DEV Community: Tanzim Ibthesam

Revisiting 'PHP: A Fractal of Bad Design' — With Context

Tanzim Ibthesam — Fri, 05 Sep 2025 15:42:41 +0000

A long time back in 2012 and article titled Php-a-fractal-of-bad-design made a lot of noise across the development community. The link is attached if you want you can go through the article. Like it or not lot of things were actually true.
Thirteen years later, both the technological landscape and PHP itself have evolved dramatically. The criticisms were harsh but I found the original article extremely helpful for learning.
This article is not a counter argument. PHP has made significant strides specially since PHP 8.0 though some points from original article still resonate today.
I will point out the things and compare. As of now i have yet to cover everything this might be done in 2 parts or maybe the article might be edited.
Philosophy
1. PHP was originally designed explicitly for non-programmers (and, reading between the lines, non-programs); it has not well escaped its roots. A choice quote from the PHP 2.0 documentation, regarding + and friends doing type conversion:Once you start having separate operators for each type you start making the language much more complex. ie. you can’t use ‘==’ for stings [sic], you now would use ‘eq’. I don’t see the point, especially for something like PHP where most of the scripts will be rather simple and in most cases written by non-programmers who want a language with a basic logical syntax that doesn’t have too high a learning curve.Once you start having separate operators for each type you start making the language much more complex. ie. you can’t use ‘==’ for stings [sic], you now would use ‘eq’. I don’t see the point, epecially for something like PHP where most of the scripts will be rather simple and in most cases written by non-programmers who want a language with a basic logical syntax that doesn’t have too high a learning curve.

Here i will just say it was not intended to be a programming language in first place. The creator of PHP Rasmus Leordoff created a simple CGI wrapper in Perl to track his online resume visits in a preloaded server.
It was rewritten in C to improve performance.
In first place it was not intended for public use.Others discovered it than it grew to Personal Home Page.
Lerdorf developed "FI" (Form Interpreter) to embed SQL queries directly into web pages.

In 1995, this was combined with other components to create PHP/FI 2.0, which was described as "a complete rewrite of the two packages merged into a single application."

Due to its simplicity and less learning curve it started gaining a lot of traction.

2.PHP is built to keep chugging along at all costs. When faced with either doing something nonsensical or aborting with an error, it will do something nonsensical. Anything is better than nothing.
It was not built for that no software i feel is ever is built for that. Since it wasnt intended to be a programming language at first place some core principles might not been properly dealt with but throughout time a lot of issues have been fixed,though not all but still its not the same language as it was when this article was written.

3.There’s no clear design philosophy. Early PHP was inspired by Perl; the huge stdlib with “out” params is from C; the OO parts are designed like C++ and Java.
But modern PHP has improved a lot
Since PHP 5.3+ and especially with PHP 7+, the language has matured significantly:
Strict typing (via declare(strict_types=1))
Better OOP (namespaces, traits, proper exceptions)
Performance improvements (Zend Engine, OPcache)
A more consistent standard library (thanks to frameworks like Laravel and tools like Symfony)
The core team now treats PHP more like a real programming language—with RFCs, proposals, and thoughtful design.

4.PHP takes vast amounts of inspiration from other languages, yet still manages to be incomprehensible to anyone who knows those languages. (int) looks like C, but int doesn’t exist. Namespaces use . The new array syntax results in [key => value], unique among every language with hash literals.
Now lets talk about technical know how
Int is a data type in C since PHP is not a strictly typed language its used to mainly typecast.As of PHP 7.0 or so you can pass argument types.

function int_type(int $a): int {
    return $a;
}

echo int_type(a: 50);

Still a lot different like C which use

#include <stdio.h>

int main() {
    int age = 30;

    // Print the value
    printf("Hello, I am %d years old.\n", age);

    return 0;
}

You can clearly use int as a data type in C.
Namespaces were introduced in PHP 5.3
For namespace \ is used lets say you have a folder directory App\Models and have a class so to import a namespace you will use App\Models\User;
Its understandable but in languages like C# or Java its much more simplistic
In C#
namespace App.Models
In java
package app.models;

Yes in PHP => is used for storing values in array whereas other languages use : colon.Even fat arrow functions have the same thing.

 $multiplied = array_map(fn($x) => $x * 2, [1, 2, 3, 4]);
// Result: [2, 4, 6, 8]int main() {

5.Weak typing (i.e., silent automatic conversion between strings/numbers/et al) is so complex that whatever minor programmer effort is saved is by no means worth it.

Yes PHP is not a strictly typed language as mentioned previously From PHP 7.0 you can pass types to arguments.with declare(strict_types=1):

declare(strict_types=1);

function add(int $a,int $b){
    return $a+$b;
}

print add(10,20);
?>

There is still a problem lets say you declare variables inside a function which is not a parameter lets say

$age=45; if you write
$age='age';
var_dump($age);

It will output string. Is there any way to prevent this ?Yes but not first party. There is something called PHPstan.

/** @var int $age */
$age = 45;
$age = 'age'; // PHPStan will flag this as a type error

Though code will execute PHP will not provide run time error but you can have an idea about declared variable type assigment issue if any.
6.There is a whole lot of action at a distance. Consider this code, taken from the PHP docs somewhere.
@fopen('http://example.com/not-existing-file', 'r');
What will it do?
If PHP was compiled with --disable-url-fopen-wrapper, it won’t work. (Docs don’t say what “won’t work” means; returns null, throws exception?) Note that this flag was removed in PHP 5.2.5.
If allow_url_fopen is disabled in php.ini, this still won’t work. (How? No idea.)
Because of the @, the warning about the non-existent file won’t be printed.
But it will be printed if scream.enabled is set in php.ini.
Or if scream.enabled is set manually with ini_set.
But not if the right error_reporting level isn’t set.
If it is printed, exactly where it goes depends on display_errors, again in php.ini. Or ini_set.

Ok its a huge statement lets break this part by part.
Consider this code, taken from the PHP docs somewhere.
@fopen('http://example.com/not-existing-file', 'r');

What it will do
If PHP was compiled with --disable-url-fopen-wrapper, it won’t work. (Docs don’t say what “won’t work” means; returns null, throws exception?) Note that this flag was removed in PHP 5.2.5.
So now let us at first study the function. Fopen
fopen(
string $filename,
string $mode,
bool $use_include_path = false,
?resource $context = null
): resource|false

The fopen takes many arguments but most important is filename and mode and filename usually refers to the name of file mode mode refers to things as read write r w.
Return value: On success, fopen returns a file resource. On failure, it returns false and typically triggers a warning.

--disable-url-fopen-wrapper completely disables fopen-wrapper
The stream wrappers like http,https and ftp were not built to PHP at all.
You cannot open any URL via fopen(), file_get_contents(),
If even the wrapper was disabled then it would still trigger a warning.
In modern PHP (e.g., 5.x and later), this has been replaced by the runtime php.ini directive allow_url_fopen, which can be toggled on or off without recompiling.
If allow_url_fopen is disabled (set to 0 or false in php.ini):
If its set to false than fopen cannot read any url.
It allows you to enable or disable URL-based stream wrappers dynamically without recompiling PHP.
Because of @ the warning of non existent file doesnt get printed.
To print it you need to enable scream.ini previously it used to
f scream.enabled is 1, the warning is not suppressed by @.
But not if the right error_reporting level isn’t set.
If it is printed, exactly where it goes depends on display_errors, again in php.ini. Or ini_set.
Yes so if you set error levels to
error_reporting(E_ALL & ~E_WARNING);
Its all fine.

In easy terms for allow_url_fopen you dont need to recompile if you make changes this is its main difference with --disable-url-fopen-wrapper.
--disable-url-fopen-wrapper is a compile-time flag whereas allow_url_fopen is a runtime configuration in php.ini.

7.The language is full of global and implicit state. mbstring uses a global character set. func_get_arg and friends look like regular functions, but operate on the currently-executing function. Error/exception handling have global defaults. register_tick_function sets a global function to run every tick—what?!

<?php
mb_internal_encoding('SJISK');
$mb_strlen=mb_strlen("café");
var_dump($mb_strlen);

If you set internal coding to anything other than UTF-8 prior to PHP 8 it would issue a warning now it triggers a fatal error.
Prior to Php 5.6 to find out total number of arguments you need you to use func_get_args

<?php
function foo()
{
    $numargs = func_num_args();
    echo "Number of arguments: $numargs \n";
    if ($numargs >= 2) {
        echo "Second argument is: " . func_get_arg(1) . "\n";
    }
    $arg_list = func_get_args();
     var_dump($arg_list);
}
foo(1, 2, 3);

But now splat operator is introduced from Php 5.6

<?php
function foo(...$args){
    //Total number of rags
    var_dump($args);
    //Getting access to first index
    var_dump($args[1]);
}
foo(1, 2, 3);

register_tick_function sets a global function to run every tick—what?!
register_tick_function() — along with the ticks directive — is a largely obsolete and rarely used feature in modern PHP,
If we define tick we can say that an event that occurs after a certain number of low level statements are executed.
You needed to enable tick

<?php
declare(ticks=1);
register_tick_function(function () {
    echo "Tick occurred\n";
});

for ($i = 0; $i < 3; $i++) {
    echo "Loop $i\n";
}

The tick function is mostly obsolete since it adds a significant overhead.
There are modern alternatives
pcntl_signal() + pcntl_signal_dispatch() — for signal handling (in CLI).
set_time_limit() / ini_set('max_execution_time') — for timeouts.

Register_tick_function is not deprecated bus discouraged in the docs.

8.There is no threading support whatsoever. (Not surprising, given the above.) Combined with the lack of built-in fork (mentioned below), this makes parallel programming extremely difficult.
Yes till date there is no official support for multi threading in PHP.

9.Parts of PHP are practically designed to produce buggy code.
json_decode returns null for invalid input, even though null is also a perfectly valid object for JSON to decode to—this function is completely unreliable unless you also call json_last_error every time you use it.
array_search, strpos, and similar functions return 0 if they find the needle at position zero, but false if they don’t find it at all.
Let me expand on that last part a bit.
In C, functions like strpos return -1 if the item isn’t found. If you don’t check for that case and try to use that as an index, you’ll hit junk memory and your program will blow up. (Probably. It’s C. Who the fuck knows. I’m sure there are tools for this, at least.)
Lets first talk about json_encode and decode
If we see this example of json_decode
json_decode(
string $json,
?bool $associative = null,
int $depth = 512,
int $flags = 0
): mixed
json_decode takes a json encoded string and convert it to a PHp value.
If we look at the example below

<?php
$json="Not a json";
$json_decode=json_decode(json:$json);
var_dump($json_decode);

In Javascript

let json_string = "json_string";
console.log(JSON.parse(json_string));
// SyntaxError: Unexpected token 'j', "json_string" is not valid JSON

In Python

import json
json_string = "json_string"
parsed = json.loads(json_string)  # ❌ Raises error

So we see in both cases there even though its a string it doesnt return a null they both return error.
json_validate a new function perfectly works from PHP 8.3.Remember it will only work from PHP 8.3
If we look at json_validate function
json_validate(string $json, int $depth = 512, int $flags = 0): bool

<?php

$json_string = "\"string\""; // Properly quoted
$json_validate = json_validate(json: $json_string);
var_dump($json_validate); // Output: bool(true)
$decoded = json_decode($json_string);
var_dump($decoded); // Output: string(6) "string"
//Shorter syntax
$json = "\"string\"";
// Properly quoted
$data = json_validate($json) ? json_decode(json:$json, associative: true) : '';
var_dump($data);

10.array_search, strpos, and similar functions return 0 if they find the needle at position zero, but false if they don’t find it at all.
Lets see both the functions first
array_search(mixed $needle, array $haystack, bool $strict = false): int|string|false
strpos(string $haystack, string $needle, int $offset = 0): int|false
Here in both cases if needle is found at 0 it will return 0

<?php
$colors = array("red", "green", "blue", "red");
// Search for "green" (loose comparison by default)
$key1 = array_search(needle:"red", haystack:$colors);
var_dump($key1);
$string="string";
$strpos=strpos(needle:'s',haystack:$string);
var_dump($strpos);

So what is the problem.The problem is if no match is found it returns a false.
Lets say if you do comparison between both arrays and type 0==false it will return true. So just an easy option is to use === what its said instead if -1 was returned in that case it was an easy option.

Operators
1.== is useless.
It’s not transitive. "foo" == TRUE, and "foo" == 0… but, of course, TRUE != 0.*
If we see

<?php
var_dump("foo" == TRUE);//true
var_dump( "foo" == 0);//true 
var_dump(0==false);//true

If you do something like this you see the inconsistencies foo is equivalent to 0 and on other hand foo equivalent to true and 0 is equivalent to false.
Its always recommended to use === for type juggling.

2.== converts to numbers when possible (123 == "123foo"… although "123" != "123foo"), which means it converts to floats when possible. So large hex strings (like, say, password hashes) may occasionally compare true when they’re not. Even JavaScript doesn’t do this.

From Php 8.0 this syntax returns false

<?php
var_dump(123=="123foo");

For comparing hash using == or even === is not the best practice

<?php
var_dump("500000000000000000001" == "500000000000000000002");//

Prior to PHP 5.4 it would return true. For comparing hashes you should not use double equals or even triple equals just use hash_equals
For comparison using hash_equals

<?php
$input = "secret";
$expected_md5 = md5($input); // e.g., stored hash

$user_input = "secret";
$user_md5 = md5($user_input);

// Safe comparison
if (hash_equals($expected_md5, $user_md5)) {
    echo "Match!";
} else {
    echo "No match.";
}

3.=== compares values and type… except with objects, where === is only true if both operands are actually the same object! For objects, == compares both value (of every attribute) and type, which is what === does for ev*
var_dump(133 === 0133);//false

var_dump(133 !== 0133);//

This is really weird 0133 is an actual value when you do a strict comparison it is equal it is ok but do a strict not it is not.
There is no way to identify if a number is octal or not just you need to do some manual check get if first index of a number is 0 or not.

4.=== compares values and type… except with objects, where === is only true if both operands are actually the same object! For objects, == compares both value (of every attribute) and type, which is what === does for every other type

<?php
class User {
    public $name;
    public function __construct($name) {
        $this->name = $name;
    }
}

$user1 = new User("Alice");
$user2 = new User("Alice");

var_dump($user1===$user2);//false

Here you can pass reference using ampersand to make them equal or use another variable.

<?php
$user2=&$user1;

var_dump($user1===$user2);

5.Comparison isn’t much better.
It’s not even consistent: NULL < -1, and NULL == 0. Sorting is thus nondeterministic; it depends on the order in which the sort algorithm happens to compare elements.

<?php
var_dump(NULL < -1);//true

var_dump(NULL ===0);//false

There is a workaround.

<?php             
var_dump(NULL <=> -1);
$null_check=(NULL <=> -1);
var_dump(isset($null_check));//true
var_dump($null_check===true);//false

So if you use == in case of NULL===0 returns true

Another thing is that if we write var_dump(3 <= -1);//true in such a case strict comparison doesnt work in comparison operator incase of null

6.The comparison operators try to sort arrays, two different ways: first by length, then by elements. If they have the same number of elements but different sets of keys, though, they are incomparable.

So here we see length is same so if we do something like $a>$b.will return true since length are equal but keys in a are greater than that of b.if there are mixed greater and smaller keys like in first array number in one index is greater and in another

<?php 
$a = [100, 200, 300]; 
$b = [1, 30, 1];
 var_dump($a<$b);

In case of associative arrays
This is where things get a bit hard

<?php
$array1 = [
    "name" => "Alice",
    "age" => 30,
    "city" => "Dhaka"
];

$array2 = [
    "username" => "alice123",
    "email" => "alice@example.com",
    "country" => "Bangladesh"
];
var_dump($array1 < $array2); // false
var_dump($array1 > $array2); // false

Comparing associative structures (arrays, maps, dicts, objects) with different keys is inherently ambiguous, and most languages either disallow it or leave it to the developer to define what “comparison” even means.
For comparison use array_diff() or usort()
7.Objects compare as greater than anything else… except other objects, which they are neither less than nor greater than.
If we see here

<?php
$obj = new stdClass();
$num = 42;
$str = "hello";

var_dump($obj > $num);   // true
var_dump($obj > $str);   // true
var_dump($obj < $str);   // false
//But comparison between objects 
$obj1 = new stdClass();
$obj2 = new stdClass();

var_dump($obj1 > $obj2); // false
var_dump($obj1 < $obj2); // false

Internally, PHP assigns a type precedence for comparisons:
object > array > string > number > null > boolean
If you need to compare objects meaningfully:
Implement a custom method like compareTo() or getSortKey()
Use usort() with explicit logic

8.For a more type-safe ==, we have ===. For a more type-safe <, we have… nothing. "123" < "0124", always, no matter what you do. Casting doesn’t help, either

<?php
var_dump(123<=0124); //returns false.
var_dump((int)"123" <= (int)"0124");

If they both are in string
// true

123 is a decimal number but 0124 is octalnumber

But you can convert octal to a decimal using octdec

<?php
$octal_string = "0124";
$decimal = octdec($octal_string);
echo $decimal; // Output: 84

9.Despite the craziness above, and the explicit rejection of Perl’s pairs of string and numeric operators, PHP does not overload +. + is always addition, and . is always concatenation.
The syntax of Perl

my $x = "5";
my $y = "10";

print $x + $y;  # 15
print $x . $y;  # "510"

Equivalent php syntax

<?php
$x="5";
$y="10";
echo $x + $y;//15           /
echo $x . $y; // 510

Wee see here both Perl and Php have identical syntax and PHP here type corcerses string to an integer.

10.The [] indexing operator can also be spelled {}.

<?php 
$arr=[10,20,30];
echo $arr{0};

This now triggers a fatal error as of PHP 8.0
Fatal error: Array and string offset access syntax with curly braces is no longer supported in /home/user/scripts/code.php on line 8

11.[] can be used on any variable, not just strings and arrays. It returns null and issues no warning.

<?php 
$var = null;
echo $var[0]; // null, no warning

As of PHP 8.0 it issues a Warning
Warning: Trying to access array offset on null

12.[] cannot slice; it only retrieves individual elements.

Yes [] is only use for accessing indexes not slicing
13.foo()[0] is a syntax error. (Fixed in PHP 5.4.)
In versions prior to PHP 5.4 this used to trigger Parse error: syntax error, unexpected '[' it was fixed in 5.4

13.Unlike (literally!) every other language with a similar operator, ?: is left associative. So this:

<?php
$arg = 'T';
$vehicle = ( ( $arg == 'B' ) ? 'bus' :
             ( $arg == 'A' ) ? 'airplane' :
             ( $arg == 'T' ) ? 'train' :
             ( $arg == 'C' ) ? 'car' :
             ( $arg == 'H' ) ? 'horse' :
             'feet' );
echo $vehicle;

prints horse.
As of PHP 8.0 this would trigger a syntax error

Fatal error: Unparenthesized a ? b : c ? d : e is not supported. Use either (a ? b : c) ? d : e or a ? b : (c ? d : e)

A much better syntax with a cleaner syntax is of follows

<?php
$arg = 'T';
$vehicle = match ($arg) {
    'B' => 'bus',
    'A' => 'airplane',
    'T' => 'train',
    'C' => 'car',
    'H' => 'horse',
    default => 'feet',
};

print $vehicle;

Variables
1.There is no way to declare a variable. Variables that don’t exist are created with a null value when first used.

Lets break this statement
There is no way to define a variable. This statement is not correct what he tried to say is
is when you don't assign any value to variable it still gives a null this is also true incase if we don't declare a variable and try to dump it.

PHP automatically creates undefined variables with null values when first referenced, without requiring explicit declaration.

Print a variable without any name

<?php echo $my_name;

Warning: Undefined variable $my_name.A warning is triggered. But the problem lies when you try to do something like this

<?php  
$my_marks=10;

$my_marks+$bonus;

var_dump($my_marks);s

Ideally it should stop execution of script. So though quirky but issue is pretty much mangabale ideally it should throw a fatal error.you always need to use isset in PHP.

<?php 
if(isset($my_marks) && isset($bonus)){
  echo $my_marks+$bonus;
}else{
    echo "The addition value is not found";
}

A shorter and cleaner code

<?php 
echo isset($my_marks, $bonus) ? $my_marks + $bonus : "The addition value is not found";
//If you do $my_name; just like this and echo $my_name;
$my_name;
echo $my_name;

So it triggers an error undefined variable
Now in some case the problem might be even bigger

Lets take an example of Javascript

console.log(my_name);

If you do something like this it throws an error ReferenceError: my_name is not defined

let my_marks=10;
console.log(my_marks+bonus);
//ReferenceError: bonus is not defined

In javascript it says that bonus is not defined
I am just going to use a bit of code snippet from Go

package main
import "fmt"

func main() {
     fmt.Println(marks);
}
If you even do 
func main() {
     marks :=10;
}

It will say declared and not used: marks

So we see PHPs way of dealing with undefined variable is quirky but somewhat still manageable considering the fact it triggers notices.You should use isset for checking if variable is set,null or not when ever there is come conditional check or computation using variables.

2.Global variables need a global declaration before they can be used. This is a natural consequence of the above, so it would be perfectly reasonable, except that globals can’t even be read without an explicit declaration—PHP will quietly create a local with the same name, instead. I’m not aware of another language with similar scoping issues.

<?php
$my_name = 10; // Global variable

function profile(){
    var_dump($my_name);
}
profile();

It throws an error saying Warning: Undefined variable $my_name

Instead you have to use global variable

<?php
$my_name = 10; // Global variable

function profile(){
    global $my_name;
    var_dump($my_name);
}
profile();//int(10)

So explicitly global variable is not good
Say you later want to refactor your function into a method or move it into another file:
With globals, you'd need to restructure dependencies
With proper arguments or dependency injection, refactoring is straightforward.
There is a common workaround using & variable

This approach has a problem too. In PHP if you want you can reassign a value or redeclare both work the same way.Lets say by mistake you type $my_name=”Tanzim Ib”; before invoking a function.It also looks like a hack.So whats the solution.Assuming when you want to have a constant value.
A simple and common workaround for this is

<?php
$my_name ="Tanzim"; // Global variable

function profile(&$my_name){

    var_dump($my_name);
}


profile($my_name);

Pass-by-reference is mutable by design; a stray assignment ($my_name = "Tanzim Ib";) could unintentionally propagate.
You can use

<?php
const my_name="Tanzim";
function profile(){

    echo my_name;
}
profile();

Note:This would trigger an error in PHp 5.2

3.There are no references. What PHP calls references are really aliases; there’s nothing that’s a step back, like Perl’s references, and there’s no pass-by-object identity like in Python.

Yes php doesnt pass by references like Javascript,Python. To invoke a behavior like Python or Javascript you need to pass value by &.Till now its a problem.
The references in PHP can be termed as symbol aliases.
If we just take example of javascript

const arr=[10,20,30];
const arr2=arr;

arr2[3]=55;
console.log(arr);//[ 10, 20, 30, 55 ]
console.log(arr2);//[ 10, 20, 30, 55 ]

Here we see when you bring a change of any of the array the value of other array changes.
In Php

<?php
$arr=[10,20,30];
$arr2=$arr;

$arr2[3]=55;
var_dump($arr);
var_dump($arr2);

We see we dont get the same behaviour we get in other languages
To get it you need to use ampersand

<?php
$arr=[10,20,30];
$arr2=&$arr;

$arr2[3]=55;
var_dump($arr);
var_dump($arr2);

So yes but if you just know this it should not be a problem.

4.Referenceness” infects a variable unlike anything else in the language. PHP is dynamically-typed, so variables generally have no type… except references, which adorn function definitions, variable syntax, and assignment. Once a variable is made a reference (which can happen anywhere), it’s stuck as a reference. There’s no obvious way to detect this and un-referencing requires nuking the variable entirely

Yes but i dont think you will ever need referencing a primitive. Still if you reference a variable;e you should unset it

<?php
$a=5;
$b=&$a;

var_dump($a);
$b=15;
var_dump($a);

Here we have made $b a reference There is no way you can find that $b is a reference of $a.
The only thing you can do is unset the variable.

<?php
$a=5;
$b=&$a;
unset($b);//You can't detach $b from $a without destroying $b.

5.A reference can be taken to a key that doesn’t exist within an undefined variable (which becomes an array). Using a non-existent array normally issues a notice, but this does not.

<?php
$a;
$b =& $a['key'];
var_dump($a);
Result:array(1) {
  ["key"]=>
  &NULL
}

It should at least trigger a notice.
Usually when we try to access offset of an array

<?php
$a;
echo $a['key'];:
// Warning: Undefined variable $a
// Warning: Trying to access array offset on value of type null

Bottomline is dont use & in php
PHP silently:
Cast $a into an array.
Created the key 'key'.
Assigned it a reference to NULL

6.Constants are defined by a function call taking a string; before that, they don’t exist. (This may actually be a copy of Perl’s use constant behavior.)
The user defined contents are created using the define function so which consists of a string and value.
There is no existence of it until call executes at runtime.
echo my_name; When you try to do something like this it triggers a fatal error.

<?php
define('my_name','Tanzim');
//Workaround
if (defined('my_name')) {
    $value = constant('my_name');
} else {
    $value = 'default';
}

Short syntax

<?php
$value = defined('my_name') ? constant('my_name') : 'default';
An easier option
const my_name='Tanzim';

define() → runtime constant creation (name must be a string, can be dynamic)

const → compile-time constant creation (faster, but name must be known at parse time)

7.Variable names are case-sensitive. Function and class names are not. This includes method names, which makes camelCase a strange choice for naming.

<?php
function myName(){
    var_dump("Function");
}
myname();

Here we see that function names are not cases sensitive no you need to be very careful.Ideally it should trigger atleast a notice
But variables are case sensitive in php

<?php
$my_name="Tanzim";

echo $my_Name;

If we do something like this it will throw fatal error

4-Constructs

1.array() and a few dozen similar constructs are not functions. array on its own means nothing, $func = "array"; $func(); doesn’t work.

Yes there are many language constructs in PHP which look like a function isset(),count(),array() but all of these are actually language constructs.
So something like this

<?php
$func = "array";
$result=$func(10,20);
var_dump($result);

You get an error Fatal error: Uncaught Error: Call to undefined function array()
If all language constructs behaved the same way still it was ok but if you do something like this

<?php
$count = "count";
$result=$count([10,20,30]);

var_dump($result);//3 you get an output
This inconsistency is due to PHP’s internal distinction between constructs and functions, even though both can appear with parentheses.
This gives an output of 3 so we see these things are somewhat confusing.
To overcome such inconsistencies there is a workaround

<?php
if(function_exists($count)){
$result=$count([10,20,30]);
echo $result;
}else{
    echo "function does not exist";
}

If we use function_exists it helps us to overcome such confusions.
$array=”array”

<?php
if(function_exists($array)){
$result=$array([10,20,30]);
echo $result;
}else{
    echo "function does not exist";
}

Here we get proper output if the function does not exist.
At times a function may exist but its not callable.In such instances we will check whether there is existence of a function as well as the function is callable or not.

<?php
$array="array";
if(function_exists($array) && is_callable($array)){
$result=$array([10,20,30]);
echo $result;
}else{
    echo "function does not exist";
}

In many cases in production you may disable some functions like eval().exec() from php.ini
Only checking function exists might trigger fatal errors if the function is not callab;e.

2.Array unpacking can be done with the list($a, $b) = ... operation. list() is function-like syntax just like array. I don’t know why this wasn’t given real dedicated syntax, or why the name is so obviously confusing.

The list syntax looks like this

<?php
$list=[10,20,30];
list($a,$b,$c)=$list;
echo $a;
A much cleaner approach is available now since Php 7.1
$list = [10, 20, 30];


[$a, $b, $c] = $list;

echo $a; //Outputs 10

With checks 
[$a, $b, $c] = isset($list) ? $list : [null, null, null];

echo $a; // Outputs: 10
With associative array

$user_profile = [
    'name' => 'John',
    'age' => 28,
    'profile' => 'Software developer with a passion for language design and programming paradigms.'
];

list('name'=>$name,'age'=>$age,'profile'=>$profile)=$user_profile;

echo $name;

Now as of Php 7.1.33 you can now destructure associative array without lists

You can just use

<?php
['name'=>$name,'age'=>$age,'profile'=>$profile]=$user_profile;
echo $name;

A much better approach including handling potential issues with checks

<?php
$user_profile = [
    'name' => 'John',
    'age' => 28,
    'profile' => 'Software developer with a passion for language design and programming paradigms.'
];



if(isset($user_profile) && !empty($user_profile) && is_array){
    ['name'=>$name,'age'=>$age,'profile'=>$profile]=$user_profile;
}else{
    echo "User profile variable doesnt exist or is empty";
}


// echo isset($name) ? $name : '';

echo $name ?? '';

A much better approach

<?php
$user_profile = [
    'name' => 'John',
    'age' => 28,
    'profile' => 'Software developer with a passion for language design and programming paradigms.'
];
$keys=array_keys($user_profile);
$name_key=trim('name');
$age_key=trim('age');
$profile_key=trim('profile');
$check_name_key=in_array(needle:$name_key,haystack:$keys);
$check_age_key=in_array(needle:$age_key,haystack:$keys);
$check_profile_key=in_array(needle:$profile_key,haystack:$keys);
if(isset($user_profile) && !empty($user_profile)){
if($check_name_key && $check_age_key && $check_profile_key){

    [$name_key=>$name,$age_key=>$age,$profile_key=>$profile]=$user_profile;
}   
}

echo $name . PHP_EOL;
echo $age . PHP_EOL;
echo $profile . PHP_EOL;

Remember named arguments would only work from PHP 8.0
?>

3.(int) is obviously designed to look like C, but it’s a single token; there’s nothing called int in the language. Try it: not only does var_dump(int) not work, it throws a parse error because the argument looks like the cast operator.

Ok int is actually a cast operator in PHP. Since PHP is not a statically typed language so you cant declare a variable with types.
In C int is a type specifier It can be used to declare variables,parameters and return types

int x = 42;      // variable declaration
int add(int a, int b) { // function declaration
    return a + b;
}

As of PHP 8.0 you can pass argument types and also return type in functions

<?php
declare(strict_types=1);

function sum(int $a, int $b): int {
    return $a + $b;
}

echo sum(a: 10, b: 20);
?>

So here you can pass int as argument.
PHP has no runtime type objects for primitives. You can’t store “the int type” in a variable. Types are a compile-time parser thing in PHP, not a runtime object.

But you can typecast a string using int.

var_dump((int)("44"));
It will typecast it to 44.
Remember one thing if number has fraction and in a string if you typecast it to int it will be ceiled.

<?php 
var_dump((int)("44.50"));//Output 44

A better approach to typecasting to intval or float

Using intval() and floatval()

<?php
var_dump(intval("44.50"));
var_dump(floatval("44.50"));

4.(integer) is a synonym for (int). There’s also (bool)/(boolean) and (float)/(double)/(real).

Yes in PHP its kind of redundant lets say you use

<?php
$num="44";
$num_to_int=(int)($num);

var_dump($num_to_int);
$num_to_integer=(integer)($num);

var_dump($num_to_integer);

$num="44";
$num_to_float=(float)($num);

var_dump($num_to_float);
$num_to_double=(double)($num_to_double);
var_dump($num_to_double);

<?php
$is_logged_in="hello";
 $convert_to_boolean=(boolean)($is_logged_in);
var_dump($convert_to_boolean);
$is_logged_in="hello";
 $convert_to_bool=(bool)($is_logged_in);
var_dump($convert_to_bool);

So we see all of these are redundant and can create confusion but there should we a convention followed incase you work in a team use either int or integer,is case of float either float or double there should be uniformity.

Choose one form per type and enforce it via tools like PHP_CodeSniffer or a style guide (e.g., PSR-12). For example:
Always use (int) over (integer)—it's shorter and more common in docs.
Prefer (bool) for booleans (modern and concise).
Stick to (float) for floats—avoid (real) entirely, as it's outdated and could be removed in future major versions (though no plans as of PHP 9.0 previews).
5.There’s an (array) operator for casting to array and an (object) for casting to object. That sounds nuts, but there’s almost a use: you can use (array) to have a function argument that’s either a single item or a list, and treat it identically. Except you can’t do that reliably, because if someone passes a single object, casting it to an array will actually produce an array containing that object’s attributes. (Casting to object performs the reverse operation.)

Lets take first part of the statement
There’s an (array) operator for casting to array and an (object) for casting to object. That sounds nuts, but there’s almost a use: you can use (array) to have a function argument that’s either a single item or a list

Talking about array operator.

Ok so what it said is

<?php
function arr($arr){
    foreach(array($arr) as $a){
        var_dump($a);
    }
}
arr('Tanzim');//Tanzim

Instead of array if i pass it as a string and typecast it to an array it will produce similar results.Problem is that since its iterating it should not be allowed to pass a string even though intentional typecasting is done.So what should be done?
Workaround
From Php 7.0 onwards you can set parameter types

<?php
declare(strict_types=1);
function arr(array $arr):void{
    foreach(array($arr) as $a){
        var_dump($a);
    }
}
arr('Tanzim');//Tanzim
?>

So here it will throw a fatal error saying Fatal error: Uncaught TypeError: arr(): Argument #1 ($arr) must be of type array, string given.
With strict_types=1, PHP throws a TypeError if you pass anything but an array (e.g., a string like 'Tanzim'). This prevents the "intentional but risky" casting .
After Php 8.0 and onwards you can use union operator

<?php
declare(strict_types=1);
function arr(array|string $arr):void{
     $items = is_string($arr) ? [$arr]: $items;


    foreach($items as $a){
        var_dump($a);
    }
}
arr('Tanzim');//Tanzim

So this issue has proper workarounds as of now.

Lets now talk about casting array to object and object to array

<?php
declare(strict_types=1);
class User {
    public $name = "Alice";
    protected $age = 30;
    private $secret = "x";
}

$user = new User();
$items = (array) $user;

If we var_dump items and there are all sorts of properties public,private and protected so it doesnt give keys accurately.
If we var_dump($user) the output we get is
array(3) {
// ["name"]=>
// string(5) "Alice"
// ["�*�age"]=>
// int(30)
// ["�User�secret"]=>
// string(1) "x"
// }

//typecasting it to an array
//we see that the keys which are not public produce outputs that are not same as the casted object
So there is a workaround you can write a trait if you need such a regular behaviour.

<?php
$reflection=new ReflectionClass(User::class);
$properties=$reflection->getProperties();
$encoded_json_key_values=json_encode($properties);
 $decoded_json_key_values=json_decode($encoded_json_key_values,true);
var_dump("Key of classes");
$key_of_classes=array_column($decoded_json_key_values,'name');
var_dump($key_of_classes);
$value_of_classes=array_values($items);
$object_to_array=array_combine($key_of_classes,$value_of_classes);
var_dump($object_to_array);

6.include() and friends are basically C’s #include: they dump another source file into yours. There is no module system, even for PHP code.
The include require require_once are still part of the PHP and they will remain.
Lets say if you want to have a file like in index.php you want to import your Database.php file from index.php

In index.php we would most like likely write index.php
Ideally a path like this

<?php
include '.../../src/config/Database.php';

So for every file you would have to do some thing but as of 2014 PSr4 came out through you can do composer autoloading.

PSR-4 brought a convention-based autoloading system that mimics real module systems:
I am not discussing how to configure psr-4 but now you can just
Lets say in folder directory
src/Config/Database.php:

<?php
namespace App\Config;

class Database {
  // connection logic
}

In index.php

<?php
require 'vendor/autoload.php';

use App\Config\Database;

$db = new Database();

So simply it is a shift from file-based scripting to module based scripting

7.There’s no such thing as a nested or locally-scoped function or class. They’re only global. Including a file dumps its variables into the current function’s scope (and gives the file access to your variables), but dumps functions and classes into global scope.

If we look at first part of the statement
There’s no such thing as a nested or locally-scoped function or class.

<?php
function outer() {
    function helper() {
        return "I'm global!";
    }
}

outer();        // This defines `helper()` globally
echo helper();  // ✅ Works! `helper()` is now available everywhere
outer();        // ❌ FATAL ERROR: Cannot redeclare helper()
?>

Here if you write a function inside a function you can invoke that function anywhere.Here you can easily invoke helper. But when try to invoke outer() function again you can see that it gives an error that you cant redeclare it.
When outer() is called for the first time, PHP registers helper() globally.
When outer() is called again, PHP tries to redeclare helper() — and since functions can't be redefined, you get a fatal error.

A work around for this you can use closures

<?php
function outer() {
    $helper = function() {
        return "I'm scoped!";
    };
    return $helper;
}

$fn = outer();
echo $fn(); // ✅ Works, scoped and reusable

8.Appending to an array is done with $foo[] = $bar.
Yes its if you have an array

<?php
$arr=[10,20,30,40];
$arr[]=50;
var_dump($arr);

So the output is 10 20 30 40 50
Instead we should use array_push

<?php
array_push($arr,50);
var_dump($arr);

Or we can also use

<?php
$arr=[...$arr,50];

$array=[...$arr,50];

var_dump($array);

In Python and Js it would throw an error

arr=[10,20,30,40]
arr[]=55
print(arr);

Though using $arr[] might be faster but using array_push or destructuring might be easier to understand.

9.echo is a statement-y kind of thing, not a function.

In PHP echo is a language construct not a built in function.
echo $strlen("Hello"); You still get proper results. So you need to be careful which is a language construct and which is a built in function in PHP echo is a language construct not a function

<?php
echo "Hello World!";  // No parentheses needed
echo("Hello World!"); // Parentheses work but don't make it a function
?>

Both of them work. Though echo is not a function.

<?php
$echo="echo";

$echo("Hello");

It will throw an error.
But if you do something like this

<?php
$strlen="strlen";
echo  $strlen(‘abcd’);
var_dump(function_exists('echo'));//false
var_dump(is_callable(‘echo’));//false

10.empty($var) is so extremely not-a-function that anything but a variable, e.g. empty($var || $var2), is a parse error. Why on Earth does the parser need to know about empty? (Fixed in 5.5.)

<?php
$result = empty(isset($var) || isset($var2));
 echo $result;

In previous versions of PHP it would throw Parse error: syntax error, unexpected 'isset'(T_ISSET)

11.There’s redundant syntax for blocks: if (...): ... endif;, etc.
Yes if you use if else with curly braces you can see
// Standard syntax

<?php
if ($condition) {
echo "True";
} else {
echo "False";
}
// Alternative syntax
if ($condition):
echo "True";
else:
echo "False";
endif;

Without end if there is no way to find out where the if condition ends since you cant use curly brace.

Arrays

1.=> isn’t an operator. It’s a special construct that only exists inside array(...) and the foreach construct.=> is lot a standalone operator in PHP

Yes its absolutely true => is a language construct its only used inside a array or with foreach.All key value pairs inside arrays are stored with this and this is also used to when looping using foreach
So => is only for array and foreach.

2.Negative indexing doesn’t work, since -1 is just as valid a key as 0.
Php doesnt support negative indexing like Python even in Javascript negative indexing is not supported
In Python you can simply do

arr = ['a', 'b', 'c']
print(arr[-1])  # Output: 'c' — last element

With array_slice you can achieve the same behaviour.Lets say you want to access last element of an array

<?php
$nums=[10,20,30,40,50];

$sliced_array=array_slice($nums,-1);

var_dump($sliced_array);

Now if you want to get access to last 2 elements of an array

<?php
$nums=[10,20,30,40,50];

$sliced_array=array_slice($nums,-2);

var_dump($sliced_array);

3.Despite that this is the language’s only data structure, there is no shortcut syntax for it; array(...) is shortcut syntax. (PHP 5.4 is bringing “literals”, [...].)

Array is not the only data structure that exists in PHP.PHP offers other data structure through PHPs standard PHP Library which was introduced in PHP 5.3. These include specialized classes like SplStack, SplQueue, SplHeap, SplFixedArray (for fixed-size arrays), and SplObjectStorage for object sets it also has a and Ds (Data Structures) extension:

If we come to this part of the statement we see.
there is no shortcut syntax for it; array(...) is shortcut syntax
You can now use … spread operator

<?php
$num1=[10,12];
$num2=[40,50];
$arr=[...$num1,...$num2];
var_dump($arr);

4.Similarly baffling, arrays stringify to Array with an E_NOTICE. is it still relevant in PHP

<?php
$nums=[10,20,30];

Yes if you do echo $nums; It will throws a notice or warning,warning mostly in versions after PHP 8.0
Warning: Array to string conversion in PHP

It is because echo is a language construct and it can only print scalar value types string,bool,float etc
You can do something like this

<?php
$nums = [10, 20, 30];
$nums = [10, 20, 30];
echo is_array($nums) ? print_r($nums, true) : 'It is not an array';

Other than debugging you wont need to print an array so use of var_dump or just using print_r pretty much does the job.

5.The => construct is based on Perl, which allows foo => 1 without quoting. (That is, in fact, why it exists in Perl; otherwise it’s just a comma.) In PHP, you can’t do this without getting a warning; it’s the only language in its niche that has no vetted way to create a hash without quoting string keys.

In Perl => is used as a syntactic sugar for comma, it auto-quotes barewords on the left-hand side. So foo => 1 is equivalent to 'foo', 1. This makes hash readable.**
An example using Perl

use strict;
use warnings;

my %hash = (foo => 1, bar => 2);

print %hash;

But in PHP

<?php
$arr=[
    foo=>1
    ];

    var_dump($arr);

If you do something in PHP you will get a fatal error in latest php versions
Fatal error: Uncaught Error: Undefined constant "foo"

In Javascript you store value in key value pairs inside an object you can do this the key does not need to be a string

let obj={
name:'myname'
}

console.log(obj);

In Python like PHP it would throw an error

data = {
    name: 'myname'
}

print(data);

It will throw an error
ERROR!
Traceback (most recent call last):
File "", line 4, in
NameError: name 'name' is not defined

6.Array functions often have confusing or inconsistent behavior because they have to operate on lists, hashes, or maybe a combination of the two. Consider array_diff, which “computers the difference of arrays”.
$first = array("foo" => 123, "bar" => 456);
$second = array("foo" => 456, "bar" => 123);
echo var_dump(array_diff($first, $second));
What will this code do? If array_diff treats its arguments as hashes, then obviously these are different; the same keys have different values. If it treats them as lists, then they’re still different; the values are in the wrong order.
In fact array_diff considers these equal, because it treats them like sets: it compares only values, and ignores order.

Lets make it simple and see what array_diff does

<?php
$first  = array("foo" => 123, "bar" => 456);
$second = array("foo" => 456, "bar" => 123);

echo var_dump(array_diff($first, $second));
//output
array(0) {
}
If you want comparison between keys as of Php 5.4 there is a function called array_diff_key

<?php
$first = [
    "foo" => 123,
    "bar" => 456,
    "baz" => 100,
    "baz2" => 400
];

$second = [
    "foo" => 456,
    "bar" => 123
];

$result = array_diff_key($first, $second);
var_dump($result);

It simple gives the difference between 2 keys

7.In a similar vein, array_rand has the strange behavior of selecting random keys, which is not that helpful for the most common case of needing to pick from a list of choices.
array_rand gives us value of keys if we see there

<?php
$fruits = [
    "apple" => "red",
    "banana" => "yellow",
    "grape" => "purple",
    "orange" => "orange"
];

$randomKey = array_rand($fruits);
echo "Random key: $randomKey\n";
//To gain actual value you have to do this
echo "Value: " . $fruits[$randomKey] . "\n";

If you take an array which has elements of index array as well as associative arrays

<?php
$fruits = [
    "color" => "red",4,5
];

$randomKey = array_rand($fruits);
var_dump($randomKey);

Each time you run the code it will only print the keys.
If you want to print the value

<?php
$values=$fruits[$randomKey];
var_dump($values);

8.Despite how heavily PHP code relies on preserving key order:
array("foo", "bar") != array("bar", "foo")
array("foo" => 1, "bar" => 2) == array("bar" => 2, "foo" => 1)
I leave it to the reader to figure out what happens if the arrays are mixed. (I don’t know.)

The answer is simple just use === operator instead of ==

<?php
var_dump(["foo" => 1, "bar" => 2] === ["random" => 2, "foo" => 1]); // false
 var_dump(["foo", "bar"] === ["foo", "bar"])// true

While using === you can figure out
The good thing is var_dump(["foo" => 1, "bar" => 2] === ["foo" => 1, "bar" => 2]); here if you see now if same keys have different values than also it will be false

9.array_fill cannot create zero-length arrays; instead it will issue a warning and return false.
The purpose of array_fill is to fill an array with values

<?php
array_fill(int $start_index, int $count, mixed $value): array

$filled_array = array_fill(0, 0, ['key'=>'value']);
print_r($filled_array);

If we did this in versions prior to 5.6 we would get an error
In 5.4 we would get error
Warning: array_fill(): Number of elements must be positive
But as of PHP 5.6 it returns an empty array
Array
(
)
So this issue is solved now.

10.All of the (many…) sort functions operate in-place and return nothing. There is no way to create a new sorted copy; you have to copy the array yourself, then sort it, then use the array.
Ok so all sort function in PHP mutates the original array

If we simply look at the original sort function we
It clearly goes to the pointer
sort(array &$array, int $flags = SORT_REGULAR): true
so if we do

<?php
$nums=[10,20,30,40,50];
sort($nums);
var_dump($nums);

This thing mutates the original array
So to avoid this you can create a copy

<?php
$nums=[10,20,30,40,50];
$sortedNums=$nums;
sort($sortedNums);
var_dump($sortedNums);

11.But array_reverse returns a new array.
Yes if you look at this
array_reverse(array $array, bool $preserve_keys = false): array

If you look at this you see there is no reference before $array so it returns a new array.

12.A list of ordered things and some mapping of keys to values sounds kind of like a great way to handle function arguments, but no.
If we look athe the function below

<?php
function greet($name, $age) {
    echo "Hello $name, you're $age\n";
}

$args = ['Alice', 25];
greet(...$args); // ✅ Works! Output: Hello Alice, you're 25

You can even use it with associative arrays just ensure the names of keys are same as arguments passed

<?php
$args = ['name' => 'Alice', 'age' => 25];
greet(...$args); // ✅ Works! Output: Hello Alice, you're 25
function greet($name, $age) {
    echo "Hello $name, you're $age\n";
}

The code above works as of PHP 8.0 it would trigger a fatal error previously
Yes, function arguments can now work like lists and like maps, depending on how you call them.

Functions
If we look at the function below

<?php
function &getArray()
{
     static $arr = [1, 2, 3];
      return $arr;
}

$arr=&getArray();

array_push($arr,10);

print_r($arr);
var_dump(getArray());

So here its a reference returning function though using & is not at all recommended what happens here is the function itself is a referencing function and when you assign a reference things even get more complicated.
The static keyword ensures that array persists to multiple calls inside get array while maintaining its state
$arr becomes an alias (reference) to the static array inside the function. Any changes to $arr will directly affect the static array.

So arr will have all access to the states or variables inside the function and using functions like array_push,splice you can mutate the array inside function.

You should not use & Instead

<?php
function getArray() {
    $arr = [1, 2, 3];
    return $arr;  // Returns a copy
}

$arr = getArray();  // $arr is now a separate copy
array_push($arr, 10);

print_r($arr);      // Shows [1, 2, 3, 10]
var_dump(getArray());

// Still shows original [1, 2, 3] — no side effects!

2.Function arguments can have “type hints”, which are basically just static typing. But you can’t require that an argument be an int or string or object or other “core” type, even though every builtin function uses this kind of typing, probably because int is not a thing in PHP. (See above about (int).) You also can’t use the special pseudo-type decorations used heavily by builtin functions: mixed, number, or callback. (callable is allowed as of PHP 5.4.)
PHP types have drastically changed since version 7.0
In version 5.4 or so PHP allowed argument types for only non scalar types like arrays,objects etc

<?php
function sum(int $a,int $b){
    return $a+$b;
}
 echo sum(10,10);
?>

This code would throw an error in PHP 5.4 saying that
Catchable fatal error: Argument 1 passed to sum() must be an instance of int, integer given
From PHP 7.0 you can type hint scalar types like int,string,bool,

Its a different thing though whether you should use mixed or not.
There is no number type in PHP so you have to use either float or int.

3.You may notice that the “type hint” given doesn’t actually have to exist; there is no string class in this program. If you try to use ReflectionParameter::getClass() to examine the type hint dynamically, then it will balk that the class doesn’t exist, making it impossible to actually retrieve the class name.

ReflectionParameter::getClass() this method is deprecated as of PHP 8.0 so

There were issues with PHPs types in PHP 5.6

<?php
class User{

}

function processItem($item) {
    // Optional: Manual check if we expect a specific class
    if (is_object($item) && !($item instanceof NonExistentClass)) {
        die("Error: Item must be a NonExistentClass object!");
    }
    // Do something
    return "Processing item";
}

echo processItem(new User());

If you see this code you see as previously discussed there was no type hint for scalar types so lets say if you dont did not want object as parameter you needed to do checks inside but as of PHP 7 you can type hint parameters. So if you needed string or scalar it was a lot of hassle previously.

4.Function doesnt have return type.

As of PHP 7 you can return types in a function.

<?php
function add(int $a,int $b):int{

    return $a+$b;

}

echo add(20,30);

5.Passing the current function’s arguments to another function (dispatch, not uncommon) is done by call_user_func_array('other_function', func_get_args()). But func_get_args throws a fatal error at runtime, complaining that it can’t be a function parameter. How and why is this even a type of error?
This would trigger error in Php 5.2 or so.

<?php
function dispatcher() {
    // This would fail with a fatal error in Php 5.2
    call_user_func_array('receiver', func_get_args());
}

function receiver($a, $b) {
    echo "Received: $a and $b";
}

dispatcher('hello', 'world');  // Fatal error here

In PHP 5.2 it would say
Fatal error: func_get_args(): Can't be used as a function parameter
But from PHp 5.3 it has been fixed.

6.Closures require explicitly naming every variable to be closed-over. Why can’t the interpreter figure this out? Kind of hamstrings the whole feature. (Okay, it’s because using a variable ever, at all, creates it unless explicitly told otherwise.

This thing is still relevant now and i particularly dont like scoping in PHP.Lets say for an anonymous function you need to use variable inside scope of a function you always need use keyword

<?php
$userId=5;

$posts=function()use($userId){
     return $userId;
};

var_dump($posts());
?>

7.Because closed-over variables are effectively automatically-passed arguments and there are no nested scopes, a closure can’t refer to private methods, even if it’s defined inside a class. (Possibly fixed in 5.4? Unclear.)

This issue has been fixed in PHP 5.4

<?php
class Foo {
    private function secret() {
        return "secret value";
    }

      public function getClosure() {
        return function() {

            return $this->secret();
        };
    }
}

$foo = new Foo();
var_dump($foo->getClosure());

The code snippet would throw an error in PHP 5.2
Parse error: syntax error, unexpected T_FUNCTION in

As of PHP 5.6 or so you would get

<?php 
object(Closure)#2 (1) {
  ["this"]=>
  object(Foo)#1 (0) {
  }
}

PHP ≤ 5.2 – no anonymous functions → parse error.
PHP 5.3 – anonymous functions exist, but closures created inside a class aren’t bound; private access fails.
PHP 5.6 – automatic binding was added, fixing the issue; the closure above works unchanged in every current PHP release.

So as of Php 5.6 you get the object when you dump.

8.No named arguments to functions. Actually explicitly rejected by the devs because it “makes for messier code.
There are named arguments as of PHP 8.0 and they can be used for both built in functions and user defined functions
Named arguments provide you with the option of naming the arguments such that you dont have to remember the positions.
With built in functions

<?php
$array=[10,20,30,40];
The example below you can see
if(in_array(needle:20,haystack:$array)){
    echo "It is there";
}else{
    echo "Is it not there";
}

We can clearly now understand the needle which value is being searched and haystack and from where the value is being searched.
We know PHP has inconsistencies in assigning some of the built in functions like in some functions you need to provide needle at first and in some functions haystack as first. So lets look at example to be more clear

If you look at the functions below
strpos($haystack, $needle); // haystack first
array_search($needle, $haystack); // needle first
In these two built in functions you see in one function you need to put haystack first and in other function you need to put needle first. Ideally if you want to put needle first just use named arguments.

For a user defined function

<?php
function userProfile($name,$designation){
    return "His name is $name and designation is $designation";
}
echo userProfile(name:"Tanzim",profession:"Software Developer");

You see it has lot of clarity

9.Function arguments with defaults can appear before function arguments without, even though the documentation points out that this is both weird and useless. (So why allow it?)
Prior to PHP 8.0

<?php
function example($a = 'default', $b = null) {
    echo "a: $a, b: $b\n";
}

example(30); // 30

You already have a default value but when you assigned 30 it passed value to first argument the output is
a: 30, b:
So a is 30 and there is nothing printed after b since its null what if you want to assign a value to b only you have to do something like this
example('default',30);
But with named arguments it is no more is the case

<?php
function example($a = 'default', $b = null) {
    echo "a: $a, b: $b\n";
}

 example(30);

Now what you can do is

<?php
function example($a = 'default', $b = null) {
    echo "a: $a, b: $b\n";
}

 example(b:30);

It will assign 30 to b
Output a:default b:30;

Also if you only want to assign value to a
example(a:30);

<?php
function example($a = 'default', $b = null) {
   echo "a:$a,b:$b";
}

example(a:30); // a: 30, b:

10.Extra arguments to a function are ignored (except with builtin functions, which raise an error). Missing arguments are assumed null.

<?php
function userFunc($a) {
    echo "Arg: $a";
}
userFunc(1, 2, 3);  // Outputs: Arg: 1 (2 and 3 ignored, no error)

This is still pretty much true and what you can just do is

Ok there is a way to check the total number of arguments and total arguments passed

<?php
function userFunc($a) {
    $totalPassed = func_num_args();

    // Use Reflection to get how many parameters the function DECLARES
    $reflection = new ReflectionFunction('userFunc');
    $totalExpected = $reflection->getNumberOfParameters();

    echo "Arguments passed: $totalPassed\n";     // → 3
    echo "Parameters expected: $totalExpected\n"; // → 1
}
userFunc(10, 20, 30);

If can throw in a Exception for such a function

<?php
function add($a,$b)
{
   $total_arguments_passed=func_num_args();

 $reflection = new ReflectionFunction('add');

$parameters=$reflection->getParameters();
$total_parameters=count($parameters);

 if($total_arguments_passed !== $total_parameters)
 {
    throw New Exception('Total number of arguments and parameters are not same');
 }

 return $a+$b;



}
print add(1, 2); 
?>

But lets say even with a helper function or trait it seems an overkill. The same scenario kind of exists in Javascript

function userFunc(a,b,c){
    console.log(a,b,c)
}

userFunc(10);

11.Variadic functions require faffing about with func_num_args, func_get_arg, and func_get_args. There’s no syntax for such a thing.

Prior to PHP 5.6 for use of variadic functions you needed to use

<?php
  function sum(){
      $args=func_get_args();
       echo $sum;
}

You had to use func_get_args() to capture all passed arguments:

<?php
sum(10,20,30);

But since php 5.6 you can use splat operator as parameter which means if you pass arguments it will automatically be converted to array

<?php
 function sum(...$args){
    if(isset($args) && is_array($args) && !empty($args))
       {
         $sum=array_sum($args);
       }

}

sum(10,20,30);

Output

array(3) {
  [0]=>
  int(10)
  [1]=>
  int(20)
  [2]=>
  int(30)
}

For summing all elements in array we can get 
     echo array_sum($args);
}

sum(10,20,30);

The final output is 60.

Data Manipulation-Text

1.No Unicode support. Only ASCII will work reliably, really. There’s the mbstring extension, mentioned above, but it kinda blows.
To explain this i need to go a little bit back to fundamentals.First let me explain what is ASCII and Unicode
ASCII refers to the American Standard Code for Information Exchange. We know that what Computer can only understand 0 and 1 only binary. So whatever information needs to be processed by Computer image,texts etc will be converted to binary.

Something like $my_name=”John” while processing this variable or information contained in the variable "John" can be represented using ASCII values → converted to bytes → stored in binary.

But ASCII had limitations.its limited to 128 characters and it can only accept english A-Z a-z and numbers 1-9 basic punctuation, and control characters.
So lets say if you had to use any language other than English it would be problematic. Unicode was made to overcome limitations of ASCII.
Unfortunately PHP till date as of 2025 has no native support for unicode.
So lets say if you want to count some text in arabic,bengali or any other language if you use strlen it will give you accurate results.

<?php
$string = "Hello 😊 تنظيم";
$length=strlen($string);

The problem with strlen is it only counts the bytes
So for English its ok but when you want to count length of any other languages it doesnt give accurate results.

<?php
  $char_count = mb_strlen($string, 'UTF-8');
var_dump($char_count);

So this is the way you will get the proper count
You can also use IntlChar
IntlChar is a built-in class in PHP (introduced in version 7.0)

2.Using the builtin string functions on UTF-8 text risks corrupting it.
The built in functions don't give the correct output cause they only count the bytes so that's why there needs to be use of mb_ functions while dealing with other languages since PHP has no native Unicode support like previously discussed

<?php

//Below you can see a text written in English vs any other language
$string = "আমার ";

// Byte-based operations (built-in functions)
$byte_length = strlen($string); // Counts bytes
$byte_substr = substr($string, 0, 3); // Takes first 10 bytes
$byte_split = str_split($string, 4); // Splits into 4-byte chunks

var_dump("Without mb functions");

var_dump($byte_length);
var_dump($byte_substr);
var_dump($byte_split);
// die();
// Character-based operations (mbstring)
$char_length = mb_strlen($string, 'UTF-8'); // Counts characters
$char_substr = mb_substr($string, 0, 3, 'UTF-8'); // Takes first 10 characters
$char_split = mb_str_split($string, 4, 'UTF-8'); // Splits into 4-character chunks

var_dump("With mb functions");

var_dump($char_length);
var_dump($char_substr);
var_dump($char_split);
?>

3.Similarly, there’s no concept of e.g. case comparisons outside of ASCII. Despite the proliferation of case-insensitive versions of functions, not one of them will consider é equal to É.

The core string functions in PHP dont support case insensitive comparisons for non ASCII characters.

To compare Unicode strings case-insensitively you can use

<?php
$a = "é";
$b = "É";

var_dump(mb_strtolower($a, 'UTF-8') === mb_strtolower($b, 'UTF-8')); // true

You can even use Normalizer class

<?php
use Normalizer;

function unicode_case_compare($a, $b) {
    $a = Normalizer::normalize($a, Normalizer::FORM_C);
    $b = Normalizer::normalize($b, Normalizer::FORM_C);

    return mb_strtolower($a, 'UTF-8') === mb_strtolower($b, 'UTF-8');
}

var_dump(unicode_case_compare("é", "É")); // true

4.You can’t quote keys in variable interpolation, i.e., "$foo['key']" is a syntax error. You can unquote it (which would generate a warning anywhere else!), or use ${...}/{$...}.

<?php
$foo=[
    'bar'=>'hello'
    ];
echo "The foo is $foo['bar']";.This throws a syntax error.
//Correct syntax is
echo "The foo is {$foo['bar']}";

5."${foo[0]}" is okay. "${foo[0][0]}" is a syntax error. Putting the $ on the inside is fine with both. Bad copy of similar Perl syntax (with radically different semantics)?

<?php
$foo=[
    ['hello world','world'],['hello','foo']
    ];

echo "The foo is {$foo[0][0]}";

This works perfectly from PHP 5.4
Prior to PHP 5.4 it used to trigger an error
Parse error: syntax error, unexpected '['

Data Manipulation-Numbers

1.Integers are signed and 32-bit on 32-bit platforms. Unlike all of PHP’s contemporaries, there is no automatic bigint promotion. So you can end up with surprises like negative file sizes, and your math might work differently based on CPU architecture. Your only option for larger integers is to use the GMP or BC wrapper functions. (The developers have proposed adding a new, separate, 64-bit type. This is crazy.) isa it still true explain it a bit simply
First let me explain a bit about 32 bit and 64 bit
int (Integer)
Definition: A basic data type used to represent whole numbers (positive, negative, or zero).
Range
32-bit signed int: from -2,147,483,648 to 2,147,483,647
64-bit signed int: from -9,223,372,036,854,775,808 to 9,223,372,036,854,775,807

Bigint

A data type that can represent arbitrarily large integers — limited only by available memory
It is used while working with very large numbers (e.g., cryptography, scientific calculations, factorial of large numbers).
If we look at first part of the statement
.Integers are signed and 32-bit on 32-bit platforms.
All integers in PHP are signed means they can accept a lange range of numbers from negative to positive.
So you can have a range below
-2,147,483,648 to 2,147,483,647,(i.e., -2^31 to 2^31 - 1)

If there is a number bigger than this it will convert that to float.
.
There is hardly any OS of 32 bit as of today and ideally in most cases you would not deal a number greater than this.
The range of a 64 bit integer is -2⁶³ to 2⁶³ - 1
If you need numbers larger than 9 quintillion, or exact precision, use:
BCMath (for decimal math)
GMP (for integer math)

<?php
$a = '900000000000000000000'; 
$b='1';
$c='2';
var_dump($a+$b);
$sum1= bcadd($a, $b);
$sum2=bcadd($a,$b);
$sum3=bcadd($a,$c);
$comp_one=bccomp($sum1,$sum2);

var_dump($comp_one===0);

$cmp2=bccomp($sum2,$sum3);

var_dump($cmp2===0);

If we need comparison we van use bccomp

2.PHP supports octal syntax with a leading 0, so e.g. 012 will be the number ten. However, 08 becomes the number zero. The 8 (or 9) and any following digits disappear. 01c is a syntax

<?php
echo octdec("012");//Output 10
echo octdec("008");
08 as of PHp 8.0 throws a deprecated error though it still runs and outputs 0
echo octdec("01c");

The code above throws a deprecation error.So for octal conversion you really need to be careful.

3.0x0+2 produces 4. The parser considers the 2 as both part of the hex literal and a separate decimal literal, treating this as 0x002 + 2. 0x0+0x2 displays the same problem. Strangely, 0x0 +2 is still 4, but 0x0+ 2 is correctly 2. (This is fixed in PHP 5.4. But it’s also re-broken in PHP 5.4, with the new 0b literal prefix: 0b0+1 produces

This problem no longer prevails

<?php
echo 0x0+2;
 echo 0x0 +2;
var_dump(0x002 + 2);

Now it correctly outputs

4.pi is a function. Or there’s a constant, M_PI.

<?php
echo pi(); // Outputs: 3.1415926535898
$pi="pi";

$exists_and_is_callable=function_exists($pi) && is_callable($pi);
if($exists_and_is_callable){
    echo $pi(); 
}

$m_pi = "M_PI"; // Not a function — a constant

// To get its value:

var_dump("pi from varaible function");
var_dump($pi()===$m_pi);


var_dump(pi()===M_PI);
?>

Both can be used but using M_PI is often recommended for mathematical precision and accuracy.
5.There is no exponentiation operator, only the pow function.
pow function can be used but as of php 5.6 similar behaviour can be achieved using double asterik ** operator where base will be on left

<?php
$base = 2;
$exponent = 3;
$result = $base ** $exponent; // Calculates 2 raised to the power of 3 (2 * 2 * 2)
echo $result; // Output: 8

So this is it there are more parts which might be covered in a separate blog or maybe more points can be added in this blog. I have tried my best to explain things but if you have any feedback or constructive criticisms, please feel free to leave a comment below.

Laravel-10 Laravel-11 comparison, changes

Tanzim Ibthesam — Thu, 25 Apr 2024 22:01:32 +0000

We know Laravel has gone through a lot of changes in Laravel 11. The directory has been very much streamlined as compared to previous versions. We will discuss in details.

Laravel Request LifeCyle

First lets come to request life cyle
Laravel 10 index.php file

Lets see in Laravel 11

We see the request Lifecycle is almost identical. The entry point of application is index.php Which loads all composer generated autoload files.

Then an instance of application is created in bootstrap/app.php. Which is service container
In Laravel 10

Here we know that request comes through different servers via HTTP Kernel or console kernel
Depending on type of requests.

The line above binds the Illuminate\Contracts\Http\Kernel interface to the App\Http\Kernel class.

The line above binds the Illuminate\Contracts\Console\Kernel interface to the App\Http\Console class.

In Laravel, the ExceptionHandler class is responsible for handling exceptions that occur during the execution of your application.
This line tells Laravel's service container to bind the Illuminate\Contracts\Debug\ExceptionHandler interface to the App\Exceptions\Handler class using the singleton method.
Here's what's happening:
Illuminate\Contracts\Debug\ExceptionHandler is an interface provided by Laravel that defines methods for handling exceptions.
App\Exceptions\Handler is a class within your Laravel application that implements the ExceptionHandler interface. It contains methods for handling various types of exceptions thrown by your application.
Singleton is a rule that says a class can only have one object, or instance.Laravel’s service container uses this Singleton rule.
This means that for a class like App\Exceptions\Handler, there’s only ever one object of this class during the app’s lifetime. It’s like having a single manager for handling exceptions in the app. No matter where you are in the app, you’re always working with the same manager.
In Laravel 10 bootstrap/app.php
If we see instance of application

We see it inherits the Container class and implements HttpKernelInterFace.
The handle method in the HttpKernelInterface receives an HTTP Request and processes it to generate a Response

HttpKernelInterface is a key part of the Symfony framework, defining how HTTP requests should be handled and responses generated.
Laravel 11
If we see this
bootstrap/app.php

We see here bootstrap/app.php we see its a bit different an application instance is created.
Here its contains Middleware,with routing and withExceptions method.It aso extends the container and implements HTTPKernelInterface

We see HttpKernelInterface has same handle method

Middleware

In Laravel 10 as we know all middlewares are there in app\Http\Kernel.php.

The HTTP kernel extends the Illuminate\Foundation\Http\Kernel class, which defines an array of bootstrappers.
In Laravel 10
In Kernel.php this is what it contains

If we see app\Http\Kernel.php

It inherits the HttpKernel
If we look at this directory

It contains an array of bootstrapers which contains list of tasks like error handling,configuration logging,Detecting environment of application etc.

This is also same in Laravel 11

So you can follow this Directory structure and see Kernel.php.
Registering middleware in Laravel 11
We know there are three types of middleware in Laravel. If we look at app\Http\Kernel.php in Laravel 10 we can see
Global Http middleware

As we see in the image above in Global Http middleware these middlewares are run during every request to your application.

Route Middleware

The application's route middleware groups.These middlewares are applied to either web or api.

Alias Middleware

Aliases may be used to conveniently assign middleware to routes and groups. You can assign these middlewares as per your need.

In Laravel 11 there is no app\Http\Kernel.php **
**So where are these Middlewares?

In bootstrap/app.php if we point the mouse withMiddleware function we can see the namespace from where its coming.

This is the directory

withMiddlewareFunction

We see it has all methods of middlewares.
If we point out the mouse again we can see the namespace

The directory is as follows

If we go to the directory, we can see
Global Middleware

** Middleware Groups**

Alias Functions

So as we see we can find all middlewares but they have been moved inside vendor. For using them we need to manually register unlike when they where in app\Http\Kernel.php in Laravel10.
For registering middleware in Laravel 11 like previously shown its in bootstrap/app.php

Here you need to use withMiddleware function
No middleware directory. By default Laravel 11 has no directory.

To create a custom Middleware in Laravel11 **

Now we see a custom directory has been created.
**Lets say you would want to use a common middleware like auth in Laravel 11
We need to register in manually
Alias Middleware in Laravel 11

But in Laravel 11 we need to do it with To arrange all middlewares in priority we need to use $prirority

Here the AdminRedirect is placed and has the namespace App\Http\Middleware\AdminRedirect

We can see the custom middleware namespace here.
Service Providers
In Laravel 10
We know in Laravel ServiceProviders play a vital role in bootstrapping the application.
We may register service container bindings, event listeners, middleware, and even routes. Service providers are the central place to configure your application.
In config/app.php you can see the Providers array

In Laravel 11
But in Laravel 11 we see there is only one ServiceProvider AppServiceProvider.
They are registered in bootstrap/providers.php

The register function is used to connect things to the Service Container, which is a tool for managing class dependencies. It’s like a box where we can store and retrieve things we need later.
However, it’s important to only use register for binding things to the Service Container. We should not use it to set up event listeners, routes, or any other features. These setups should be done elsewhere, not in the register method.
What is boot method
It is called when a Laravel model is instantiated. It can do several things like listening to Event Listeners.
Service Provider Directory of Laravel 10

Service Provider Directory of Laravel 11

There is no RouteService Provider in Laravel 11 in config/bootstrap.php we use withRouting

Laravel Request Life Cycle in short
In Laravel, a user request is received by a route or controller, processed (like fetching data or preparing a page), a response is created, checked by middleware (like security checks), handled by the HTTP kernel (the core of Laravel), and finally sent back to the user.

Scheduling
In Laravel 10 we use use register all our schedule commands in app\Console\Kernel.php

Here we see 2 schedule commands which are located in app\Console\Kernel.php
So here when we see the schedule:list we can see all schedule commands.
In Laravel 11 there is no app\Console\Kernel.php so so we need to schedule all commands in routes\console.php

APi routes In Laravel 10 sanctum included as a package

In Laravel 11 its not included by default
If we see composer.json after a brand new installation.

If we want to create an APi in Laravel 10 its very easy if we look at routes directory we will see api.php inside routes folder.
If we check composer.json we will see

So we see there is already api.php. If we create a route in api.php

Inside routes/api.php

Laravel 11
But in Laravel 11 if we see routes directory we can see there is no api.php.

So for writing api routes you need to install api.
php artisan install:api
Here we see that after running the command a scaffolding is created already

So here we see Laravel instructing to Add Laravel\Sanctum\HasApiTokens to User Model.This is to add API authentication.
User.php in Laravel10

We see here User Model does not have HasApiToken

So here we to add HasApiTokens we can do

If we go to bootstrap/app.php we can see

We see here that api routes have been registered.
To check the route list

AddMiddleware If we see api.php in Laravel 10

Middleware needed to be enabled for Laravel Apis frontend in Laravel 10

\Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,

Middleware needed to be enabled for Laravel Apis in Laravel 11
If we see the api group middleware in Laravel 11 we can see

$this->statefulApi ? \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class : null,
The code checks if the statefulApi property is true.
If statefulApi is true, it applies the EnsureFrontendRequestsAreStateful middleware from Laravel Sanctum to maintain session data for API requests.
If statefulApi is not true, it doesn’t apply any middleware (returns null).

No $casts property in Laravel 11.
In Laravel 10 We could do something like this

But in Laravel 11 if we see the User.php.Instead we need to use this

Sqlite out of the box

Unlike previous versions in a fresh installation of Laravel you get sqlite outof the box.
If you use global laravel installer you will get options.So you dont need to worry.

laravel new example-app

If you use this command composer create-project laravel/laravel example-app you will get sqlite out of the box.If you go in .env files

So its better to use laravel global installer instead of using composer where you will get to choose between type of database you want.

How to install Vue,Vue-router,Tailwind with Laravel 9,Vite

Tanzim Ibthesam — Sun, 31 Jul 2022 04:37:49 +0000

Here we will talk about how you can install Vue and Tailwind with Vite in Laravel 9.
After installing laravel go to project directory cli and type
npm i vue@next vue-loader.You also need to install
vitejs/plugin-vue Now if you look at package.json files you will see

So we got all our dependencies installed for now.
In our project directory in js folder create another folder called components.In components folder create a file called App.vue
You can name the file and folder as per your choice.
In app.js now

So here we can see app.js
*** Note carefully whatever your file name is here you need to import as name of your file and write Component with it otherwise it wont work.Here if your component name is Example you need to import it as ExampleComponent otherwise things wont work***
Now in
vite.config.js

Here we need to import vue
In welcome.blade.php we need to mount the id #app to the DOM.

**Here inside div with id app we need to write name of our component in this format if name of your component is example component it will be ** <example-component></example-component> Strictly ensure to write it this way.
now in CLI run npm run dev
Now we can see both terminals side by side

**In App.vue*

In our browser if we check now

Vue Router
Here we will show how you can install vue router.npm install vue-router@4 type this in CLI.

Inside js folder create a folder called router inside router create a file called index.js

in app.js

Here we import router and at bottom as we see write app.use(router)
In App.vue

Here to see all elements of router we need to write <router-view /> so we can now see it on browser

**But there is a problem now*

If we create a new route with a component associated like shown in above here its about route. When we go to about route it gives a 404 error.

Here the about route gives a 404 error. Quick fix here
In routes/web.php
Route::get('/{any}', function () { return view('welcome'); })->where("any",".*");

Now we can see the route about works

Installing Tailwind
First go onto CLI and type npm install -D tailwindcss postcss autoprefixer now you can go to package.json file and see

Then in CLI write npx tailwindcss init -p
in tailwind.config.js

Go onto resources css/app.css in app.css write

Restart your npm terminal run npm run dev again
In About.vue if we see

If we see on the browser again

So now we are done with installing Vue.vue-router and Tailwind in Laravel.

Install boostrap in Laravel 9 with Vite

Tanzim Ibthesam — Thu, 28 Jul 2022 06:36:00 +0000

As we as of latest version Laravel switched from webpack to Vite so I am going to mention how you can install bootstrap with Vite.
Instead of webpack.mixin.js now we see vite.config.js.Now you can see vite config file.
If we look at project directory from the top we can see vite.config.js

So there are two ways to install Bootstrap
The first simple way is via CDN
If we go to welcome.blade.php we can just put in a CDN link and it will work exactly like you want.

We include it like regular css and javascript.
Second is via NPM here we will take help of the ui package.
First type composer require laravel/ui
Then php artisan ui bootstrap
Now we see there is webpack.mixin.js we can delete it

We need to go to vite.config.js and write ![vitepathdefined]

in bootstrap.js
Here we need to import app.scss

Then write import * as bootstrap from bootstrap
Then go to welcome.blade.php and write this as per documentation in head section of html
@vite(['resources/css/app.css', 'resources/js/app.js'])

In CLI now run npm install and npm run dev
If we run we see the same output

Create Firebase authentication with Vue3,Tailwind Css,Pinia

Tanzim Ibthesam — Fri, 22 Jul 2022 18:51:54 +0000

At first lets us look th e way to authenticate Firebase without Pinia. Here we are not going to discuss how to install firebase,pinia,Vue,Tailwind. If you dont know please have a look at the previous blog
This is how your config.js file will look like i put it in a folder named firebase
Without Pinia

In Register.vue

Its a simple form and now in script part

auth,createUserWithEmailAndPassword is imported from firebase config files here from firebase/config.js files
Here we see in firebase dashboard panel

So now a user is registered
In Pinia
Now the understanding will be clear how easy things are in Pinia
in store useAuthStore.js

We see now the registration under actions

IN Register.vue
In template part in case

`<input type="text" v-model="store.email" class="border-b-2 border-gray-300 w-4/5 py-1" name="" id=""><br> in place of `v-model="email" the same will be in place of password
In script part i have put everything under

So we see we take the whole authStore import it and keep inside variable store.
The Login and Logout is shown as follows

In Login.vue

Same as Register.vue

In Navbar.vue

**IN script setup **

**onAuthStateChanged*-Check whether a user is authenticated or not


useAuthStore.js

In state declare a new object called user
then in actions define a function called init()

In App.vue We need to initialize init() function in unMounted hook

If user is logged in we set the user uid and email of the authenticated user
While you are logged in if you enter Vue devtools you will see this

While logged out

You will see its empty

Route protection

If now any route needs to be guarded that should be done like this just in that route write beforeEnter and the **requireAuth* like mentioned here

Laravel Api create Users,Posts with Role Permissions using Gates no packages

Tanzim Ibthesam — Fri, 11 Feb 2022 20:45:52 +0000

So I was always in a confusion regarding roles and permissions in Laravel. But I have come across different issues but I thought why not write something since it would even help me also. So most popular way of implementing roles and permissions is using Laravel Permissions by Spatie. Its a great package and most are likely to use it. I wanted to understand things and tried with Gate and Policy which is one of my most favorite feature of Laravel Gate.We are using API here so if you dont know how to authenticate apis in Laravel using Sanctum please read my Making Api CRUD(Create,Read,Update,Delete) with Laravel 8 n API Authentication with sanctum learn things like generating tokens,authentication,authorization.

1.At first lets create a User Roles Model relationship
At first We will create a One to Many Relation with Roles and user.
At first create a Model,Factory,Controller for both Roles and Users
php artisan make:model Role -fms this creates factories,migration and seeder and seeders too
For Users lets just make a Controller which is a resource Controller.
php artisan make:controller UserController --resource
The user migrations and Models are given by default and now lets create a Role Controller
php artisan make:controller UserController --resource
One to Many Relations
Here Role has Many Users and User BelongToRole
In Role.php

In User.php

Note Carefully
In migrations folder keep the Role migrations above User migrations

Role Migrations
This is how your Role migrations would look like

User Migrations
This is how your User migrations would look like

Run php artisan:migrate
2.Now lets create some dunny data with RoleSeeder
Go to database/seeder/RoleSeeder.php if you dont find any dont worry run php artisan make:seeder RoleSeeder that is you have not created seeder.

Here we will have 3 roles
1.Super Admin
2.Author
3.Editor
Now only run the RoleSeeder
php artisan db:seed --class=RoleSeeder.This is the way if you only want to run a specific seeder.
If you have done everything correct you will see

You can also check your database it will appear like this

If you are using anything else there will be a different view.So now we have our roles.
3.Register Users with Roles
I am showing here the Controllers for both Login and Register

So create an AuthController aand also a RegisterRequest

php artisan make:request RegisterRequest
RegisterRequest

Here return true inside authorize function in RegisterRequest

In AuthController

Login method
LoginRequest

Logout Method

4.Register a User
At first let us register an Admin **

So here we already registered an admin.
**Now let us register a Author

Now let us Register a Editor

Here we see by assigning different role_id we have created 3 users with 3 roles
5.User Creation Permission with Gate
Here we will create some permissions with help of Gate. If you dont know about Gate please read a bit bout Gates in Laravel documentation.
i.Only Super Admin can create a user
Here at first in api.phpwe need to change register route a bit

Route::post('/register',[AuthController::class,'register'])->middleware('auth:sanctum');
In AuthServiceProvider.php

Here only user with role_id of 1 can create a user
AuthController.php
Here we can write

Sanctum middleware was not included cause we needed to create the first user.
Lets login with Super Admin credentials and generate a token

In Register authorization part of postman we need to select Bearer Token and just copy and paste the token

Body of postman

In case of no token

It shows unauthenticated
** Logging out with Token**

Logging in as an author trying to create a user
Now lets login as a Author

We see here a token is generated
With same token when we try to create a user
Body of request

Showing token

So here we can see anyone without Super Admin role_id no one cant create a user.While trying its shows unauthorized
ii.Only Admin can delete a user
In the same way an admin can delete a User.
We need to make a User Resource Controller
php artisan make:controller UserController --resource
In api.php

in UserController.php

We are using the same gate like we did with
When we try to delete with author

It shows unauthorized
Login As admin and generate a new token

Using the token to delete user

So we can see user can only be deleted by admin.
5.Create,edit,delete posts
So we will create Posts and provide permissions based on roles
Make Controller and Model **
**php artisan make:model Post -mc
php artisan make:request PostRequest
In PostRequest.php
Relation with User Posts OneToMany
In User.php

In Post.php

Migrations

PostRequest.php

** 6.Permissions to create,edit and delete post**

i.Admin and author can create posts only
In AuthServiceProvider.php

PostController.php

Admin sending a create request

Its created
Lets logout and create a new post with author

Token generated with Author

Posts created by author

Post successfully created
Lets logout and try to create post with Editor
Token created by editor

Create posts by Editor

'Editor cant create a post its says unauthorized'

ii. Editor and Admin can edit all posts,Author can only edit his own post

Editor trying to edit his post and other post

Though its a bit hard to see you can see Editor being able to edit any post as they have the same token
Lets logout and create a new token logging as a Author

When he tries to edit someone elses post in this case Admins post

It says its unauthorized

Now its edited that is he can create his own post
If you logout and login as admin you will see the same thing
**
iii. Admin can only delete all posts**

Login and generate a token for admin

Admin Deleting a post

Logging out and logging in as an user

We see here with same token when we try to delete a post it says unauthorized

So I guess this covers a lot on creating roles and permissions. Hopefully I will try to implement these with Policies and in future with Vue,Inertia.

Vuex-State management library for Vue(Vue2 and Vue3)

Tanzim Ibthesam — Thu, 28 Oct 2021 14:17:57 +0000

Vuex is a state management library for Vue. As your application continues to grow it becomes tough to handle many things.This is for someone who already knows Vue.If not please have a look at some of my previous blogs VueJSforBeginners
Note this same thing works with both Vue2 n Vue3 APi since Vue2 APi perfectly works in Vue3 but there is just a slight change which I will mention after all these
Vuex3 with Vue2
Install Vuex
After you have installed the project run
npm install vuex
index.js
We need to make a new store and here and we need to write store:store

here need to write about the store here

If we look at the console we see so many things of the store

Mutations
You can't mutate a state directly you need mutations, For mutating you to access the mutations

If we look at the Vue dev tools in the console

Here we see 3 of the mutations increment
2. Transfer to store.js
Here we are transferring everything to store.js so that everything is in a seperate file which is much more readable

As the mark is given we must default export store at the botton
In App.vue
Here we need to import
import store from './store'

No need to import store now if we use $this.store

Display Todos
Here we take an array of objects todos in store and we want to loop through it
IN store.js

In App.vue

template part in App.vue
Looping through array of objects

mapState
Here we can use mapState to get access to all of the state. Its much easier
In store.js

In App.vue
import {mapState} from 'vuex'

We see now we can easily have access to todos and isLoggedIn vis mapState
getters
We can access any property of state through mapState on the other hand if we want to filter out todos based on done and not done for that we need to use getters

App.vue

template part

in the browser

getters inside getters
in store.js
Suppose we want to get length of allTodos so here we can find out length of allTodos

In App.vue

In browser

mapGetters
Here we can just use mapGetters import mapGetters on the top.By this have all getters easily.

Mutation and action
Suppose we want to set both methods to increase and decreaseCounter.Here we will have to set two methods one is increase and other is decrease
In store.js

Here the mutations are commited in actions
In App.vue

Here we see we dispatch the actions

template part

mapActions
Just Like mapGetters we can use mapActions
we need to import mapActions at the top

Vuex3 with Vue2

Here I am going to talk about how you will install Vuex4 wih Vue3.Remeber Vuex4 only works with Vue3 However Vuex3 works works with both.

Install Vuex4
npm install vuex@next
In package.json dependencies if you see now its vuex4.0.2

main.js

store/index.js

Remember to export store
My way of writing it might differ from other but main things is the code working. So I believe you can now work with Vuex
with latest Vue3 Api.

Laravel Api authentication (Sanctum) with NuxtJs(Part-2)

Tanzim Ibthesam — Thu, 14 Oct 2021 07:15:27 +0000

In the last part I mentioned about Api authentication with Laravel Sanctum if you didnt check it please check it out.
Here I will integrate it with Nuxt.js that is show you the frontend
Nuxt Installation
Here we are installing Nuxt as a seperate standalone frontend means you will install nuxt the way you do and integrate Laravel api with it.
npm init nuxt-app laravel-api-auth-sanctum so its npm init nuxt-app name of your project
Options
Javascript or Typescript

We will be working with Javascript as of now.

Package manager-npm or yarn

We will use npm you can use yarn
UI framework

I am selecting Tailwind you can go for any.
Nuxt.js Modules

You can select any I am going for Axios
Linting Tools

I am going for Prettier
Testing Tools

None for now
Rendering mode select SSR

ServerHosting

Here we will select NodeJS hosting
Development Tools

Continous Integration

It will be none
Version COntrol System

Here I am selecting none.
Project Successfully Created

PLease Carefully Note-The settings used in this project might differ based on clients requirement so based on requirements you need to adjust.
cd onto the project folder
npm run dev
If you have installed everything successfully

You will see this
pages/index.vue is the starting point of a Nuxt application.

If you see the results you will see on localhost port 300 it gives you the thing

In Compaonents folder you will keep all the compoanents here we will keep Navbar
Navbar.vue

  <div class=" flex justify-between items-center my-10">
    <nuxt-link to="/" class=" text-2xl font-semibold">
      Laranuxt Aut
    </nuxt-link>

    <!-- logo -->
    <nav class=" flex space-x-10">
      <nuxt-link
        class=" font-bold text-base uppercase"
        :to="{ name: 'auth-login' }"
        >Login</nuxt-link
      >
      <nuxt-link
        class=" font-bold text-base uppercase"
        :to="{ name: 'auth-register' }"
        >Register</nuxt-link
      >
    </nav>
  </div>
</template>

In pages folder the components we create by default the name of the components will bue the route here we have created an auth folder inside pages folder and inside auth folder we have created 2 files one is login.vue and other is logout.vue

If you go to http://localhost:3000/auth/login you can see the login route or if you go to http://localhost:3000/auth/register route you can see the register route.
Nuxt-link and named routes
When we include a component under page directory it becomes a route automatically. Like if we include fruits.vue under page folder and if we want to navigate to /fruits directory we can simply use

<nuxt-link class=" font-bold text-base uppercase" to="/fruits" >Home</nuxt-link >
Named Routes
If we want to include named routes we can write
<nuxt-link class=" font-bold text-base uppercase" :to="{ name: 'fruits' }" >Home</nuxt-link >
Point to be Noted-here if you change filename under pages folder to fruit.vue it will not work. Its a problem since if you use named routes in many locations you just also need to change link of the routes. But no need to worry.
Check .auth folder
In .nuxt folder there is router.js
You see there is a name,path and component it is automatically generated

Here the routes are automatically generated here you must name your routes here.As a result if you change your component name continously in pages folder you dont need to change the nuxt-link if you link it to the named route.
Problem with Navbar
Here when we link to Login or registration routes we see no Navbar.

In project root directory create a layouts folder and inside that create layouts/default.vue
Go to laydefault.vue

  <div class=" max-w-6xl mx-auto">
    <Navbar />

    <main class="my-20">
      <Nuxt />
    </main>
  </div>
</template>

Nav Link
Now when we go to registration or login routes we see the Navbar

Connect Laravel Api with Nuxt
At first install axios
npm install @nuxtjs/axios
In nuxt.config.js

Now comes the mainpart Register.vue


  <div class="container mx-auto sm:w-4/5 xl:w-1/4 border p-10 rounded-xl">
       <div class="text-center -mt-4">Register</div>

        <form action="" @submit.prevent="submitForm">
            <div class="md:w-1/2 space-y-3">
        <input type="email" v-model="form.email" class="px-6  border rounded-md" placeholder-gray-500 placeholder="Enter your email" /><br>
         <p class=" text-red-500 text-xs text-center" v-if="errors.email">
          {{ errors.email.join(" ") }}
        </p>
          <input type="text" v-model="form.username" class="px-6  border rounded-md" placeholder-gray-500 placeholder="Enter your username" /><br>
          <p class=" text-red-500 text-xs text-center" v-if="errors.username">
          {{ errors.username.join(" ") }}
        </p>
          <input type="password" v-model="form.password" class="px-6  border rounded-md" placeholder-gray-500 placeholder="Password" /><br>
          <p class=" text-red-500 text-xs text-center" v-if="errors.password">
          {{ errors.password.join(" ") }}
        </p>
          <input type="password" v-model="form.password_confirmation" class="px-6  border rounded-md" placeholder-gray-500 placeholder="Confirm your password" /><br>
          <p class=" text-red-500" v-if="errors.password_confirmation">
          {{ errors.password_confirmation.join(" ") }}
        </p>
          <button class="px-6  bg-green-300 text-white font-serif">SEND</button>
          </div>
        </form>
          <div class=""> Already have an account? <nuxt-link class="text-blue-600" :to="{name:'auth-login'}">Login</nuxt-link>
          </div>
      </div>

</template>

<script>
export default {
    data(){
        return{
            errors:{

            },
            form: {

        username: "",
        email: "",
        password: "",
        password_confirmation: ""
      }
        }

    },
    methods:{
       async submitForm(){
           this.errors='';
           try {
               const res= await this.$axios.$post("api/auth/register", this.form);
            //    console.log(res);
            console.log(res);
           } catch (error) {
               if(error.response.status===422){
                   this.errors = error?.response?.data?.errors;
               console.log(this.errors);

               }

           }


        }
    }

}
</script>

Here there are many things if you dont know Vue or basics you might not understand. You can read through my VueJsBlogs for beginners.There are 7 blogs in total.

Here we have a registration form made with Tailwind and we are submitting http request through Axios. Then we are doing exception handling that is in case of any 422 errors
if(error.response.status===422){ this.errors = error?.response?.data?.errors; console.log(this.errors); }

In vue template
In case of any errors of email,password or username we set it like this
<p class="text-red-500 text-xs text-center" v-if="errors.email"> {{ errors.email.join(" ") }} </p>

This is the error you get. On the other hand when everything submitted successfully

We can see on the console user registered successfully.
In Login.vue

<template>
  <div class="container mx-auto sm:w-4/5 xl:w-1/4 border p-10 rounded-xl">
       <div class="text-center -mt-4">Login</div>

      <div class="md:w-1/2 ">
             <form @submit.prevent="submitForm" action="" class="space-y-3">
        <input type="text" v-model="form.email"  class="px-6  border rounded-md" placeholder-gray-500 placeholder="Enter your email" /><br>

        <p class=" text-red-500 text-xs text-center" v-if="errors.email">
          {{ errors.email.join(" ") }}
        </p>
          <input type="password" v-model="form.password"  class="px-6  border rounded-md" placeholder-gray-500 placeholder="Enter your password" /><br>
          <p class=" text-red-500 text-xs text-center" v-if="errors.password">
          {{ errors.password.join(" ") }}
        </p>

          <button class="px-6 py-1 bg-yellow-300 text-white font-serif">SEND</button>
             </form>
          <div class="text-xs "> Not Registered? <nuxt-link class="text-blue-600" :to="{name:'auth-register'}">Register</nuxt-link></div>


  </div>
  </div>
</template>

<script>
// import swal from 'sweetalert2'
 export default {
   data(){
         return{
             errors:{

            },
            form: {


       email: "",
        password: "",
               }
        }

    },
    methods:{
       async submitForm() {
      this.errors = {};
      try {
         await this.$axios.$post("api/auth/login", this.form);
        });
        // this.$router.push({ name: "auth-login" });

      } catch (error) {
        if (error.response.status === 422) {
          this.errors = error?.response?.data?.errors;
          return;
        }
        // if (error.response.status === 401) {

      }
    }
  }
};
</script>

Here we get all validation errors and if we enter correct usernaem and password we get the token
)
Here we see on the network tab we see we get the token This is taken from mozilla browser
Nuxt auth best way of handing tokens in Nuxt
Install Nuxt auth
npm install --save-exact @nuxtjs/auth-next
Also in nuxt.config.js

You need to write some auth starteigies below axios in nuxt.config.js

You will get these from nuxt-auth-docs. Remeber always read the docs you will find a lot of information.
Go back to Laravel project api.php

Also include the user route in AuthController

Testing auth/user route in Postman

If token and everything is alright we get info of the current authenticated user.

For this we need to create a ppropertly of adat of user in backend.
Create UserResource in Laravel
php artisan make:resource UserResource
Now if we go to AuthController
We need to change our user method

Testing in Postman
If everything is alright we get all user info as data object

In Login.vue
We need to replace axios with loginWith since its the simpliest way of handling tokens.

If we enter everything correctly and check out Vue Dev tools
on Chrome we will see an user object

Below you can see

In NavBar.vue if we want to see all details of current authenticated users

If we check on the browser

Showing logout while being authenticated
In Navbar.vue If user is not LoggedIn

If User is LoggedIn

While User is loggedIn in browser

While User is logged out or not loggedin in browser

So i guess thats very much it for Laravel Nuxt sanctum authentication as of now.

Laravel Api authentication(Sanctum) with NuxtJs-Part1

Tanzim Ibthesam — Mon, 11 Oct 2021 07:52:53 +0000

As of Laravel 8 there has been introduction of Sanctum which has made APi authentication very easy. Here first I will explain about making Api authentication with Laravel and then I will inetgrate it with NuxtJs on frontend for the second part.

At first lets install a fresh copy of Laravel
Laravel Installation
laravel new nuxtapi
I guess you already know how to run a migration. For api lets directly go to api.php. As of the latest version Sanctum is already installed from the start.

Database Migration for Users
public function up() { Schema::create('users', function (Blueprint $table) { $table->id(); $table->string('username')->unique(); $table->string('email')->unique(); $table->timestamp('email_verified_at')->nullable(); $table->string('password'); $table->rememberToken(); $table->timestamps(); }); }
Make an AuthController
php artisan make:controller AuthController
Auth Routes
api.php
Route::middleware(['prefix', 'auth'])->group(function () { //User Registration Route::post('register',AuthController::class,'register'); });
Here we will register username,email and password both username and email are unique.
Then run
Create a request for validation registration fields
php artisan make:request RegisterRequest
In app/HTTP/Requests/RegisterRequest.php

public function authorize() {return true;}
public function rules() { return [ 'username' => ['required', 'max:255', 'unique:users'], 'email' => ['required', 'email', 'max:255', 'unique:users'], 'password' => ['required', 'max:255', 'unique:users', 'confirmed'] ]; }

User Model User.php
In User Model you need to do mass assignment
protected $fillable = [ 'username', 'email', 'password', ];
AuthController

public function register(RegisterRequest $request)

    {

        User::create($request->validated());
    }

Testing Registration in Postman

We see we get all validation errors

When everything inserted correctly we get this confirmation
message.
Login

AuthController.php
In api.php
Route for login in api.php
Route::post('login', [AuthController::class, 'login']);

We will create a LoginRequest php artisan make:request LoginRequest
In app/HTTP/Requests/LoginRequest.php
LoginRequest.php
public function authorize() {return true;}
public function rules() { return [ 'email' => ['required', 'email', 'max:255'], 'password' => ['required', 'max:255'] ]; }

public function login(LoginRequest $request)
    {
        if(!auth()->attempt($request->only('email', 'password'))){
            throw new AuthenticationException("Email or password is not valid");
        }


        $token = auth()->user()->createToken('user-token');

        return [
            'message' => ['successfully logged in'],
            'token' => $token->plainTextToken
        ];
    }

For getting authenticated user

public function user()
    {
        return auth()->user();
    }

Login testing in PostMan

We see when we enter nothing it gives us validation errors

When email and password generated successfully we get a token. This token is used for authorization
Logout
Route for logout
api.php
Route::post('logout', [AuthController::class, 'logout'])->middleware('auth:sanctum');
It will be inisde group auth

public function logout()
    {

        auth()->user()->currentAccessToken()->delete();
        return [
            'message'=>'Successfully Logged out'
        ];
    }

Testing Logout in PostMan

It shows unauthenticated without token

With Token you can successfully logout
After you logout your token will expire
Test authorization with token
If you want that your customers cant enter specific route without token that is they are not authorizaed to neter that route.
That specific route

Postman Testing

If you try to access this route without token it will say give you a message of unauthenticated.

We are very much done with Laravel api authentication registration,login and logout.In the next part blog we will mention about how to intergrate it on frontend with Nuxt.js

Javascript Basics Playlist

Tanzim Ibthesam — Fri, 08 Oct 2021 06:32:08 +0000

Hello Everyone I have created a basic playlist of around 50 videos in Javascript Here I will post about link of playlist and each individual videos.

Node Express CRUD with Mongoose,JWT authentication,authorization

Tanzim Ibthesam — Mon, 23 Aug 2021 11:58:13 +0000

Here we will make a CRUD with REST API along with its authentication.Express.js is unopinionated means everyone can have their own way of doing things which is quite different from a strict framework.
If you are using VS code and type Cntrl+` to open the terminal and write npm init -y

It will create a pacakge.json file for you on the left hand side

At first you need to install express and mongoose.
npm install express && npm install mongoose
If you go to package.json file you can see

In our depencies you have got your express and mongoose installed to check whether a package has been installed go package.json. These are pretty basic stuffs but will help a begiiner a lot.
you will create a file called app.js
in app.js

These are the thigs you will initially write in app.js file here you will initialize express
go to terminal type node app.js

Now we can see that the server is initialized on port 5000. The port can be anything 5000,6000,8000.
But the problem is we need to run it each and every single time when there is any change. As a result we need to install nodemon
npm install nodemon Then if we go to our package.json file we will see

noe if we want to use nodemon we can use the scripts in package.json file

Now we can go to your terminal and run npm start

Now you dont need to run node app.js nodemon will restart everytime there is a change
Connection with MongoDB through mongoose
If you dont have MongoDb installed on your system please install it first. Here you creating a new database we will use Robo3t here
if you go to Robo 3t you can see

If you click connect you can see

It will look something like this

From here you will see a modal like this you will named your databse and see create

If you have done everything correctly you will see name of the databse you have created on the left

We can use .env files for that we need to install a new package

If everything is alright we can now we can see it running

We can install npm install dotenv to keep database name in an env file
In .env file

In app.js file

This is not mandatory but a good practice
Router
Let us get the router fixed we need to create a new file called router.js you can set all routes inside app.js but its better to have a separate route file now if we create router.js

In app.js
const allRouter=require('./routes')
app.use('/',allRouter);

Now we need 2 parts 1 is the model and other is the controller
In Model part there will be the database and controller part will have the logic

Create a new folder model/Post.js

here we see we can that we want to add two fields to posts collection title and description

CRUD part
CREATE
In routes.js
Import PostsController
const PostsController=require("./controller/Posts");
Post route
router.post('/posts/create',PostsController.createPost);
Import Post Model on top
in controller/Posts.js

Test in Postman
Make sure in headers Content type is set to application/json

Testing post request

We can clearly see its successfull giving us a status code of 200

READ
In router.js
router.get('/posts',PostsController.getPost)

In controller/Posts.js

Postman test

If we also check in Robo 3T

Now we can say that it has been successfully inserted onto database.
** READING A SINGLE POST**
In router.js
router.get('/posts/:id',PostsController.findSinglePost)
In controller/Posts.js

Test in Postman
Here you can get id from databse using Robo3T or just by using get requests to get all posts

Now we see from where we can get the id and get a single post

UPDATE
In router.js
//Updating a single post router.put('/posts/:id',PostsController.updatePost);
In controller/Posts.js

Testing in postman
The same way we get id like shown with getting id of a single post

DELETE
In router.js
//Delete a post router.delete('/posts/:id',PostsController.deletePost);
In controller/Posts.js

Testing in postman

We will get the individual post and delete
While Updating you most likely will get an warning

For resolving the warning go to app.js
useFindAndModify: false

API Authentication,authorization with JWT
Now we will do authentication using email and password only. Remember JWT is used for authorization not authentication
Create a new model in model/User.js
IN User.js
In this case

Here we are including email,password and token.

In controller folder we will create a new file called Auth.js
We need to import User model at the top

In router.js
//signup route
router.post('/signup',AuthController.signup) we need to import AuthController at the top
const AuthController=require("./controller/Auth")
In controller/Auth.js
We need to install a package called bcyrpt
Signup method in Auth.js

Here is signup we need to use bcrypt to hash the password as we all know passwords cant be stored in plain text
Testing in Postman

As we see the password is hashed and status is ok
Signin Route
In router.js
router.post('/signin',AuthController.signin);

In signin route after checking credentials a token needs to be generated.Remember Token is for authorization not authentication. We set the secret key on top the secret key can be set in .env file remember the secret key must be secret.
Testing in Postman

Authorization
We will use a pacakge named express-jwt for installing npm install express-jwt.
Creating a middleware
A middleware can be termed as something between a request and response.If we want to protect any route that users who only have token can enter those routers.
in controller/Auth.js

Route test with middleware
In router.js on top
const {isSignedIn}=require("./controller/Auth");
Route with isSignedIn
router.get('/testauthroute',isSignedIn,(req,res)=>{ res.send("A protected route") res.json(req.auth) })

Testing in Postman

Here if we try to access this route without token we get this error 401 forbidden means without token you cant access this route.

Here we need to go to header part of the token include Authorization in header.In value of authorization header we need to write Bearer give a space before the token and then copy and paste the token
If you go to jwt and test your jwt you will see you get all your info
. Here header is the type which is JWT the signature is the token and payload is the email and id.So that's all for this blog. Hopefully you will be able to grasp the concepts of Node,Express,Jwt,authentication,authorization here.

GitHub Co pilot,Ai and my thoughts

Tanzim Ibthesam — Wed, 14 Jul 2021 07:49:22 +0000

Thoughts on Github co Polit and such AI tools
Github Co Pilot have raised the dev community by storm and people are wandering will it replace their jobs?
Short answer is No.
But if this product becomes successful as such product will not be likely to be open source in future it might add a new dimension.
Its features are like if you have a form and you want Firebase or JWt authentication with react it might just generate lines of code with one or two lines of comment.

But we already have many opinionated frameworks tools that does similar kinda things?
Yup similar but here it will give you a feel of writing your own code with much less effort and productivity will increase a lot.

Do we still need developers than?
Of course. You need to know a language or library cause otherwise any random guy coding might get a code running but in long term it will be a problem. Since if there is a bug they will have a very hard time debugging it or making it tough to adjust with current requirements.

Since it has acess to so many codebases Will it get better?
It definitely will and there is the problem. But for custom requirements you need engineers you need problem solvers.
So where is the problem?
In many Companies many developers or interns who are junior a Company might not need so many of them. Perviously you needed 10 now you might get that done with 5-6 and many Companies will feel they want productivity and things done at a less cost.
Impact of Co Pilot and such automated tools
More tools might be created in future but its definitely an indication that industry is moving in that direction.Lets hope such products are not sucessful.

Impact
If its sucessful eventually in long run I feel Software development might lose its zest and appeal it will eventually start from big Companies and eventually there will be more competition in small business and Freelancing space as many people who loose their jobs will try to establish their mark there.

Besides less people will be willing to participate in bootcamps or be self taught. and people using it to learn development will be worse since they will just write line some comments and get the job done.
So whats the solution?
Learn developement like you are doing solve problems learn new tools. But if you can spent 5% of the time out of your schedule to learn a new skill it might be graphics,ui ux,video editing,making Yt videos,maybe investing in stocks or start a minmal grocery store such thing will give you more confidence.

Final thoughts
If one door closes other doors will be opened so dont worry its the survival of the fittest and only the fittest will survive. It might just be a fad and hype for short run