php – Page 44 – Türker Yıldırım

password_hash and the rehash check nobody adds

NoteSeptember 11, 20192 min read

Increasing the bcrypt cost or moving to Argon2 applies to new accounts only, because a stored hash cannot be upgraded without the plaintext — and the plaintext is…

Verify a webhook signature in constant time

SnippetSeptember 3, 20191 min read

Job middleware, and the rate limit that is not in the handler

NoteAugust 17, 20192 min read

A job that must not run more than once per minute per customer had that logic at the top of handle(), mixed with the work, and repeated in…

composer outdated –direct is the only version worth reading

NoteJuly 25, 20191 min read

composer outdated on a real project lists two hundred packages, almost all of them transitive dependencies you did not choose and cannot upgrade independently. –direct restricts it to…

strpos returns zero, and zero is falsy

NoteJuly 19, 20192 min read

strpos returns the position of the needle, and position zero is falsy — so the obvious check silently fails for exactly the case where the needle is at…

The queue worker that leaked, and the memory limit that hid it

Deep diveJuly 15, 201910 min read

A worker restarting every eleven minutes, reported as healthy. Finding the leak is not the same as bounding it, and the seatbelt hides the next one.

Messenger, and the queue that is part of the framework

Deep diveJune 25, 201910 min read

4.3 made Messenger stable, and dispatch stopped being the same decision as transport. A message, a handler, and routing declared in configuration.

Lazy collections and the report that would not fit in memory

Deep diveJune 24, 201910 min read

A memory limit hit on the fourth of the month, every month. A collection is an array, and an array is all of it at once — until…

Carbon 2 changed what an immutable date means

NoteJune 18, 20191 min read

5.8 brought Carbon 2, and the change that matters is not the API surface — it is that CarbonImmutable exists and the mutable class is still the default…

array_key_first, and the reset() dance it replaces

NoteJune 18, 20192 min read

Getting the first key of an array meant reset() then key(), which moves the internal pointer — so a read had a side effect, and a function given…