, the reality of e-commerce field work: a rushed client, a shared server configured oddly, and the need to move fast.
My Days at Laravel Live Japan 2026
I recently attended Laravel Live Japan 2026. Here's what inspired me and what I took home from the conference.
Both Sides of the Conversation
Your PHP framework and your JavaScript library have been talking to each other this whole time. Now you can finally listen in.
Laravel AI SDK Sub-Agents: Turning Agents Into an Orchestration Layer
How to return agents from tools(), when to use orchestrator-workers vs evaluator-optimizer, and why PHP is finally a first-class citizen for multi-agent systems.
How I Landed a Senior Backend Role in Netherlands and the One Game-Changing Insight I Learned Along the Way
My 7-month journey through broken algorithms, custom automation, and shifting from a language-specific mindset to system design.
Your Laravel App Isn’t the Target Anymore –Your Dependencies Are
A 2026 guide to keeping Laravel secure, current, and free of supply-chain landmines.
|
Interesting Projects, Tools and Libraries
giorgiosironi/eris
PHP library for property-based testing. Integrates with PHPUnit.
symfony/json-streamer
Provides powerful methods to read/write data structures from/into JSON streams.
xantios/mimey
PHP package for converting file extensions to MIME types and vice versa.
ebess/advanced-nova-media-library
Laravel Nova tools for managing the Spatie media library.
kartik-v/yii2-widget-touchspin
A Yii2 wrapper widget for the Bootstrap Switch plugin to use checkboxes & radios as toggle touchspines (sub repo split from yii2-widgets).
10up/wp_mock
A mocking library to take the pain out of unit testing for WordPress.
aura/sqlquery
Object-oriented query builders for MySQL, Postgres, SQLite, and SQLServer; can be used with any database connection library.
kylekatarnls/multi-tester
Test your package change inside other packages.
simplesamlphp/simplesamlphp-module-consentadmin
A module that allows users to manage their consent.
pxlrbt/filament-activity-log
Spatie's Laravel Activity Log integrated into Filament.
|
Jobs
------
Do you have a position that you would like to fill? PHP Weekly is ideal for targeting developers and the cost is only $75/week for an advert. Please let me know if you are interested by emailing me at [email protected] |
Please help us by clicking to our sponsor:
 Protect your PHP Code
Why not try SourceGuardian 17. Click here to download a 14 Day Trial copy. Protect your code using Windows, Linux or Mac and run everywhere with our free Loaders. |
So, how did you like this issue?
|
|
|
|
