Weekly help thread

Hey there!

This subreddit isn't meant for help threads, though there's one exception to the rule: in this thread you can ask anything you want PHP related, someone will probably be able to help you out!

https://redd.it/1sqgs0t
@r_php

I spent my senior year building a pure-PHP async ecosystem for PHP 8.4. Meet HiblaPHP

I'm a final-year IT student in the Philippines. Between classes, I spent months building a complete async I/O ecosystem for PHP from scratch. Today I'm releasing it as Public Beta and I'd love your brutal feedback.

It's called Hibla a Tagalog for "Fiber."

### Why I Built This

PHP was the first programming language I ever learned and loved. And for a long time, like a lot of PHP developers, I thought async was something that happened elsewhere in Node.js, in Go, in "serious" backend languages.

Then I found ReactPHP. It cracked something open in my brain. I realized async wasn't a language feature, it was an idea, and PHP was capable of it. I got obsessed. I wanted to understand it from the ground up, not just use a library, but build one so I'd truly know how it worked.

Hibla is what came out of that obsession. It started as a learning project. It turned into something I think is actually useful.


### What's in the Ecosystem

- Event Loop: Dual-driver (stream_select + libuv), with Node.js-style execution phases
- MySQL Driver: Pure-PHP binary protocol with side-channel KILL QUERY cancellation and deterministic LRU statement caching. No orphaned queries.
- HTTP Client: Async by default, full SSE support, and with full Http Mocking Simulator.
- Parallel: Erlang-style supervised worker pools that detect segfaults and OOMs and automatically respawn replacements
- Structured Concurrency: A strict 4-state Promise model that makes cleanup deterministic and safe

### The Core Idea: Fractal Concurrency

The design goal I'm most proud of: because every worker is "smart" and runs its own event loop, you can compose units of concurrency recursively. Parallel processes, async fibers, and raw I/O all interleave inside a single Promise::all() seamlessly.

$results = await(Promise::all([
    $pool->run(fn() => cpu_heavy_work()),        // Supervised pool task
    parallel(fn() => sleep(1)),                  // One-off parallel process
    async(function() {                            // Native Fiber, no spawn
        $user = await(Http::get("https://api.example.com/user/1"));
        return $user->json();
    }),
    parallel(function() {                        // "Hybrid" worker with its own Fibers
        await(Promise::all([
            async(fn() => await(delay(1))),
            async(fn() => await(delay(1))),
        ]));
        echo "Hybrid Done";
    })
]));
// The entire block above completes in ~1 second

### Performance

To stress-test the foundation, I built a raw TCP responder using SO_REUSEPORT across the worker pool. It hit 116,000+ RPS on 4 cores. A real HTTP server will be slower, but this proves the core has virtually zero overhead.


### Standing on Giants

Hibla wouldn't exist without ReactPHP, whose work taught me how async PHP actually functions, and AmPHP, whose pioneering RFC work brought native Fibers to the PHP engine. I'm genuinely in their debt.

### Honest Caveats

- No dedicated docs site yet. Every package has a thorough README covering lifecycle events, trade-offs, and examples. It's not pretty, but it's complete.
- This is a Public Beta. I expect rough edges. That's exactly why I'm here.


I'm a student who built this with everything I had and honestly, I'm nervous hitting post on this. But I'd love your sharpest technical critiques: architecture, API design, edge cases I missed, anything. Don't hold back.

Here's the link to the main repository..

-> github.com/hiblaphp


https://redd.it/1sqifb0
@r_php

new DEMO website for VOODFLOW - Workflow engine for Filamentphp
https://redd.it/1sqjr55
@r_php

Lerd, a local dev environment that works great with Symfony on Linux and macOS
https://geodro.github.io/lerd

https://redd.it/1sqinz5
@r_php

Vulnerability checks in packages

I was wondering how do you check for security issues within used packages/libraries. I use composer and I have a server script that runs daily 'composer audit' command and sends the results (if any), but I guess that depends on the author(s) of the package.


Any better approach?

https://redd.it/1sqkg7d
@r_php

Building a PHP runtime in Rust — what am I missing?

Hey folks,

I've been hacking on a PHP runtime written in Rust for a while now and I think I hit the point where I need outside opinions before I keep going. Not trying to sell anything here, just want honest feedback from people who actually put PHP in production.

Here's roughly what it does today:

Config / deployment stuff

one TOML file for everything (listener, TLS, workers, limits, logging)
virtual hosts
hot reload without dropping connections
Docker images for PHP 8.3 / 8.4 / 8.5, both NTS and ZTS
can build a single static binary with the app embedded

Execution modes

classic request/response (works like FPM)
persistent mode, where the app boots once and serves many requests
proper worker lifecycle hooks (boot / request / shutdown / reload)

Concurrency bits

shared table and atomic counters for cross-request state
task queue for background jobs
async I/O (parallel HTTP, non-blocking file stuff)
native WebSocket server, no sidecar process

HTTP / perf

HTTP/1.1 and HTTP/2 (HTTP/3 is on the roadmap, not done yet)
TLS with auto-cert or bring your own
gzip / br / zstd compression
early hints (103)
X-Sendfile
CORS out of the box
opcache shared across workers

Security

rate limiting
request size / header limits
IP allow/deny
CSRF helpers and sensible security header defaults
TLS hardening presets

Observability

Prometheus `/metrics` (requests, latency histograms, worker state, memory per worker)
health checks
structured JSON logs by default
a built-in dashboard showing live workers and requests

Compatibility

Laravel, Symfony and WordPress run unmodified
treating FPM feature parity as a release blocker, not a "someday"
Rust + tokio under the hood, PHP code doesn't change
core stays minimal, extras are opt-in

full features: https://github.com/turbine-php/turbine

Things I'd actually love input on:

1. Is a single-file config a win, or do your ops people hate that?
2. Which FPM features do new runtimes always forget and then bite you later?
3. What metrics do you actually stare at when something's on fire at 3 AM?
4. What extension combos would you want in a pre-built image?
5. What obvious thing am I missing from the list?

Happy to go deeper on any of these if anyone's curious.

https://redd.it/1sqiem1
@r_php

Killed By Laravel - A clone of killedbygoogle.com for the Laravel ecosystem
https://killed-by-laravel.harkema.dev/

https://redd.it/1sqpx2c
@r_php

Lumen (API-only in Laravel) replacement?

I want to build a purely API in Laravel and Nissan Lumen. Is there anything comparable?

Since there will never be a front-end to this pulling in the whole framework is overkill.

https://redd.it/1sqri0f
@r_php

SymfonyDay Montreal 2026 - Schedule is Live!
https://symfony.com/blog/symfonyday-montreal-2026-schedule-is-live?utm_medium=feed&utm_source=Symfony%20Blog%20Feed

https://redd.it/1sqwtyf
@r_php

Live Walkthrough: What's new in Laravel Starter Kits w/ Wendell Adriel

The Laravel starter kits (React, Vue, Svelte, and Livewire) have had a huge run of updates recently, including team support, Inertia v3 support, and toast notifications.

I'll be going live tomorrow (04/21) at 12pm EDT (4pm UTC) with Wendell Adriel for a walkthrough of what's new. We'll also touch on Maestro, the orchestrator that powers how all the kits stay in sync.

Would love to see you there! If you have any questions, feel free to drop them here ahead of time or ask in chat during the stream!

Stream: https://www.youtube.com/watch?v=AbPSAt46Ja0

https://redd.it/1sr5s1e
@r_php

Smart Cache Invalidation - Laravel In Practice EP10
https://youtu.be/-MChE-igkQE

https://redd.it/1srfwgl
@r_php

🎬 SymfonyLive Paris 2026 : les replays sont en ligne !
https://symfony.com/blog/symfonylive-paris-2026-les-replays-sont-en-ligne?utm_medium=feed&utm_source=Symfony%20Blog%20Feed

https://redd.it/1srldvs
@r_php

Writing Your Own Framework in PHP: Part One
https://chrastecky.dev/programming/writing-your-own-framework-in-php-part-one

https://redd.it/1srnxvc
@r_php

Splitting Laravel Boost guidelines across multiple files
https://laracraft.tech/blog/splitting-laravel-boost-guidelines-across-multiple-files

https://redd.it/1sryize
@r_php

What does your PHP stack actually look like in 2026?

I've been building PHP applications professionally for 10+ years, and I'm curious what everyone here is using these days.

Our current stack at work:

* PHP 8.3 + Laravel
* Vue.js on the frontend
* MySQL + Redis for caching
* Docker for local dev and deployments
* GitHub Actions for CI/CD
* AWS for hosting

We've tried moving parts to Node.js a couple of times, but honestly, keep coming back to Laravel for anything business-critical. The ecosystem is just too mature and productive to give up.

A few things I've noticed in 2026:

* PHP 8.3 JIT is genuinely fast now, the performance gap with Node is much smaller than people think
* GraphQL adoption in PHP projects has grown a lot
* Redis has basically become a default part of every stack

Curious what others are doing, are you still on Laravel or have you moved to Symfony, Slim, or something else entirely? Anyone running PHP in a microservices setup with Docker and Kubernetes?

Drop your stack below. 👇

https://redd.it/1ssct11
@r_php

Guest Post: Why We Chose NativePHP Over Flutter for Bagisto's Mobile Admin
https://nativephp.com/blog/nativephp-not-flutter-for-bagisto-mobile-admin-app

https://redd.it/1ssflmx
@r_php

The latest and greatest in postcardware at Spatie
https://spatie.be/blog/the-latest-and-greatest-in-postcardware-at-spatie

https://redd.it/1ssgdwu
@r_php