In 2013, Fabien Potencier blogged about a One File challenge: creating a Symfony app in 1 file and under 200 lines of code. The series never finished, but it initiated the Symfony Flex project. With more than 10 years of innovation, can we complete this challenge today?
Following the Twelve-factor app methodology, most web applications are (partially) configured through environment variables. When changing the environment variables, you don’t want to completely redeploy the whole application. We’re using Flux CD to achieve this in Kubernetes without building a new version of the application’s Helm chart.
This year, Symfony celebrates its 20 year anniversary. Let’s dive into some statistics of years of making web development history.
For a while, I’ve worked on a new build tool for the Symfony documentation. The project started with a fresh git init, but now it’s time to merge it with our existing build tool. I want all contributors of the existing tool to receive credits for the code they build, but I also don’t want to ignore all iterations of the new build tool project. During SymfonyCon 2025 Hackday last weekend, I wanted…
Code discussions contain relevant information. Isn’t it a shame that we keep these in the centralized GitHub/GitLab servers, far away from our decentralized Git code? As soon as we move provider, we’ll lose all old discussions! And how do you ever find the pull requests back from 5 years ago? Symfony has implemented a lightweight solution to this problem years ago using a less-known feature of…
Cross-site Request Forgery (CSRF) is one of the traditional vulnerabilities that web applications have to deal with. Every web framework - including Symfony - supports CSRF protection out of the box. A lesser known vulnerability is Login CSRF, a special kind of CSRF attack.
At SymfonyWorld Winter 2021, I talked about using the new Symfony authentication system in your applications in Symfony 6. We discussed the important changes to the Security component, what we tried to improve with each change, and how you can use these to make a more secure application quicker.
Every now and then, there seems to be a lot of fuss in the PHP community about deprecations. In these discussions, deprecations are often discussed as if they are fatal errors. I think that is very wrong. Let’s reduce our expectations of deprecations. It’ll make everyones live much less stressful.
A very exciting time is coming with the biggest change for Symfony since Symfony 2.0: Symfony 6 has native PHP types on all its methods where it is possible. This will be a great push towards type safety in the PHP open source communities! Nicolas and Alexander have been working on and off for 2 years to create the best upgrade experience possible. Now, 2.5 months before the stable release, it is…
Symfony has a very rigid release schedule since Symfony 3.0. Predictable releases are often mentioned as a major advantage. Did you know that this schedule also includes a 2 month “stabilization phase”? This phase gives time to all libraries and bundles to catch up. Testing pre-releases is one of the best and least time consuming contributions you can make to Symfony. Let’s see how you can help…