Symfony Station Communiqué — 2 September 2022. A look at Symfony, PHP, and Cybersecurity News!
Tags: symfony, php, drupal, cybersecurity
Published: 2022-09-03 12:45:10

This communiqué [originally appeared on Symfony Station](https://www.symfonystation.com/Symfony-Station-Communique-02-September-2022), your source for cutting-edge Symfony and PHP news.

Welcome to this week's Symfony Station Communiqué. It's your review of the essential news in the Symfony and PHP development communities. We also cover the cybersecurity world in detail each week. 

Take your time and enjoy the items most relevant and valuable to you. 

As always, thanks to Javier Eguiluz and Symfony for sharing [our last communiqué](https://www.symfonystation.com/Symfony-Station-Communique-26-August-2022) and [Symfony UX article](https://www.symfonystation.com/symfony-ux-stimulus-js-ui) in their [Week of Symfony](https://symfony.com/blog/a-week-of-symfony-817-22-28-august-2022). 

**My opinions will be in bold.** 

---

Many of the items we curate are on Medium. I recommend investing in membership as you can access everything you want to read. It’s a small investment in boosting your career. As may have noticed non-members can only access a limited number of articles per month.

**[Become a member here](https://medium.com/@mobileatom/membership)**! The compensation we receive from your use of this link helps pay for our weekly communiqué.

---

## Symfony

As always, we will start with the official news from Symfony.

Highlight -> “This week, Symfony 4.4.45, 5.4.12, 6.0.12 and 6.1.4 maintenance versions were released. In addition, the upcoming Symfony 6.2 version introduced a new ValueResolverInterface
to replace and simplify the existing ArgumentValueResolverInterface.“

[A Week of Symfony #817 (22-28 August 2022)](https://symfony.com/blog/a-week-of-symfony-817-22-28-august-2022)

Symfony announced:

[Zoom in on Getting the Most Out of PHPStan workshop at SymfonyCon Disneyland Paris 2022](https://symfony.com/blog/zoom-in-on-getting-the-most-out-of-phpstan-workshop-at-symfonycon-disneyland-paris-2022)

[SymfonyCon Disneyland Paris 2022: How to instantly upgrade your legacy Symfony in minutes?](https://symfony.com/blog/symfonycon-disneyland-paris-2022-how-to-instantly-upgrade-your-legacy-symfony-in-minutes)

[SymfonyCon Disneyland Paris 2022: How to handle content editing in Symfony?](https://symfony.com/blog/symfonycon-disneyland-paris-2022-how-to-handle-content-edition-in-symfony)

**I’m looking forward to this one.**

[SymfonyCon Disneyland Paris 2022: Is Git a mistery for you?](https://symfony.com/blog/symfonycon-disneyland-paris-2022-is-git-a-mistery-for-you)

**Mostly, unfortunately. If mistery is a combination of mystery and misery.**

SymfonyCasts continues their Doctrine course with new chapters.

[This week on SymfonyCasts](https://5hy9x.r.ag.d.sendibm3.com/mk/mr/D7HrLJqLsXvbOyGwEX234N7rNvNwazQaSgnLku0z6m8HBpK228j1At63uA5ZTWTnwXIbXdoVyoZ1nlITXsglsf8w9otSalgfU5u533PKYdEyvEgbF3-3x0cUgWYYCMP0BQed-ZLhyRA)

---

## Featured Item

![Featured item graphic](https://symfonystation.com/sites/default/files/inline-images/Featured-Item_1_0.png)

There was not a standout article for us this week. But Scapegoat Dev shares an enjoyable one.

### [Why I Love Still PHP and JavaScript After 20+ years](https://the.scapegoat.dev/why-i-love-php-and-javascript/)

---

### This Week

Andrew MacRobert shows us:

[Build a Cheap Static Website with Symfony and AWS](https://medium.com/@Andrew-MacRobert/build-a-cheap-static-website-with-symfony-and-aws-66560f885357)

Ibragim Abubakarov explores:

[Tâches de fond avec Symfony et Docker](https://ibra-akv.medium.com/t%C3%A2ches-de-fond-avec-symfony-et-docker-840b364994d4)

Thomas Bertrand shares:

[Symfony ParamConverter: the best friend you don’t know yet](https://medium.com/@ttbertrand/symfony-paramconverter-the-best-friend-you-dont-know-yet-c31ef2251683)

TechSumo shows us:

[How to Use the Symfony Event Dispatcher for PHP](https://techsumo.net/2022/08/29/how-to-use-the-symfony-event-dispatcher-for-php/)

.com starts continues his series on serving images:

[#4 GitHub actions continuous integration pipelines](https://medium.com/@dotcom.software/4-github-actions-continuous-integration-pipelines-1bc80a902374)

[#5 Serving thumbnails](https://medium.com/@dotcom.software/5-serving-thumbnails-1e5d95d8c76b)

[#6 Preventing request forgery](https://medium.com/@dotcom.software/6-preventing-request-forgery-380c63b416b7)

[#7 Talking to S3](https://medium.com/@dotcom.software/7-talking-to-s3-a2b4cb65c7fd)

And explores:

[Designing Symfony Validator the TDD way](https://blog.devgenius.io/designing-a-symfony-validator-the-tdd-way-8cded85e88d1)

Vipin Yadav shows us:

[How to regenerate entity in symfony-6 using CLI](https://webkul.com/blog/how-to-regenerate-entity-in-symfony-6-using-cli/)

Devscope shares how to:

[Solve problem with bin commands and php versions](https://devscope.io/code/symfony/symfony/issues/47409)

Andreas Möller examines:

[Asserting the output of Symfony console commands](https://localheinz.com/blog/2022/08/29/asserting-the-output-of-symfony-console-commands/)

### eCommerce

Centarro has:

[Commerce Core 2.31 (and more!) features in review](https://www.centarro.io/blog/commerce-core-231-and-more-features-review)

### CMSs

Mike Hercel is excited about:

[New to Drupal core: Refactored Off-Canvas Dialog CSS!](https://herchel.com/articles/new-drupal-core-refactored-canvas-dialog-css)

[New to Drupal: Improved Dumping of Twig Variables!](https://herchel.com/articles/new-drupal-improved-dumping-twig-variables)

Evolving web asks:

[Where’s Your Head? The Case For (and Against) Headless CMS](https://evolvingweb.ca/blog/wheres-your-head-case-and-against-headless-cms)

Pantheon shares:

[Three UX Lessons At Decoupled Days 2022](https://pantheon.io/blog/three-ux-lessons-decoupled-days-2022)

Civic shows us how to do:

[Responsive images in Drupal](https://www.civicuk.com/blog-item/responsive-images-drupal)

Golems explores:

[Tokens in Drupal: how they work and what they can give your website](https://gole.ms/blog/tokens-drupal-how-they-work-and-what-they-can-give-your-website)

![PHP logo](https://symfonystation.com/sites/default/files/inline-images/php-logo_4.png)

## PHP

### This Week

The PHP Foundation released:

[PHP Core Roundup #5](https://thephp.foundation/blog/2022/08/30/php-core-roundup-5/)

And this article:

[Testing Randomness of PHP Random Number Functions](https://php.watch/articles/testing-php-rand-functions)

PHP Watch has:

[PHP.Watch August 2022: New "ext-random" in PHP, and more](https://mailchi.mp/php.watch/phpwatch-aug-2022?e=98271ad8b9)

Max Zhuk has:

[Design Patterns in PHP 8: Adapter](https://dev.to/zhukmax/design-patterns-in-php-8-adapter-41hi?utm_source=dormosheio&utm_campaign=dormosheio)

Wouter Carabain show us:

[How to use actions to organize your logic in an amazing way](https://woutercarabain.com/webdevelopment/how-to-use-actions-to-organize-your-logic-in-an-amazing-way/)

Julien Maury looks at:

[Hacking Redis](https://dev.to/jmau111/hacking-redis-2dl2)

Jack Wallen shows us:

[How to create a Redis cluster for database failover](https://www.techrepublic.com/article/create-redis-cluster/)

Jason Knight shares:

[Fixing A Strange PHP Gzip Issue](https://deathshadow.medium.com/fixing-a-strange-php-gzip-issue-6d761cbebe84)

Andrew Pogulailo explores:

[Domain-Driven Design and Clean Architecture in PHP — Part 2 (Event Storming)](https://medium.com/@pogulailo/domain-driven-design-and-clean-architecture-in-php-part-2-event-storming-20f19b57a059)

Chibuzo Miracle continues his MVC series:

[Simple MVC Framework With PHP (Request Parsing)](https://medium.com/@miraclechibuzo/simple-mvc-framework-with-php-request-parsing-3e7919efcfd8)

Laravel News examines:

[Working with OS process(es) in PHP](https://laravel-news.com/working-with-os-process-in-php)

Geni Jaho looks at:

[Upping the coding style game in PHP using Rector](https://blog.genijaho.dev/upping-the-coding-style-game-in-php-using-rector)

Yannick Chenot is starting a new series of articles:

[Building a PHP CLI tool using DDD and Event Sourcing. Introduction: why?](https://tech.osteel.me/posts/a-crypto-activity-tracking-tool-introduction-why)

Andrew Pogulailo explores:

[Domain-Driven Design and Clean Architecture in PHP — Part 2 (Event Storming)](https://medium.com/@pogulailo/domain-driven-design-and-clean-architecture-in-php-part-2-event-storming-20f19b57a059)

.com also has:

[Start using “__invoke” in PHP](https://blog.devgenius.io/start-using-invoke-in-php-b815287e1182)

Edouard Courty want you to:

[Write flawless code with PHPStan}(https://medium.com/@edouard.courty/write-flawless-code-with-phpstan-a6ef9206cc56)

![Code logo](https://symfonystation.com/sites/default/files/inline-images/code-logo_3.jpeg)

## Other

[Please visit our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine) to learn how you can help kick Russia out of Ukraine (eventually).

### The cyber response to Russia’s War Crimes

**There are a lot of dumbfuck Russian criminals in Ukraine, but these take the cake.**

Wired reports:

[Their Photos Were Posted Online. Then They Were Bombed](https://www.wired.com/story/wagner-group-osint-russia-ukraine/).

Wired reports:

[The Telegram-Powered News Outlet Waging Guerrilla War on Russia](https://www.wired.com/story/february-morning-russia-ukraine-war/)

VentureBeat reports on:

[How IT leaders in Ukraine continue to innovate despite the war](https://venturebeat.com/programming-development/how-ukraines-it-leaders-continue-to-innovate-despite-the-war/)

The Washington Post reports:

[With NAFO, Ukraine turns the trolls on Russia](https://www.washingtonpost.com/world/2022/09/01/nafo-ukraine-russia/)

### The Evil Empire Strikes Back

Decipher reports:

[China-Based Group Uses ScanBox Framework in Espionage Attacks](https://apple.news/ADK1T3BmQQkmlgNrAiG7qEQ)

### Cybersecurity/Privacy

Concrete CMS shares:

[7 Steps to Improve Your Site Security](https://www.concretecms.com/about/blog/community-blog/7-steps-improve-your-site-security)

This is why we can’t have nice things. Gizmodo reports:

[Hackers Snuck Malware into an Image from the Webb Space Telescope](https://gizmodo.com/hackers-malware-webb-space-telescope-1849479248)

Ars Technica reports:

[Chrome extensions with 1.4M installs covertly track visits and inject code](https://arstechnica.com/information-technology/2022/08/google-removes-extensions-that-covertly-tracked-users-and-injected-javascript/)

**And why is this surprising?**

**In another example of JavaScript’s clusterfuckery,** Dark Reading reports:

[New ODGen Tool Unearths 180 Zero-Days in Node.js Libraries](https://www.darkreading.com/dr-tech/new-odgen-tool-unearths-180-zero-days-in-node-js-libraries)

Wired reports:

[Careless Errors in Hundreds of Apps Could Expose Troves of Data](https://www.wired.com/story/mobile-apps-cloud-credentials-exposed/)

### More

Marco Pfeiffer shares:

[MySQL 5.7 Does Not Have an Official Docker Image on ARM/M1 Mac](https://betterprogramming.pub/mysql-5-7-does-not-have-an-official-docker-image-on-arm-m1-mac-e55cbe093d4c)

Mickaël Andrieu explores:

[Time Series Analysis with MySQL 8](https://medium.com/simple-data/time-series-analysis-with-mysql-8-346c81a9c258)

Smashing Mag explores:

[Databases For Front-End Developers: The Concepts Under The Hood (Part 2)](https://www.smashingmagazine.com/2022/09/databases-frontend-developers-concepts-under-hood/)

**Great stuff here.**

VentureBeat details:

[XML vs HTML: Differences and similarities](https://venturebeat.com/datadecisionmakers/xml-vs-html-differences-and-similarities/)

[Software may be eating the world, but low code could eat software](https://venturebeat.com/programming-development/software-may-be-eating-the-world-but-low-code-could-eat-software/)

TechCrunch reports:

[DhiWise takes the tedium out of programming](https://techcrunch.com/2022/08/22/dhiwise-takes-the-tedium-out-of-programming/)

GitHub shows us:

[Keep separate codebases in sync with GitHub Actions](https://github.com/readme/guides/fullstory-github-actions)

For those who mistakenly think Tailwind is the greatest thing since sliced bread, Beau Carnes has:

[Learn CSS in 11 Hours](https://www.freecodecamp.org/news/learn-css-in-11-hours/)

And while you’re there take this as well:

[Useful HTML5 Tags You Might Not Know](https://www.freecodecamp.org/news/html5-tags-you-might-not-know/)

And read this:

[Understand ES6 in 20 Minutes](https://javascript.plainenglish.io/understand-es6-in-20-minutes-8ab8f958e379)

And if you’ve already made the mistake of using Tailwind, there is this fortunate development:

[The Three Laws of Utility Classes](https://www.spicyweb.dev/the-three-laws-of-utility-classes/) and Vanilla Breeze.

If you know me, you know which is better. But Arooj Khan asks:

[React vs. Svelte: Which is Faster in 2022?](https://medium.com/codex/react-vs-svelte-which-is-faster-in-2022-7c8ffd1f0988)

That’s it for this week. Please share this communiqué. 

Also, be sure to [join our newsletter list at the bottom of our site’s pages](https://www.symfonystation.com/contact). Joining gets you each week's communiqué in your inbox (a day early).

If you don't already, [follow us on Twitter at @symfonfystation](https://twitter.com/symfonystation). 

And since it may be turning into a full-scale dumpster fire, we are now on Mastodon as well at [@symfonystation@phpc.social](https://phpc.social/web/@symfonystation). Consider joining the [@phpc.social](https://phpc.social/web/home) instance.

Do you own or work for an organization that would be interested in our promotion opportunities?  Or supporting our journalistic efforts?

If so, please get in touch with us. We’re in our infancy, so it’s extra economical. 😉

More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on [our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine). Or, if you know of one, get in touch.

Keep coding Symfonistas!

## Author

![Reuben Walker toasts Symfony](https://www.symfonystation.com/sites/default/files/inline-images/Reuben-Blur.jpg)

### Reuben Walker

Founder
Symfony Station