Symfony Station Communiqué — 10 February 2023. A look at Symfony, Drupal, PHP, and Cybersecurity news.
Tags: symfony, drupal, php, cybersecurity
Published: 2023-02-11 21:57:03

This communiqué [originally appeared on Symfony Station](https://www.symfonystation.com/Symfony-Station-Communique-10-February-2023), your source for cutting-edge Symfony, PHP, and Cybersecurity news.

Welcome to this week's Symfony Station Communiqué. It's your review of the essential news in the Symfony and PHP development communities. We also cover the cybersecurity world and the Fediverse. 

Please take your time and enjoy the items most relevant and valuable to you.

As always, thanks to Javier Eguiluz and Symfony for sharing [our latest communiqué](https://www.symfonystation.com/Symfony-Station-Communique-03-February-2023) in their [Week of Symfony](https://symfony.com/blog/a-week-of-symfony-840-30-january-5-february-2023?utm_source=Symfony+Blog+Feed&utm_medium=feed).

**My opinions will be in bold.**

---

Many of the items we curate are on Medium. I recommend investing in a membership, as you can access everything you want to read. It’s a small investment in boosting your career. As you may have noticed, non-members can only access a limited number of articles per month.

**[Become a member here](https://medium.com/@mobileatom/membership)**! The compensation we receive from your use of this link helps pay for our weekly communiqué.

---

![Symfony logo](https://www.symfonystation.com/sites/default/files/inline-images/Symfony-2.png)

## Symfony

As always, we will start with the official news from Symfony.Highlight -> “This week, Symfony 4.4.50, 5.4.20, 6.0.20, 6.1.12, and 6.2.6 were released to address some security issues related to CSRF tokens and cookie headers in HTTP Cache. Moreover, we celebrated the companies that back Symfony 6.2 development and announced the SymfonyLive Paris 2023 conference workshops.“

[A Week of Symfony #840 (30 January - 5 February 2023)](https://symfony.com/blog/a-week-of-symfony-840-30-january-5-february-2023?utm_source=Symfony+Blog+Feed&utm_medium=feed)

Symfony announced:

[SymfonyLive Paris 2023 - The schedule is complete and online!](https://symfony.com/blog/symfonylive-paris-2023-the-schedule-is-complete-and-online)

[SymfonyLive Paris 2023 - Symfony and Hotwire: make an interactive front-end without too much effort](https://symfony.com/blog/symfonylive-paris-2023-symfony-and-hotwire-make-an-interactive-front-end-without-too-much-effort?utm_source=Symfony+Blog+Feed&utm_medium=feed) 

[SymfonyLive Paris 2023 - Tests in a Symfony application](https://symfony.com/blog/symfonylive-paris-2023-tests-in-a-symfony-application)

SymfonyCasts continued its API Platform course.

[This week on SymfonyCasts](https://5hy9x.r.ag.d.sendibm3.com/mk/mr/jL4TG8kAJ2II02etC4NuJ2r8IAL-_ji41uiadZWqSUKpQZn4YPVAsxX0fLSX5ENI6H0yiN0IJcFExVwOT4oO0ql5L2kU9_kR3Zf-uPh14ywsYE-JHVWvDbP2v35GdV56qG4GH_Jeukc)

---

## Featured Item

![Featured item graphic](https://symfonystation.com/sites/default/files/inline-images/Featured-Item_1_0.png)

Software Crisis says:

I’ve pointed out before that Programming is a Pop Culture. But, this isn’t an issue that’s specific to programming or software development. It’s an issue that plagues the entire tech industry.

### [Tech Companies Are Irrational Pop Cultures](https://softwarecrisis.dev/letters/tech-is-a-pop-culture/)

**So true. Unfortunately.**

And in a similar more optimistic vein Brandeis Marshall says:

### [Say Goodbye to the Tech-First Era, The humanity-first movement is here and staying awhile](https://zora.medium.com/say-goodbye-to-the-tech-first-era-1b337d323d86)

---

### This Week

Nacho Colomina Torregrosa explains:

[Making a Symfony third-party bundle extensible](https://dev.to/icolomina/making-a-symfony-third-party-bundle-extensible-4ng3)

[Serializing API outputs with Symfony serializer](https://dev.to/icolomina/serializing-api-outputs-with-symfony-serializer-14o5)

Manuel Canga shows us how to:

[Fix Symfony 6.x tests with PHPUnit 10](https://dev.to/manuelcanga/fix-symfony-6x-tests-with-phpunit-10-18a1)

The Register reports:

[HeadCrab bots pinch 1,000+ Redis servers to mine coins](https://www.theregister.com/2023/02/04/headcrab_botnet_aqua/)

Yan Ivanov explores:

[Optimizing One-To-Many Doctrine collections](https://medium.com/@franzose/optimizing-onetomany-doctrine-collections-398c782706a2)

Jolicode shows us:

[How to Fix Memory Leak in Doctrine Migrations](https://jolicode.com/blog/how-to-fix-memory-leak-in-doctrine-migrations)

### eCommerce

Lemberg Solutions shows us:

[How to Build a B2B eCommerce Marketplace with Drupal Commerce?](https://lembergsolutions.com/blog/how-build-b2b-ecommerce-marketplace-drupal-commerce)

### CMSs

The Drop Times interviews Adam Varn of Florida DrupalCamp:

[Don't Exert Too Much Effort on Headless: Adam Varn | FLDC](https://www.thedroptimes.com/28185/dont-exert-too-much-effort-headless-adam-varn-fldc)

Andrey Rudenko reviews Drupal’s new:

[Claro Admin Theme](https://www.adcisolutions.com/knowledge/claro-admin-theme)

!#Code looks at:

[Drupal 10: Migrating Flags With The Migrate Module](https://www.hashbangcode.com/article/drupal-10-migrating-flags-migrate-module)

The Droptimes’ Sebin A Jacog asks:

[Wish Drupal Would Offer an Official JavaScript Client Sometime: Brian Perry](https://www.thedroptimes.com/28055/wish-drupal-offer-official-javascript-client-sometime-brian-perry)
**I think this may be in the works (but I’m not sure).**

Speaking of which, Specbee shares:

[Taming JavaScript in Drupal (Includes FAQs)](https://www.specbee.com/blogs/taming-javascript-in-drupal)

Golems asks:

[What is Data Persistence?](https://gole.ms/blog/what-data-persistence)

WebWash examines:

[Customize View Fields using Twig in Drupal](https://www.webwash.net/customize-view-fields-using-twig-in-drupal/)

If you aren’t familiar with the Twig templating engine, see our article, **[Twig: The Ultimate Guide to the Premier PHP Templating Language](https://www.symfonystation.com/Twig-Ultimate-Guide-PHP-Templating-Language)**.

Drupal and PHPStan developer extraordinaire Matt Glaman explores:

[Using the new add_suggestion Twig filter in Drupal 10](https://mglaman.dev/blog/using-new-addsuggestion-twig-filter-drupal-10)

**Yay Twig!**

He also has:

[phpstan-drupal 0.12.15: Improved detection of deprecated service usage](https://mglaman.medium.com/phpstan-drupal-0-12-15-improved-detection-of-deprecated-service-usage-1b3c807c5f47)

And:

[Auto discovery of global commands in Drush](https://mglaman.dev/blog/auto-discovery-global-commands-drush)

And he has a book coming out today:

[Drupal 10 Development Cookbook Releasing Tomorrow](https://www.thedroptimes.com/28198/drupal-10-development-cookbook-releasing-tomorrow)

**I have ordered the print version, Matt. So slow down now, bro. I'll buy you a beer at Florida DrupalCamp. ;)**

Systemseed looks at:

[10 Tips for a Successful Web Development Project for Charities, Nonprofits and NGOs](https://systemseed.com/articles/10-tips-for-a-successful-web-development-project-for-charities-nonprofits-and-ngos)

Pantheon announced:

[Pantheon’s LocalDev will be Discontinued in June 2023](https://pantheon.io/blog/pantheon-localdev-will-be-discontinued-june-2023)

### Previous Weeks

Ulrich shows us how to:

[Manage Elasticsearch indices with elasticsearch-php library](https://www.mon-code.net/post/168/manage-elasticsearch-indices-with-elasticsearch-php-library)

Annai Magazine explores:

[New features of the Drupal Group Module 2.0.0/3.0.0](https://annai.co.jp/en/article/group-2-3-beta-released)

John Freeman looks at the:

[Locality of **(Code)** Behavior](https://www.eloquentarchitecture.com/locality-of-behavior/)

![PHP logo](https://symfonystation.com/sites/default/files/inline-images/php-logo_4.png)

## PHP

### This Week

Morteza Poussaneh shares:

[Package Manager(s?) in PHP](https://dev.to/mortezapoussaneh/package-managers-in-php-3kno)

Max Zhuk has:

[Design Patterns in PHP 8: State](https://dev.to/zhukmax/design-patterns-in-php-8-state-1152)

Laravel Learn examines:

[Manipulating Data with Ease: Understanding the Power of Map, Filter, and Fold in PHP](https://geofindblog.medium.com/manipulating-data-with-ease-understanding-the-power-of-map-filter-and-fold-in-php-1a750e80944c)

Alin Pintilie looks at:

[PHP Iterator](https://medium.com/@alin.pintilie/php-iterator-72f05d6940c8)

Victor Todoran says:

[Not All Exceptions Are The Same](https://medium.com/@vitoriodachef/not-all-exceptions-are-the-same-3f107c93773a)

Nikola Stojiljkovic shares:

[The most efficient way to debug problems with PHPUnit mocks](https://nikola-stojiljkovic.medium.com/the-most-efficient-way-to-debug-problems-with-phpunit-mocks-50a33bf720b0)

Rector PHP shows us:

[How to Upgrade to PHPUnit 10 in Diffs](https://getrector.com/blog/how-to-upgrade-to-phpunit-10-in-diffs)

LordNeic provides an:

[Introduction to Pest Testing in PHP](https://medium.com/@lordNeic/introduction-to-pest-testing-in-php-64c6565c0974)

And Laravel News shares:

[Testing JSON: API Endpoints with PestPHP](https://laravel-news.com/testing-json-api-endpoints-with-pestphp)

Frontend and accessibility legend Jason Knight starts a great series:

[“Poor Man’s” CMS From The Ground Up — Part 1, Planning And Defines](https://deathshadow.medium.com/poor-mans-cms-from-the-ground-up-part-1-planning-and-defines-387e0eafc107)

[“Poor Man’s” CMS From The Ground Up — Part 2, Outer Markup And Templates](https://medium.com/codex/poor-mans-cms-from-the-ground-up-part-2-outer-markup-and-templates-b8ac9a1f21e5)

**This is an excellent lesson in architecture.**

Claudio Ribeiro has a:

[Quick Tip: How To Check if a Variable Is Set in PHP](https://www.sitepoint.com/php-check-variable-set/)

DevNest explores:

[Profile Guided Optimization (PGO) with PHP](https://medium.com/@dev.nest/profile-guided-optimization-pgo-with-php-820b7d1bfdcd)

Symfony Station favorite Andrei Birta examines:

[Building Scalable Systems with the Open-Closed Principle](https://medium.com/@andreibirta95/building-scalable-systems-with-the-open-closed-principle-dcc978dc28ad)

Tom Smykowski looks at:

[PHP 8.2+ Boosts Memory Beasts On MacOS](https://tomaszs2.medium.com/php-8-2-boosts-memory-beasts-on-macos-824586f7f6d1)

William P continues his series:

[30 Days of Automated Testing：Using PHPUnit【D16】](https://medium.com/@woeichern/30-days-of-automated-testing-using-phpunit-d16-309c31fe2957)

[30 Days of Automated Testing：Using PHPUnit【D17】](https://medium.com/@woeichern/30-days-of-automated-testing-using-phpunit-d17-327375c7216a)

[30 Days of Automated Testing：Using PHPUnit【D18】](https://medium.com/@woeichern/30-days-of-automated-testing-using-phpunit-d18-f7d428d0b1f9)

[30 Days of Automated Testing：Using PHPUnit【D19】](https://medium.com/@woeichern/30-days-of-automated-testing-using-phpunit-d19-efa55669092e)

[30 Days of Automated Testing：Using PHPUnit【D20】](https://medium.com/@woeichern/30-days-of-automated-testing-using-phpunit-d20-80be46875107)

Derick Rethans has an:

[Xdebug Update: January 2023](https://derickrethans.nl/xdebug-update-january-2023.html)

### Previous Weeks

Camilo Herrera looks at:

[Malware Detection in Web scripts with Regex, md5 checksum and PHP](https://medium.com/winkhosting/malware-detection-in-web-scripts-with-regex-md5-checksum-and-php-728fd101f441)

![Code logo](https://symfonystation.com/sites/default/files/inline-images/code-logo_3.jpeg)

## Other

[Please visit our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine) to learn how you can help kick Russia out of Ukraine (eventually).

### The cyber response to Russia’s War Crimes and other douchebaggery

Darkreading opines:

[Lessons From the Cold War: How Quality Trumps Quantity in Cybersecurity](https://www.darkreading.com/vulnerabilities-threats/lessons-from-the-cold-war-how-quality-trumps-quantity-in-cybersecurity)

The Hacker News reports:

[U.K. and U.S. Sanction 7 Russians for TrickBot, Ryuk, and Conti Ransomware Attacks](https://thehackernews.com/2023/02/uk-and-us-sanction-7-russians-for.html)

The Guardian reports:

[TikTok: how the west has turned on gen Z’s favorite app](https://www.theguardian.com/technology/2023/feb/05/tiktok-how-west-turned-on-gen-z-favourite-app)

TechCrunch reports:

[Senate committee presses Meta over data access by developers in “high risk” countries, per 2018 app audit](https://techcrunch.com/2023/02/07/meta-cambridge-analytica-senate-intelligence-committee-letter/)

[EU’s top diplomat fires warning shot at Elon Musk over Twitter disinformation](https://techcrunch.com/2023/02/07/elon-musk-twitter-disinformation-josep-borrell/)

The Guardian reports:
[Fury in Ukraine as Elon Musk’s SpaceX limits Starlink use for drones](https://www.theguardian.com/world/2023/feb/09/zelenskiy-aide-takes-aim-at-curbs-on-ukraine-use-of-starlink-to-pilot-drones-elon-musk?CMP=oth_b-aplnews_d-1)

### The Evil Empire Strikes Back

The Hacker News reports:

[Russian Hackers Using Graphiron Malware to Steal Data from Ukraine](https://thehackernews.com/2023/02/russian-hackers-using-graphiron-malware.html)

Wired reports:

[The Kremlin Has Entered the Chat](https://www.wired.com/story/the-kremlin-has-entered-the-chat/?curator=MediaREDEF)

The Guardian reports:

[State-linked hackers in Russia and Iran are targeting UK groups, NCSC warns](https://www.theguardian.com/technology/2023/jan/26/state-linked-hackers-in-russia-and-iran-are-targeting-uk-groups-ncsc-warns)

The Journal of Intelligence, Conflict, and Warfare reports:

[Russia's Role in the Far-Right Truck Convoy](https://journals.lib.sfu.ca/index.php/jicw/article/view/5101)

Bloomberg reports:

[TikTok Reveals Russian Disinformation Network Targeting European Users](https://www.bloomberg.com/news/articles/2023-02-09/tiktok-reveals-russian-disinfo-network-targeting-european-users?srnd=technology-vp&sref=CrGXSfHu&leadSource=uverify+wall)

The Register reports:

[Surprise! China's top Android phones collect way more info](https://www.theregister.com/2023/02/07/chinese_android_phones_leak_pii/)

**That’s a sarcastic “Surprise!” in the headline.**

Business Insider reports:

[Hackers tied to North Korea stole $630 million in crypto last year in their biggest haul ever, UN reportedly finds](https://markets.businessinsider.com/news/currencies/crypto-analysis-north-korea-hackers-nuclear-missiles-kim-jong-un-2023-2)

The New York Times reports:

[Disinformation Researchers Raise Alarms About A.I. Chatbots](https://www.nytimes.com/2023/02/08/technology/ai-chatbots-disinformation.html?campaign_id=9&emc=edit_nn_20230209&instance_id=84903&nl=the-morning&regi_id=132694739&segment_id=124816&tehttps%3A%2F%2Fwww.nytimes.com%2F2023%2F02%2F08%2Ftechnology%2Fai-chatbots-disinformation.html%3Fcampaign_id=9&emc=edit_nn_20230209&instance_id=84903&nl=the-morning&regi_id=132694739&segment_id=124816&te=1&user_id=9859d1b5f2804acae2a0ccdde6341ccb%3D1&user_id=9859d1b5f2804acae2a0ccdde6341ccb)

The Guardian has an opinion piece reporting on:

[A world in which your boss spies on your brainwaves? That future is near](https://www.theguardian.com/commentisfree/2023/feb/09/boss-spies-brainwaves-dystopian-future).

Wired asks:

[Want to Delete Your Twitter DMs? Good Luck With That](https://www.wired.com/story/delete-twitter-dms-gdpr/)

### Cybersecurity/Privacy

Ars Technica reports:

[Hackers are selling a service that bypasses ChatGPT restrictions on malware](https://arstechnica.com/information-technology/2023/02/now-open-fee-based-telegram-service-that-uses-chatgpt-to-generate-malware/)

VentureBeat reports on:

[Getting results from your zero-trust initiatives in 2023](https://venturebeat.com/security/getting-results-from-your-zero-trust-initiatives-in-2023/)

The Markup shares:

[Blacklight – The Markup](https://themarkup.org/blacklight)

**This is a very helpful tool. Very.**

Bleeping Computer reports:

[Clop ransomware flaw allowed Linux victims to recover files for months](https://www.bleepingcomputer.com/news/security/clop-ransomware-flaw-allowed-linux-victims-to-recover-files-for-months/)

The Hacker News reports:

[Encrypted Messaging App Exclu Used by Criminal Groups Cracked by Joint Law Enforcement](https://thehackernews.com/2023/02/encrypted-messaging-app-exclu-used-by.html)

### More

 ZDNets’ Jack Wallen shares:

[My idea for a great new beginner-friendly Linux distribution](https://www.zdnet.com/article/my-idea-for-a-great-new-beginner-friendly-linux-distribution/)

Business Insider reports:

[OpenAI makes a ChatGPT-like tool called Codex that can write software. Here's why Codex won't replace developers and will instead create more demand for their skills.](https://www.businessinsider.com/chatgpt-openai-codex-developer-jobs-2023-2)

**Let’s hope this is true.** 

Visual Studio shares:

[CodeGPT: write and improve code using AI](https://marketplace.visualstudio.com/items?itemName=timkmecl.codegpt3)

Infoworld reports:

[Visual Studio Code 1.75 brings configuration profiles](https://www.infoworld.com/article/3687049/visual-studio-code-175-brings-configuration-profiles.html)

TechCrunch reports:

[GitHub CEO on why open source developers should be exempt from the EU’s AI Act](https://techcrunch.com/2023/02/03/github-ceo-on-why-open-source-developers-should-be-exempt-from-the-eus-ai-act/)

Releem looks at:

[How MySQL Configuration Impacts the Performance of Web Applications](https://releem.com/blog/web-applications-performance)

Planetscale explores:

[Common MySQL errors and how to fix them](https://planetscale.com/blog/common-mysql-errors-how-to-fix-them)

I found this holiday series a little late, but 12 Days of Web shares:

[HTML Dialog | 12 Days of Web](https://12daysofweb.dev/2022/dialog/)

[CSS Subgrid | 12 Days of Web](https://12daysofweb.dev/2022/css-subgrid/)

Smashing Mag shows us:

[How To Build A Magazine Layout With CSS Grid Areas](https://www.smashingmagazine.com/2023/02/build-magazine-layout-css-grid-areas/)

Alex Russell looks at:

[The Market for Lemons - Infrequently Noted](https://infrequently.org/2023/02/the-market-for-lemons/)

**Another piece on why JavaScript SPA platforms suck.**

[The Performance Inequality Gap, 2023](https://infrequently.org/2022/12/performance-baseline-2023/)

**Here’s another one via Infrequently.**

And here’s a Svele resource for you if you have to use a JS frontend:

[SvelteStorm: Svelte’s First IDE](https://medium.com/@sveltestorm/sveltestorm-sveltes-first-ide-8b9d99b5d51)

Jangwook Kim shares:

[A Comprehensive Guide to Debugging Svelte Applications](https://kim-jangwook.medium.com/a-comprehensive-guide-to-debugging-svelte-applications-ac4b989d94b9)

### Fediverse

Ross Schulman shares:

[The Breadth of the Fediverse](https://www.eff.org/deeplinks/2023/02/breadth-fediverse)

Cloudfare says:

[Welcome to Wildebeest: the Fediverse on Cloudflare](https://blog.cloudflare.com/welcome-to-wildebeest-the-fediverse-on-cloudflare/)

**This is big news.**

Fastly offers a similar service:

[Fastly and the Fediverse, pt.1](https://www.fastly.com/blog/fastly-and-the-fediverse-pt-1)

Wired reports:

[The Mastodon Bump Is Now a Slump](https://www.wired.com/story/the-mastodon-bump-is-now-a-slump/)

**While it has a clickbait title that is inaccurate, this article covers a good development. The lazy and stupid people have left Mastodon.**

Speaking of which Canadian online reports:

[Journalists, You’re Walking Away From A Goldmine](https://thecanadian.online/?p=167)

And TechDirt counters with:

[Lazy Reporters Claiming Fediverse Is ‘Slumping,’ Despite Massive Increase In Usage](https://www.techdirt.com/2023/02/08/lazy-reporters-claiming-fediverse-is-slumping-despite-massive-increase-in-usage/)

## CTAs

- That’s it for this week. Please share this communiqué.
- Also, be sure to [join our newsletter list at the bottom of our site’s pages](https://www.symfonystation.com/contact). Joining gets you each week's communiqué in your inbox (a day early).
- Follow us [on Flipboard](https://flipboard.com/@mobileatom/symfony-for-the-devil-allupr6jz) or at [@symfonystation@phpc.social](https://phpc.social/web/@symfonystation) on Mastodon for daily coverage. Consider joining the [@phpc.social](https://phpc.social/web/home) instance. If this communique is a little overwhelming, you can get a condensed, weekly news highlight post on [Friendica](https://friendica.me/profile/friendofsymfony).

Do you own or work for an organization that would be interested in our promotion opportunities? Or supporting our journalistic efforts? If so, please get in touch with us. We’re in our infancy, so it’s extra economical. 😉

More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on [our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine). Or, if you know of one, get in touch.

Keep coding Symfonistas!

**[Visit our Communiqué Library](https://www.symfonystation.com/Communiqu%C3%A9s)**

You can find a vast array of curated evergreen content.

##Author

![https://miro.medium.com/max/1200/1*B3RcgIbAiytfjynP-oiOMg.jpeg](https://miro.medium.com/max/1200/1*B3RcgIbAiytfjynP-oiOMg.jpeg)

### Reuben Walker

Founder
Symfony Station