Symfony Station Communiqué — 16 December 2022. A look at Symfony, PHP, and Cybersecurity news!
Tags: symfony, php, drupal, cybersecurity
Published: 2022-12-17 00:26:15

This communiqué [originally appeared on Symfony Station](https://www.symfonystation.com/Symfony-Station-Communique-16-December-2022), your source for cutting-edge Symfony, PHP, and Cybersecurity news.
<br/>
Welcome to this week's Symfony Station Communiqué. It's your review of the essential news in the Symfony and PHP development communities. We also cover the cybersecurity world in detail. 

Please take your time and enjoy the items most relevant and valuable to you. 

As always, thanks to Javier Eguiluz and Symfony for sharing [our earlier communiqué](https://www.symfonystation.com/Symfony-Station-Communique-09-December-2022)
 in their [Week of Symfony](https://symfony.com/blog/a-week-of-symfony-830-21-27-november-2022). 

**My opinions will be in bold.** 

---

Many of the items we curate are on Medium. I recommend investing in membership as you can access everything you want to read. It’s a small investment in boosting your career. As you may have noticed, non-members can only access a limited number of articles per month.

**[Become a member here](https://medium.com/@mobileatom/membership)**! The compensation we receive from your use of this link helps pay for our weekly communiqué.

---

![Symfony logo](https://www.symfonystation.com/sites/default/files/inline-images/Symfony-2.png)

## Symfony

As always, we will start with the official news from Symfony.

Highlight -> “This week, Symfony 6.2.1 maintenance version was published. Meanwhile, we started working on the new features of the upcoming Symfony 6.3 version (to be released at the end of May 2023): we introduced build parameters, deprecated the ProxyManagerBridge package and added a ClockAwareTrait to help write time-sensitive classes. Lastly, we celebrated the SymfonyWorld Online 2022 Winter Edition conference.“

[A Week of Symfony #832 (5-11 December 2022)](https://symfony.com/blog/a-week-of-symfony-832-5-11-december-2022)
<br/>
Symfony announced:

[Watch Fabien's keynote about the RemoteEvent and Webhook components](https://symfony.com/blog/watch-fabien-s-keynote-about-the-remoteevent-and-webhook-components)
<br/>
SymfonyCasts continues its awesome NetGen course:

[This week on SymfonyCasts](https://5hy9x.r.ag.d.sendibm3.com/mk/mr/16J04Y3Zx_QK50O-HdFaEJwo5aPLIXPCWQhxXYgl7eK_SZ6aOoH7FN8JiJjcVeBS135Y-Nh9JN0u1zjq8E7xP_pAxV9IcC289lW_AmKIP13qfv6mtACmJmBpxly4dFI26isuivS9BNY)

---

## Featured Item

![Featured item graphic](https://symfonystation.com/sites/default/files/inline-images/Featured-Item_1_0.png)

It’s easy this week, PHP 8.2 was released.

### **[PHP: News Archive - 2022](https://www.php.net/archive/2022.php#2022-12-08-1)**

---

### This Week
<br/>
Supun Kavinda show us how to:

[Add a blog to your Symfony Application with Hyvor Blogs](https://dev.to/hyvor/add-a-blog-to-your-symfony-application-with-hyvor-blogs-18k2)

Penny Brookens shares:

[10 Symfony Folder Structure Best Practices](https://climbtheladder.com/10-symfony-folder-structure-best-practices/)

While Denise Parmer has:

[10 Symfony Best Practices](https://climbtheladder.com/10-symfony-best-practices/)

And Edith Massie has:

[10 Sonata Admin Best Practices](https://climbtheladder.com/10-sonata-admin-best-practices/)

Coil explores:

[Replacing API endpoints with API Platform 3 in a Symfony app](https://www.strangebuzz.com/en/blog/replacing-manual-api-endpoints-with-api-platform-3-in-a-symfony-application)

Nacho continues a series with:

[Creating a one endpoint api with PHP and Symfony (Part 3)](https://medium.com/@ict80/creating-a-one-endpoint-api-with-php-and-symfony-part-3-8955325c5101)
<br/>
### eCommerce
<br/>
TYPO3 recounts:

[Being TYPO3 at SymfonyCon Disneyland, Paris](https://typo3.org/article/being-typo3-at-symfonycon-disneyland-paris)
<br/>
### CMSs
<br/>
Drupal 10 was released this week and Martin Anderson-Clutz says:

[Drupal 10 is worth a fresh look](https://opensource.com/article/22/12/drupal-10-fresh-look)

Here’s the official announcement from Drupal:

[Drupal 10.0.0 is available](https://www.drupal.org/blog/drupal-10-0-0)

**This is the second most important news of the week.**

Mike Herchel looks at Drupal frontend improvements in:

[Explore the Best of Drupal 10](https://pantheon.io/blog/explore-best-drupal-10)

Suzanne Dergacheva opines:

[Why Drupal is the future of content strategy](https://opensource.com/article/22/12/drupal-content-strategy)

Specbee has:

[Seven Drupal Security Strategies you need to implement right away! (Includes top Drupal 9 Security Modules)](https://www.specbee.com/blogs/drupal-security-strategies-and-top-drupal-9-security-modules)

mandclu shares:

[Keysave: A Step Towards A More Intuitive Admin UX](https://edit.mandclu.com/blog/keysave-step-towards-more-intuitive-admin-ux)
<br/>
### Previous Weeks
<br/>
Murray Woodman explores:

[AI Powered Drupal: A new era for content creation and management](https://www.morpht.com/blog/ai-powered-drupal-new-era-content-creation-and-management)

ENES ATEŞ shows us:

[How to do user authentication with the Symfony framework?](https://enesates01.medium.com/how-to-do-user-authentication-with-the-symfony-framework-d07b0ee2eaaa)

Jérôme Tamarelle shares:

[J'ai demandé au ChatGPT de créer une application Symfony](https://dev.to/gromnan/jai-demande-au-chatgpt-de-creer-une-application-symfony-2c05)

Theodo finds:

[The Guide I Wish I Had to Implement a JWT Auth in Symfony](https://blog.theodo.com/2022/12/symfony-jwt-authentication/)

![PHP logo](https://symfonystation.com/sites/default/files/inline-images/php-logo_4.png)
<br/>
## PHP
<br/>
### This Week
<br/>
We ran across a Laravel-based app that uses Gutenberg blocks.

[Engine Awesome: No-code application and workflow builder](https://engineawesome.com/)

And here’s another.

[VanOns/laraberg: A Gutenberg implementation for Laravel](https://github.com/VanOns/laraberg)

The latest issue of php[architect] is out:

[Owning The Web | php[architect]](https://www.phparch.com/magazine/2022/12/owning-the-web/)

.com shares a:

[Simple Trick to Improve Your Classes in PHP](https://medium.com/@dotcom.software/simple-trick-to-improve-your-classes-in-php-a07d1fc4a27d)

[Stop Silencing Exceptions in PHP](https://medium.com/@dotcom.software/stop-silencing-exceptions-in-php-be95172dc59c)

Jakub Tobiasz shows us how to:

[Mark Your Classes As Final Like A Pro](https://blog.alphpaca.io/mark-your-classes-as-final-like-a-pro-ae7a5de32a74)

[**24daysindecember.net](https://24daysindecember.net/2022/12/12/creating-music-with-php/)** is continuing its series of articles.

Anton Vlasenko looks at:

[Creating music with PHP](https://24daysindecember.net/2022/12/12/creating-music-with-php/)

Stefan Koopmanschap wants you to:

[Share your stories!](https://24daysindecember.net/2022/12/11/share-your-stories/)

And Elliot Massen explores:

[Versioning a PHP API with Composer](https://24daysindecember.net/2022/12/15/versioning-a-php-api-with-composer/)

anastasionico has:

[A Quick Guide to Event-Driven Architecture](https://dev.to/anastasionico/a-quick-guide-to-event-driven-architecture-59c2)

Alexandre Daubois explores:

[The Hell of Calculating The Size of Strings in PHP](https://alex-daubois.medium.com/the-hell-of-calculating-the-size-of-strings-in-php-9d82b7fb4b8a)

Laravel News has:

[PhpStorm 2022.3 is released with a new UI, PHP 8.2 support, and more](https://laravel-news.com/phpstorm-2022-3)

WoltLab looks at:

[PHP 8.2 and WoltLab: The SensitiveParameter Attribute](https://www.woltlab.com/article/274-php-8-2-and-woltlab-the-sensitiveparameter-attribute/)

James Walker has:

[What’s New In PHP 8.2?](https://www.howtogeek.com/devops/whats-new-in-php-8.2/)

Simon Ugorji shows us:

[How To Upload And Zip Single Or Multiple Files in PHP](https://dev.to/ugorji_simon/how-to-upload-and-zip-single-or-multiple-files-in-php-1fa9)

Randy Fay provides:

[16 reasons DDEV will be your new favorite development environment](https://opensource.com/article/22/12/ddev)

Alex Finnarn explains:

[Creating a DDEV Addon](https://medium.com/@alexfinnarn/creating-a-ddev-addon-c443ac8a1357)

**If you want to explore additions local dev environments, explore our article, [Dream Universal, Develop Local: A look at PHP Local Development Tools.](https://www.symfonystation.com/local-php-development-tools)**
<br/>
### Previous Weeks
<br/>
Daniel Werner says:

[Let's do TDD (with video)](https://www.danielwerner.dev/lets-do-tdd)

![Code logo](https://symfonystation.com/sites/default/files/inline-images/code-logo_3.jpeg)

## Other
<br/>
[Please visit our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine) to learn how you can help kick Russia out of Ukraine (eventually).
<br/>
### The cyber response to Russia’s War Crimes and other douchebaggery
<br/>
CNET reports:

[War in Ukraine Dominated Cybersecurity in 2022](https://www.cnet.com/tech/services-and-software/war-in-ukraine-dominated-cybersecurity-in-2022/)

USA Today reports:

[Lawmakers announces bipartisan legislation that would ban TikTok in the US](https://www.usatoday.com/story/news/politics/2022/12/13/rubio-announces-bipartisan-bill-ban-tiktok/10888520002/)

**If they add Twitter and Facebook to this, they will be onto something.**
<br/>
### The Evil Empire Strikes Back
<br/>
In news that should surprise no one, Alexander Martin reports:

[Russian trolls found manipulating audiences on Trump’s Truth Social, new research finds](https://therecord.media/russian-trolls-found-manipulating-audiences-on-trumps-truth-social-new-research-finds/)

The Record reports:

[After more than 200 takedowns, Meta confirms covert online campaigns have gone global](https://therecord.media/after-more-than-200-takedowns-meta-confirms-covert-online-campaigns-have-gone-global/?curator=MediaREDEF)

Reuters reports:

[North Korean cyber spies deploy new tactic: tricking foreign experts into writing research for them](https://www.reuters.com/world/asia-pacific/north-korean-cyber-spies-deploy-new-tactic-tricking-foreign-experts-into-writing-2022-12-12/)

TechCrunch reports:

[NSA says Chinese hackers are exploiting a zero-day bug in popular networking gear](https://techcrunch.com/2022/12/14/nsa-says-chinese-hackers-are-exploiting-a-zero-day-bug-in-popular-networking-gear/)

Rolling Stone reports:

[Texas GOP Attorney General Tried to Get a List of Trans Residents … For Some Reason](https://www.rollingstone.com/politics/politics-news/ken-paxton-list-trans-texans-1234647489/)

**As a reminder, this is how Germany’s National Socialist Party began the Holocaust.**
<br/>
### Cybersecurity/Privacy
<br/>
Joshua Otwell reports on:

[A JSON-Based SQL Injection Capable of Bypassing Web Application Firewalls](https://openlamptech.substack.com/p/a-json-based-sql-injection-capable)

Security Intelligence reports on:

[How The Talent Shortage Changes the Approach to Cybersecurity](https://securityintelligence.com/articles/how-talent-shortage-changes-cybersecurity/)

The Hill reports:

[For Congress to confront cybersecurity, reps push to ramp up cyber literacy](https://thehill.com/policy/cybersecurity/3773739-for-congress-to-confront-cybersecurity-reps-push-to-ramp-up-cyber-literacy/)

PCMag reports:

[FBI's InfraGard US Critical Infrastructure Intelligence Portal Hacked](https://www.pcmag.com/news/fbis-infragard-us-critical-infrastructure-intelligence-portal-hacked)

**This is why you should never rely on corporations or governments to protect your privacy or data.**

Thus, VentureBeat reports:

[Why developer-first security is needed from the start, from DevSecOps pioneer Snyk](https://venturebeat.com/security/why-developer-first-security-is-needed-from-the-start-from-devsecops-pioneer-snyk/)

[How a recession will change the cybersecurity landscape](https://venturebeat.com/security/recession-cybersecurity-landscape/)

ITBrew reports:

[With containers open for malware, app developers must keep a close eye on code](https://www.itbrew.com/stories/2022/12/14/with-containers-open-for-malware-app-developers-must-keep-a-close-eye-on-code)

TechCrunch reports:

[GitHub brings free secret scanning to all public repos](https://techcrunch.com/2022/12/15/github-brings-free-secret-scanning-to-all-repos/)
<br/>
### More
<br/>
In great news ITsFOSS reports:

[Pulsar: A Community-Led Open Source Code Editor to Continue the Legacy of Atom](https://news.itsfoss.com/pulsar-editor/)

Smashing Magazine asks:

[The Future Of Design: Human-Powered Or AI-Driven?](https://www.smashingmagazine.com/2022/12/future-design-human-powered-ai-driven/)

Shelly Fan has:

[DeepMind’s AlphaCode Conquers Coding, Performing as Well as Humans](https://singularityhub.com/2022/12/13/deepminds-alphacode-conquers-coding-performing-as-well-as-humans/) (better than 50% of developers) 

Dacian Florea looks at:

[Investing in Unit Testing: Benefits and Approaches](https://www.toptal.com/unit-testing/unit-testing-benefits)

Jason Knight was prolific this week and explores:

[Light/Dark Templates With Scripting Off Graceful Degradation](https://deathshadow.medium.com/light-dark-templates-with-scripting-off-graceful-degradation-2aa9c24fda2)

[FFS Would You Clowns Learn To Write HTML Tables Properly!!!](https://medium.com/codex/ffs-would-you-clowns-learn-to-write-html-tables-properly-48801df59833)

[The True Power Of CSS Columns](https://deathshadow.medium.com/the-true-power-of-css-columns-2e620ad66282)

Josip Vojak explores:

[5 Hidden Gems: The Best Lesser-Known JavaScript Frameworks You’ve Never Heard Of](https://josipvojak.com/5-hidden-gems-the-best-lesser-known-javascript-frameworks-youve-never-heard-of-9d0a2d5728e)

Speaking of which Escape Tech looks at:

[Rendering emails with Svelte](https://escape.tech/blog/sveltemails/)

Joshua Otwell has a:

[Developer Interview with Shawna Brookes](https://openlamptech.substack.com/p/openlamptech-developer-interview-ce8)

Bleeping Computer reports:

[GitHub to require all users to enable 2FA by the end of 2023](https://www.bleepingcomputer.com/news/security/github-to-require-all-users-to-enable-2fa-by-the-end-of-2023/)

In October 2022, the Gitea Ltd for-profit company took over the open-source Gitea project, an GitHub alternative. The trust issues created by the move took the entire community by surprise, including the Codeberg presidium and members. Thus:

[Codeberg launches Forgejo](https://blog.codeberg.org/codeberg-launches-forgejo.html)

And [Beyond coding. We forge.](https://forgejo.org/2022-12-15-hello-forgejo/)

**This is an example of the perils of trusting your code base with a corporation or anything to do with the Chinese.**

The Verge explores:

[How to buy a social network, with Tumblr CEO Matt Mullenweg](https://www.theverge.com/23506085/wordpress-twitter-tumblr-ceo-matt-mullenweg-elon-musk)

**This explores the difference between a successful entrepreneur and an Afrikaner douchebag who have recently bought social networks.**

**Speaking of said douchebag**, MIT Technology Review reports:

[We’re witnessing the brain death of Twitter](https://www.technologyreview.com/2022/12/15/1065013/twitter-brain-death/)

And The Verge reports:

[Twitter’s newsletter tool is shutting down on January 12th](https://www.theverge.com/2022/12/14/23509254/twitter-revue-shutdown-newsletter-data-deletion)

**Again, this is trusting your email marketing or newsletter with a corporation. Those naive enough to base a substantial part of their business on Revue are fucked. So, SubStack users beware.** 

**Always own your online real estate people.**

Time reports:

[Thousands Have Joined Mastodon Since Twitter Changed Hands. Its Founder Has a Vision for Democratizing Social Media.](https://time.com/6229230/mastodon-eugen-rochko-interview/)
<br/>
That’s it for this week. Please share this communiqué. 

Also, be sure to [join our newsletter list at the bottom of our site’s pages](https://www.symfonystation.com/contact). Joining gets you each week's communiqué in your inbox (a day early).

We have stopped curating on Twitter. It has turned into a full-scale dumpster fire, as we predicted months ago, so we are now on Mastodon at [@symfonystation@phpc.social](https://phpc.social/web/@symfonystation). Follow us there [or on Flipboard](https://flipboard.com/@mobileatom/symfony-for-the-devil-allupr6jz) for daily coverage. Consider joining the [@phpc.social](https://phpc.social/web/home) instance.

Do you own or work for an organization that would be interested in our promotion opportunities?  Or supporting our journalistic efforts? If so, please get in touch with us. We’re in our infancy, so it’s extra economical. 😉

More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on [our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine). Or, if you know of one, get in touch.

Keep coding Symfonistas!

## Author

![Reuben Walker Headshot](https://miro.medium.com/max/1200/1*rQ6xHzVTy_GKRNCQ2aiYyA.webp)
### Reuben Walker

Founder
Symfony Station