fortrabbit

PIE 1.5 skips dev extensions with pie install --no-dev, same as Composer does for packages. #PHP thephp.foundation/blog/2026/10...

Volker Dusch on the php2shell embargo, and who broke it. laravel-news.com/volker-dusch...

PHP is dead. Long lives PHP. phplives.dev

Someone read the php2shell exploit code and explains why the internet is still standing. blog.luitjes.it/posts/i-want...

PHPStan 2.3 now flags unused variables, and it runs a lot faster than a year ago. Parts of it are rewritten in C++. #PHP phpstan.org/blog/phpstan...

Accessibility has an interesting reputation: everyone agrees it matters, but somehow 95.9% of the top million home pages have detectable WCAG failures. Yoshie and Thomas believe we deserve better. In their talk they look at accessibility through the lens of empathy: www.youtube.com/watch?v=6-Zw...

If all the govs shutting down servers for a PHP update, all the hosters & enterprises terrified by the vuln, gave $100k, or just $50k a year to the PHP Foundation, things could look very differently. Go, make your employer sponsor *today* thephp.foundation/sponsor/ #php #phpc @thephpf.bsky.social

Logs in the browser. See who hits your site and how. blog.fortrabbit.com/logs-in-the-...

Have you seen? PHP internals vote on ending the PEAR endorsement: no more PEAR installer bundled with PHP, and pear.php.net becomes a static archive. #PHP wiki.php.net/rfc/end_pear...

Looking for a secure alternative to Railway for PHP? Consider us! www.fortrabbit.com/alternatives...

I think I have never seen three PHP related posts on the start page of HN before.

Increasing some prices for the new platform. blog.fortrabbit.com/new-platform...

Willing interns, slightly dumb. Bruno Meilick on agents and Kirby. #KirbyCMS www.youtube.com/watch?v=bIAA...

Symfony 8.2 makes API list routes up to a quarter faster. Nicolas Grekas profiled the Symfony Demo and an API project and turned every finding into a pull request. #Symfony symfony.com/blog/new-in-...

One scraper can hammer a site all day. Two lines of .htaccess and it is gone: Require not ip 203.0.113.42 — the rest here: docs.fortrabbit.com/dev/htaccess...

The cheapest hosting optimization: delete that side project from two years ago nobody looks at. More ideas: docs.fortrabbit.com/dev/how-to/r...

Things websites do to their visitors. Number 5 will shock you. blog.fortrabbit.com/impolite-web...

Trying a new format to explain some of new platform features by video. This is the new deploy file. Manage deploy settings and pipeline from code.

Uh-oh. Automattic applied for the .php top-level domain. pub.roddie.digital/3mxpsg24mbk22

Before arguing with a DNS provider, ask dig. A short primer on reading what it answers: docs.fortrabbit.com/dev/learn/dig

Apex domains and CNAMEs do not go together. That is RFC 1035, not us being difficult. Why we route www instead: docs.fortrabbit.com/platform/dns...

GitHub Actions slow and pricey? There are about ten drop-in managed runner providers by now. We listed them. No idea how most of them hold up in practice. docs.fortrabbit.com/integrations...

Just discovered Relaticle, an open source CRM in Laravel that an AI agent can use like a person would. It even logs who did what, human or agent. Nice. relaticle.com

You can now configure fortrabbit git deployment settings with your code base. We plan to add more IaC featues. This is a first step. blog.fortrabbit.com/deploy-file-...

We invested a lot in making our billing easy to understand. The video shows daily billing after usage in action, the invoice DRAFT for the ongoing month.

Double reached v1.0. A PHP testing library by Jason McCreary. testdoublephp.com

Nerdy #PHP details: bcrypt truncates at 72 bytes, Argon2id wants 64 MB per hash. PHP internals discusses which password_hash() should become default: externals.io/message/132630

Don't install phpMyAdmin on a production server. Open an SSH tunnel, point a local client at the database, done. docs.fortrabbit.com/integrations...

Packagist turns 15. Next on the list: mandatory MFA for every account and a cooldown before fresh releases get installed. blog.packagist.com/15-years-of-...

Is the cheap VPS still cheap? We load-tested the new platform against a droplet in that price range. blog.fortrabbit.com/hosting-perf...

Never deploy a .env file to production. And keep in mind: phpinfo() prints every environment variable there is. Debug toolbars sometimes ship it without asking. docs.fortrabbit.com/dev/env-vars...

PHP foundation is looking for contractors. AoE. thephp.foundation/blog/2026/09...

Before browser analytics there was Webalizer, AWStats, Analog — log file analyzers. Server-side counting is back. Privacy-friendly options compared: docs.fortrabbit.com/integrations...

The State of Laravel 2026 survey is open. Fill it out, the numbers get quoted all year. laravel-news.com/state-of-lar...

This is our 6th monthly update post - even in a row. We are proud of the smaller changes and general progress, bigger new features soon. blog.fortrabbit.com/platform-upd...

Nice sponsor slide by Bastian at #kirbykonf

Just discovered reeve, from the makers of Grav CMS. A TUI for a local PHP stack on macOS and Linux. One PHP-FPM master per version, so two vhosts can run two PHP versions side by side. No sudo. Written in Rust. github.com/yetidevworks...

Sequel Ace is 6 now! THANKS to all maintainers. github.com/Sequel-Ace/S...

Looking forward to go to Kirby Konf tomorrow. Spot the old guy in the fortrabbit shirt. #kirbykonf #kirbykonf2026

brick/math 1.0.0 is out. Stable API after more than a decade and 79 beta releases. Laravel and ramsey/uuid depend on it, so it is in your vendor folder anyway. github.com/brick/math

Busy security week. Keep your software updated: - WordPress core, back to 4.7: CVE-2026-87902 - Craft CMS 5, fixed in 5.10.13: CVE-2026-92591, CVE-2026-92593 - Composer, fixed in 2.10.3: CVE-2026-59944

Have you seen? Bootgly 1.0 is out. A PHP framework with its own async HTTP server, no Nginx, no PHP-FPM and zero third-party dependencies. #PHP bootgly.com

On TUI design patterns, specifically working with AI agents. blog.fortrabbit.com/tui-design-p...

Have you seen Viewi? Front-end framework for PHP: components in PHP, compiled to JavaScript, SSR and hydration included. One model layer instead of two. #PHP github.com/viewi/viewi

PHP to get the job done in 2026. Benjamin Eberlei: the fast feedback loop, no compile step, the easy syntax, the LAMP stack. None of that is an edge for PHP any more. So what is? www.beberlei.de/post/php-to-...

RFC on php-internals: end the PEAR endorsement. Site half broken, nobody maintaining it, everyone on Composer anyway. Overdue. wiki.php.net/rfc/end_pear...