php – Page 32 – Türker Yıldırım

A webhook endpoint that survives the sender

Deep diveJune 2, 202110 min read

The payment provider retried for six hours and every attempt timed out. A webhook is a notification, not a request for processing.

A dynamic block has no save output at all

NoteMay 31, 20212 min read

A block rendered by PHP at request time returns null from save, which means the post contains only the block comment and its attributes. Returning null is what…

Two hundred integration tests that share one database

Deep diveMay 27, 202110 min read

A suite that passes alone and fails in a different order. Test 141 depends on a row test 88 created, and nobody wrote that down.

The service that should not have been a service

Deep diveMay 14, 202110 min read

Four services, three of which deploy together and share a database. The costs of distribution with none of the independence.

Http::fake, and the assertion that a call was made

NoteMay 13, 20212 min read

Http::fake without an assertion tests that your code did not crash, which is not the same as testing that it called anything. The catch-all returning a 500 is…

Generics in a docblock are checked by nothing at runtime

NoteMay 12, 20212 min read

PHP has no generics, so @return list<Order> is a promise to the analyser and a comment to the engine. The annotations are genuinely useful and are genuinely unenforced:…

Constructor promotion plus validation, in that order

NoteApril 30, 20212 min read

Promoted properties are assigned before the constructor body runs, so validation in the body reads either the parameter or the property and gets the same value. Mixing promoted…

Octane and a static property is a data leak

NoteApril 29, 20212 min read

Octane keeps the application in memory between requests, so a static property set during one request is visible to the next one — including one belonging to a…

The dotnet service that finally moved behind the same gateway

Deep diveApril 27, 202110 min read

One service in a different language, with its own auth, its own log format and its own deploy. The language was the least interesting difference.

Octane resets the container and not your singleton

NoteApril 22, 20212 min read

Octane rebinds the container per request, and an object that captured a dependency at construction keeps the old one. Injecting the container to avoid capturing is a pattern…