2014年12月31日星期三

Community News: Recent posts from PHP Quickfix

Recent posts from the PHP Quickfix site:

Community News: Packagist Latest Releases for 12.31.2014

Recent releases from the Packagist:

Anthony Ferrara: PHP Install Statistics


Anthony Ferrara has a new post to his site sharing the results of some PHP version statistics he's gathered and how it relates back to the security of applications.



After yesterday's post, I decided to do some math to see how many PHP installs had at least 1 known security vulnerability. So I went to grab statistics from W3Techs, and correlated that with known Linux Distribution supported numbers. I then whipped up a spreadsheet and got some interesting numbers out of it. So interesting, that I need to share...


He starts with the versions that currently have no known security issues and matches those up with the linux releases that currently include them. He then looks at the adoption rates for more recent versions and maps those against the security status as well...with some "grim results". He summarizes the totals of all of the version results and comes up with an interesting statistic: over 78 percent of PHP installations (and thus applications) are vulnerable to some kind of security vulnerabilities just because of what they're hosted on.


Link: http://blog.ircmaxell.com/2014/12/php-install-statistics.html

Symfony Blog: Symfony 2014 Year in Review: Symfony Documentation


The Symfony blog has posted an update from the perspective of the documentation for the framework. Their "year in review" includes details for each section and the updates made.



2014 has been the busiest year in the entire history of the Symfony Documentation thanks to the amazing work of our documentation managers (Ryan Weaver, Christian Flothmann and Wouter De Jong) and the hundreds of documentation contributors.


They also talk about the best practices book, the new quick tour and Fabien Potencier's own How to Create Your Own Framework series. Among the list of their top ten most popular pages are the docs for:




Check out the full post for the rest of the list and what changes were made in each section.


Link: http://symfony.com/blog/symfony-2014-year-in-review-symfony-documentation

2014年12月30日星期二

Community News: Packagist Latest Releases for 12.30.2014

Recent releases from the Packagist:

Anthony Ferrara: Being A Responsible Developer


In his latest post Anthony Ferrara is back with more discussion around the "only supporting the latest versions" debate (here is the previous article). In this new post he talks about being a "responsible developer" and how that relates to keeping your software up to date.



The general consensus [shared during a DevHell and PHPTownHall Mashup ] was that as an ideology, only supporting latest versions is correct. From a practical standpoint though they said that it's unrealistic. That there are tons of legacy systems out there that are running just fine and can't justify the cost of upgrading. So they shouldn't have to upgrade "for ideological reasons". From one point of view, this certainly makes sense. [...] This point of view disturbs me deeply. And it further disturbs me that it came from the same person who preaches for testing.


He makes the connection between being responsible and the software upkeep through testing. He points out that the real effectiveness of automated testing is in preventing regressions - that is, when software is updated, that bugs don't reappear. He then goes on to share his opinion on some of the other arguments presented in the recording like the "if it ain't broke, don't fit it" and security issues topics. He also shares some number of the reality of what can happen if software is not up to date (or even patched) and how this circles back around to his previous points about software versions driving the OS and PHP versions forward.


Link: http://blog.ircmaxell.com/2014/12/being-responsible-developer.html

Laravel News: 75 Laravel Tutorials, Packages, and Resources from 2014


The Laravel News site has posted their own kind of wrap-up of 2014 in this latest post sharing a monthly list of tutorials, packages and resources they've found useful for the Laravel community.



2014 is coming to a close and to celebrate I put together this post of all the greatest hits each month. This features cool packages, resources, and tutorials that came out over the year.

Among the items on their list are things like:




Check out the full post for the complete list.


Link: https://laravel-news.com/2014/12/75-laravel-tutorials-packages-resources-2014/

Three Devs & A Maybe Podcast: The Christmas Episode


The latest episode of the Three Devs and a Maybe podcast, #52, is their Christmas episode (posted back on the 23rd) with hosts Michael Budd, Fraser Hart, Lewis Cains and Edd Mann talking about a wide range of topics.



It is two days before Christmas but that will not stop us from recording a new episode. This week we discuss Frasers gambling hot-streak at Ascot, Micks move and how horrible Martinis are. We then move on to how Fraser is getting on in his new job up in London and Micks University presentation on Fuzzy Logic. This leads us on to how 'unrandom' humans are, and professional Rock-Paper-Scissors tournaments. Finally, Edd brings up some interesting talks by Greg Young (on EventStore) and Rich Hickey (on software design). Have a great Christmas everyone and thanks for your loyal listenership!


You can listen to this latest episode either through the in-page audio player or by downloading the mp3 directly and listening at your leisure. If you enjoy the show, be sure to subscribe to their feed too!


Link: http://threedevsandamaybe.com/the-christmas-episode/

Marco Pivetta: roave/security-advisories: Composer against Security Vulnerabilities


As Marco Pivetta has mentioned in his latest post to his site, Roave has released a tool for use with Composer that helps prevent vulnerable versions of software from even being installed (based on the data from the security-advisories data from FriendsOfPHP).



Since it's almost christmas, it's also time to release a new project! The Roave Team is pleased to announce the release of roave/security-advisories, a package that keeps known security issues out of your project.


The tool makes use of a "conflict" metapackage, mentioned in the Composer spec, and fails when the software and version is listed in the FriendsOfPHP information. This integration with Composer means that there's no need to run a separate tool for the checks to be made. It's integrated into the workflow and will dynamically fail without the need for you to update anything.


Link: http://ocramius.github.io/blog/roave-security-advisories-protect-against-composer-packages-with-security-issues/

2014年12月29日星期一

Community News: Latest PEAR Releases for 12.29.2014

Latest PEAR Releases:

Community News: Packagist Latest Releases for 12.29.2014

Recent releases from the Packagist:

SitePoint PHP Blog: 3 Ways to Implement Embeddable Custom Badges


The SitePoint PHP blog has a recent tutorial showing you how you can use one of three different ways to embed badges into your site. These "badges" are a common practice among sites allowing other sites/applications to embed small statistics such as number of Tweets or Likes about a page.



One great way of organically promoting your application is to provide "badges"; snippets of content that people can embed on their own websites. [...] This can contain up-to-the-minute information from your application about a user, piece of content or another object, dynamically generated and inserted into other websites. In this article I'm going to take a look at some of the ways you can implement this.


He walks you through the creation of a simple application based on Silex, using Twig for template rendering and the WideImage library for creating the images. His datastore, a static array, lists an image, rank and number of "trophies" for each user of the system. He creates a main page showing all of the badges at once, making use of an "iframe" to contain the dynamically created image. He shows how to use the WideImage library to pull in the background, avatar and trophy images, merge them together and add a bit of text with the username and level ranking. Finally he includes the Javascript needed so the remote site can just use a "script" tag to pull in the rendered image and place it on their page.


Link: http://www.sitepoint.com/3-ways-implement-embeddable-custom-badges/

Symfony Blog: Symfony 2014 Year in Review: symfony.com website


The Symfony framework blog has posted their end of year review for 2014 with happenings in both the Symfony framework and community.




2014 has been the busiest year in the entire history of the Symfony project website. First, we redesigned our website to bring in a more modern look and feel. Then, we added two new sections: Symfony Marketplace, which is the place where you can find all the products and services built around Symfony ecosystem and Symfony Jobs, which is the official job board to look for and post Symfony related job offers.



In addition, we boosted the official Symfony Blog with lots of new articles and a faster post publishing pace to provide you more contents.




They list out their "top ten" of most popular posts on the site including articles about performance, the v 3.0 roadmap and developer experience. They end the post with a reminder about another new part of the site coming soon - the Symfony Showcase showing off sites built with the framework.


Link: http://symfony.com/blog/symfony-2014-year-in-review-symfony-com-website

2014年12月28日星期日

Community News: Packagist Latest Releases for 12.28.2014

Recent releases from the Packagist: