Symfony Station Communiqué — 28 April 2023. A look at Symfony, Drupal, PHP, Cybersecurity, and Fediverse News!
Tags: symfony, php, drupal, fediverse
Published: 2023-05-01 18:11:42

This communique [originally appeared on Symfony Station](https://www.symfonystation.com/Symfony-Station-Communique-28-April-2023).

Welcome to this week's Symfony Station Communiqué. It's your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy. We also cover the cybersecurity world and the Fediverse. 

There is plenty of good content in each category this week, so please take your time and enjoy the ones most relevant and valuable to you.

Or jump straight to your favorite section. 

- [Symfony](https://www.symfonystation.com/Symfony-Station-Communique-28-April-2023#symfony)
- [PHP](https://www.symfonystation.com/Symfony-Station-Communique-28-April-2023#php)
- [Other](https://www.symfonystation.com/Symfony-Station-Communique-28-April-2023#other)
- [Cybersecurity](https://www.symfonystation.com/Symfony-Station-Communique-28-April-2023#cybersecurity)
- [More programming](https://www.symfonystation.com/Symfony-Station-Communique-28-April-2023#more)
- [Fediverse](https://www.symfonystation.com/Symfony-Station-Communique-28-April-2023#fediverse)

Once again, thanks to Javier Eguiluz and Symfony for sharing [our latest communiqué](https://www.symfonystation.com/Symfony-Station-Communique-21-April-2023) in their [Week of Symfony](https://symfony.com/blog/a-week-of-symfony-851-17-23-april-2023). 

**My opinions will be in bold. And will often involve profanity.**

---

A significant proportion of the content we curate is on Medium. I highly recommend investing in a membership to access all the articles you want to read. It's a small investment that can boost your career. As you may have noticed, non-members can only access a limited number of articles per month.

**[Become a member here](https://medium.com/@mobileatom/membership)**! The compensation we receive from your use of this link helps pay for our weekly communiqué.

---

![Symfony logo](https://www.symfonystation.com/sites/default/files/inline-images/Symfony-2.png)

## Symfony

As always, we will start with the official news from Symfony. 

Highlight -> “This week, we continued polishing the new features of the upcoming Symfony 6.3, which will be released in just five weeks. We also published the first blog posts of the New in Symfony 6.3 series. Finally, we announced new talks for the SymfonyOnline June 2023 conference.“

[A Week of Symfony #851 (17-23 April 2023)](https://symfony.com/blog/a-week-of-symfony-851-17-23-april-2023)

Symfony announced:

[Updated documentation on deploying Symfony on Platform.sh](https://symfony.com/blog/updated-documentation-on-deploying-symfony-on-platform-sh)

[New in Symfony 6.3: Password Strength Constraint](https://symfony.com/blog/new-in-symfony-6-3-password-strength-constraint)

[New in Symfony 6.3: OpenID Connect Token Handler](https://symfony.com/blog/new-in-symfony-6-3-openid-connect-token-handler)

[New in Symfony 6.3: Request Payload](https://symfony.com/blog/new-in-symfony-6-3-request-payload)

[New in Symfony 6.3: Serializer Debug Command](https://symfony.com/blog/new-in-symfony-6-3-serializer-debug-command)

[New in Symfony 6.3: Form Improvements](https://symfony.com/blog/new-in-symfony-6-3-form-improvements)

[SymfonyOnline June 2023 - Firefighting a Symfony & Elasticsearch app with Blackfire](https://symfony.com/blog/symfonyonline-june-2023-firefighting-a-symfony-and-elasticsearch-app-with-blackfire)

[SymfonyOnline June 2023 - Taming the Forking Beast: Refactoring Monolithic Projects](https://symfony.com/blog/symfonyonline-june-2023-taming-the-forking-beast-refactoring-monolithic-projects)

[SymfonyOnline June 2023 - ImportMap: Manage Your JS Deps Without Node](https://symfony.com/blog/symfonyonline-june-2023-importmap-manage-your-js-deps-without-node)

[SymfonyOnline June 2023 - Let your end users be creative with the ExpressionLanguage component](https://symfony.com/blog/symfonyonline-june-2023-let-your-end-users-be-creative-with-the-expressionlanguage-component)

Blackfire shows us how to:

[Take full control of Blackfire Monitoring with flexible filtering](https://blog.blackfire.io/take-full-control-of-blackfire-monitoring-with-flexible-filtering.html)

SymfonyCasts continues its second API Platform course.

[This week on SymfonyCasts](https://5hy9x.r.a.d.sendibm1.com/mk/mr/K3hCxoRE0BVNi5IV9HLWypCjPhIXUS3pySmssygxW_I5DKBPvjwZHIrPMuoaODi3bZACk8knru7sPPw0heokE3DqiXbsRZq7JfurVxq_JZOO2Z_juZye69xpaPcspFqrUYftz3yIDQ)

---

## Featured Item

![Featured item graphic](https://symfonystation.com/sites/default/files/inline-images/Featured-Item_1_0.png)

**The civilized parts of Europe are about to tear Zuck and SpaceKaren a new orifice.**

The Next Web reports:

“The EU’s latest crackdown on big tech is taking shape. The bloc yesterday released a list of companies that must adhere to the strictest rules of the landmark Digital Services Act (DSA).

The 17 platforms and two search engines reach at least 45 million monthly active users. All of them have four months to comply with the full obligations of the DSA.”

### [These 19 tech giants are on the EU’s new naughty list](https://thenextweb.com/news/eu-names-19-big-tech-face-strictest-rules-digital-services-act)

---

### This Week

Ulrich shows us how to:

[Protect your application with Symfony rate limiter](https://www.mon-code.net/post/170/protect-your-application-with-symfony-rate-limiter-component)

And Ramy Hakam shows us how to:

[Simplify Multi-Tenancy in Symfony with the Multi-Tenancy Bundle](https://medium.com/@pencilsoft1/simplify-multi-tenancy-in-symfony-with-the-multi-tenancy-bundle-b637ada82cfa)

Nico Anatasio shares:

[Managing User Sessions in Symfony 6: A Beginner’s Guide](https://faun.pub/managing-user-sessions-in-symfony-6-a-beginners-guide-64e9e12ab4c)

LinkedIn [has this resource where you can collaborate with AI](https://www.linkedin.com/showcase/skills-symfony-framework/posts/?feedView=all) to share your Symfony knowledge. **You very technical Symfonistas should check this out and let us know if it’s horseshit or helpful.** 

Sergiu Pogor says:

[RabbitMQ is a message queue system that allows you to send and receive messages between different parts of your app](https://medium.com/@256cub/rabbitmq-is-a-message-queue-system-that-allows-you-to-send-and-receive-messages-between-different-f0af4c9b3e06)

Houssem Guemer looks at:

[Impersonating Users in Symfony: Methods and Best Practices](https://www.notion.so/How-Symfony-is-implemented-in-Drupal-5ddb5b8e1b024161b23bee9da2b9b3b6)

And shows us:

[How to Integrate AWS Cognito Authentication with Symfony](https://medium.com/actived/how-to-integrate-aws-cognito-authentication-with-symfony-a8d5802aa297)

David Garcia shows us how to:

[Harness the power of Feature Toggle Flags with Flagception in Symfony projects](https://david-garcia.medium.com/harness-the-power-of-feature-toggle-flags-with-flagception-in-symfony-projects-52d725ccd9e1)

And André Laugks shows us how to:

[Create a custom JMS Serializer handler for mapping values](https://dev.to/elevado/create-a-custom-jms-serializer-handler-for-mapping-values-670)

And Aymeric Ratinaud shows us how to:

[Create a new Discussion with a Message and a Message to an existing Discussion [Api-platform]](https://dev.to/aratinau/create-a-new-discussion-with-a-message-and-a-message-to-an-existing-discussion-api-platform-5c6b)

**Lots of tutorials this week.**

### eCommerce

Vyacheslav Konyshev explores:

[Shopware Store Development from Scratch: Steps and Costs](https://dev.to/vyacheslavkonyshev/shopware-store-development-from-scratch-steps-and-costs-41p0)

Pankaj Kumar examines:

[Drupal E-Commerce Websites Challenges And Benefits](https://www.lnwebworks.com/insight/challenges-and-benefits-of-drupal-ecommerce)

Mitul Patel shares:

[Maximizing Magento 2 Security: Advanced Techniques for Experienced Developers](https://dev.to/mitulpatel/maximizing-magento-2-security-advanced-techniques-for-experienced-developers-22co)

### CMSs

Acquia asks:

[What Is a Hybrid CMS?](https://www.acquia.com/blog/what-hybrid-cms)

Prometsource shows us:

[How to Get Started with Drush](https://www.prometsource.com/blog/drush-made-simple-1)

Matt Glaman asks:

[Are you ready for Drupal 11 in 2024?](https://mglaman.dev/blog/are-you-ready-drupal-11-2024)

And shares:

[Lessons learned from helping port the top contrib projects to Drupal 10](https://mglaman.dev/blog/lessons-learned-helping-port-top-contrib-projects-drupal-10)

Kevin Quillen announces:

[Three New Drupal Modules for Ambitious Site Builders](https://www.velir.com/ideas/2023/04/18/three-new-drupal-modules-for-ambitious-site-builders)

**As a quick aside, Kevin and Matt wrote the excellent Drupal 10 Cookbook, which I am really enjoying right now.**

Jacob Rockowitz shares:

[Frequently Asked Questions (FAQ) about the Schema.org Blueprints module for Drupal](https://www.jrockowitz.com/blog/schemadotorg-faq)

The Higglers (not a band) show us:

[How to configure xdebug with Lando & VS code for Drupal Development](https://thehigglers.com/blogs/2023-04-19-how-to-configure-xdebug-with-lando-for-drupal-development/)

And Opensource shows us how to:

[Test your Drupal website with Cypress](https://opensource.com/article/23/4/website-test-drupal-cypress)

Fabian Fiorotto looks at:

[Migrating any type of block to Layout Builder in Drupal](https://medium.com/@fabian.f1945/migrating-any-type-of-block-to-layout-builder-in-drupal-ced44a9eb254)

**Quite useful.**

Ankitha Shetty explores:

[Understanding Update and Post Update Hooks for Successful Site Updates](https://www.specbee.com/blogs/update-and-post-update-hooks-for-successful-site-updates)

Daniel Sipos announces a new edition of:

[Drupal 10 module development - it’s out!](https://www.webomelette.com/drupal-10-module-development-its-out)

**Looking forward to this. I enjoyed version 9.**

Golems examines:

[Drupal Security Best Practices & Hardening Modules](https://gole.ms/blog/drupal-8-security-best-practices-hardening-modules)

The Drop Times looks at:

[7 Points Why Drupal Is Best for Healthcare](https://www.thedroptimes.com/30444/7-points-why-drupal-best-healthcare)

### Previous Weeks

Zyxware shares:

[4 Must-Have Drupal Modules for Public Sector Websites](https://www.zyxware.com/article/6564/4-must-have-drupal-modules-for-public-sector-websites)

![Php logo](https://symfonystation.com/sites/default/files/inline-images/php-logo_4.png)

## PHP

### This Week

php[architect] published:

[Database Normalization for Developers](https://www.phparch.com/2023/04/database-normalization-for-developers/)

Doğan Uçar examines:

[PHP Fibers: What They Are and Where To Use](https://doganoo.medium.com/php-fibers-what-they-are-and-where-to-use-bd43bb421d26)

Jmau111 asks:

[Why use PHP 8.1 enums?](https://dev.to/jmau111/why-use-php-81-enums-1h0a)

Atakan Demircioğlu says:

[Say Goodbye to Boring Command Lines: Create Powerful and Fun Tools with PHP](https://atakde.medium.com/say-goodbye-to-boring-command-lines-create-powerful-and-fun-tools-with-php-e60941b0197e)

LaravelTuts looks at:

[Building a Subscription-Based Payment System with PHP 8.x](https://medium.com/@laraveltuts/building-a-subscription-based-payment-system-with-php-8-x-2dbe3039e14e)

dvnc0 on the Dev Community shares:

[Behavior-Driven Testing with PHP and PHPUnit](https://dev.to/dvnc0/behavior-driven-testing-with-php-and-phpunit-pgm)

### Previous Weeks

![Code logo](https://symfonystation.com/sites/default/files/inline-images/code-logo_3.jpeg)

## Other

[Please visit our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine) to learn how you can help kick Russia out of Ukraine (eventually).

### The cyber response to Russia’s War Crimes and other douchebaggery

The Guardian reports:

[‘Our credibility must be safeguarded’: Cyprus in turmoil after Russia sanctions](https://www.theguardian.com/world/2023/apr/22/cyprus-russia-sanctions-us-uk)

### The Evil Empire Strikes Back

Fast Company reports:

[Twitter policy changes mean Chinese and Russian propaganda are proliferating](https://www.fastcompany.com/90886933/twitter-policy-changes-chinese-russian-propaganda)

The Register reports:

[European air traffic control confirms website 'under attack' by pro-Russia hackers](https://www.theregister.com/2023/04/22/eurocontrol_russia_attack/)

The Hacker News reports:

[Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers](https://thehackernews.com/2023/04/russian-hackers-suspected-in-ongoing.html)

PC Mag reports:

[New Mac Malware, Possibly From North Korea, Masquerades as PDF Viewer](https://www.pcmag.com/news/new-mac-malware-possibly-from-north-korea-masquerades-as-pdf-viewer)

### Cybersecurity/Privacy

The Harvard Business Review opines:

[There’s No Silver Bullet for Cybersecurity](https://hbr.org/2023/04/theres-no-silver-bullet-for-cybersecurity)

**Unfortunately, true.**

Acquia shares:

[What to Consider When Developing a Cybersecurity Strategy](https://www.acquia.com/blog/what-consider-when-developing-cybersecurity-strategy)

**Hence we need a strategy.**

Dark Reading reports on:

[Cybersecurity Survival: Hide From Adversarial AI](https://www.darkreading.com/vulnerabilities-threats/cybersecurity-survival-hide-from-adversarial-ai)

The Register opines:

[Menaced by miscreants, critical infrastructure needs a good ETHOS. Ah, here's one](https://www.theregister.com/2023/04/25/ot_ethos_critical_infrastructure/)

TechRepublic reports:

[Google moves to keep public sector cybersecurity vulnerabilities leashed](https://www.techrepublic.com/article/google-defend-public-sector-cybersecurity/)

TechCrunch reports:

[GitLab’s new security feature uses AI to explain vulnerabilities to developers](https://techcrunch.com/2023/04/24/gitlabs-new-security-feature-uses-ai-to-explain-vulnerabilities-to-developers/)

And on a related note, Bleeping Computer reports:

[GitHub now allows enabling private vulnerability reporting at scale](https://www.bleepingcomputer.com/news/security/github-now-allows-enabling-private-vulnerability-reporting-at-scale/)

### More

My man, Jason Knight shares:

[Accessible HTML Video “Facades”](https://deathshadow.medium.com/accessible-html-video-facades-8ca0e15f4c1a)

[Better Explaining The Reason For Video Facades](https://deathshadow.medium.com/better-explaining-the-reason-for-video-facades-f774d9795c03)

Imkev looks at:

[Priority Hints and optimizing LCP](https://imkev.dev/fetchpriority-opportunity)

Keith Grant says:

[Scoped CSS is back](https://keithjgrant.com/posts/2023/04/scoped-css-is-back/)

Smashing Magazine shows us how to:

[Write Better CSS By Borrowing Ideas From JavaScript Functions](https://www.smashingmagazine.com/2023/04/write-better-css-borrow-ideas-javascript-functions/)

**Good stuff here.**

And Jeremy Wagner shows us how to:

[Optimize Time to First Byte](https://web.dev/optimize-ttfb/)

Drupal’s founder Dries Buytaert shares:

[Nostr, love at first sight](https://dri.es/nostr-love-at-first-sight)

**Nostr is open-source social media but not part of the Fediverse.**

### Fediverse

Norden reports:

[A Nordic approach to democratic debate in the age of Big Tech –
Recommendations from the Nordic Think Tank for Tech and Democracy](https://pub.norden.org/nord2023-004/3-access-to-diverse-and-credible-digital-platforms-and-communities.html)

The Fediverse Report shares:

[A new generation of follow-finders](https://fediversereport.com/a-next-generation-of-follow-finders/)

And Gopiandcode shares: 

[How I wrote an Activity Pub Server in OCaml: Lessons Learnt, Weekends Lost](https://gopiandcode.uk/logs/log-writing-activitypub.html)

Here is a new Fediverse platform similar to Reddit that is built with Symfony!

[kbin.pub - Fediverse of content](https://kbin.pub/en)

Flipboard looks at:

[How the Fediverse Can Benefit Creators](https://about.flipboard.com/inside-flipboard/how-the-fediverse-can-benefit-creators/)

Open Indie explores:

[Fragmentations in the Fediverse](https://blog.erlend.sh/fragmentations-in-the-fediverse)

Chris O’Donnell responds to an idiotic journalism piece:

[Mastodon is not Doomed](https://odonnellweb.com/pelican/mastodon-is-not-doomed.html)

Here’s an easy way to join Mastodon:

[Spread Mastodon](https://spreadmastodon.org/)

Although again, we recommend joining [phpc.social](http://phpc.social) or drupal.community.

## CTAs (aka show us some free love)

- That’s it for this week. Please share this communiqué.
- Also, be sure to [join our newsletter list at the bottom of our site’s pages](https://www.symfonystation.com/contact). Joining gets you each week's communiqué in your inbox (a day early).
- Follow us [on Flipboard](https://flipboard.com/@mobileatom/symfony-for-the-devil-allupr6jz) or at [@symfonystation@phpc.social](https://phpc.social/web/@symfonystation) on Mastodon for daily coverage. Consider joining the [@phpc.social](https://phpc.social/web/home) instance. If this communique is a little overwhelming, you can get a condensed weekly news highlight post on [Friendica](https://friendica.me/profile/friendofsymfony).

Do you own or work for an organization that would be interested in our promotion opportunities? Or supporting our journalistic efforts? If so, please get in touch with us. We’re in our infancy, so it’s extra economical. 😉

More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on [our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine). Or, if you know of one, get in touch.

Keep coding Symfonistas!

**[Visit our Communiqué Library](https://www.symfonystation.com/Communiqu%C3%A9s)**

You can find a vast array of curated evergreen content.

##Author

![Reuben Walker headshot](https://miro.medium.com/max/1200/1*B3RcgIbAiytfjynP-oiOMg.jpeg)

###Reuben Walker

Founder
Symfony Station