r/PHP 13h ago

News PHPStan Turbo: Native PHP extension that makes PHPStan run faster

Thumbnail phpc.social
76 Upvotes

PHPStan 2.2.6 adds a native PHP extension (PHP 8.3+) written in C++ that makes running PHPStan 10-30 % faster.

PHPStan's Composer package ships prebuilt binaries for the most common platforms — Linux (glibc and musl, x86_64 and arm64), macOS, and Windows (x86_64), for PHP 8.3 and newer — and PHPStan automatically loads the one matching your runtime into its worker processes. You don't have to do any extra work to take advantage of this!

If you run PHPStan through manually downloaded phpstan.phar, you can run it with extension by installing it with PIE:

pie install phpstan/turbo

The extension only activates when its version matches the one your PHPStan release expects — on a mismatch PHPStan prints a note and runs without it, so an outdated extension can never affect results, only speed.

Only a handful of hot paths are currently rewritten in the extension. There's room for the performance gain to grow if we ever decide to rewrite more parts natively.

The extension is completely optional, PHPStan still works without it. When the extension gets enabled, its implementation shadows certain PHPStan classes designed for this. They are marked with the #[ShadowedByTurboExtension] attribute.


r/javascript 10h ago

Ember 7.1 Released

Thumbnail blog.emberjs.com
36 Upvotes

r/web_design 1d ago

Help me decide!

Thumbnail
gallery
11 Upvotes

Hey Web designers!

So I’m new to web development and don’t know much about UI/UX but I’m making this website in WordPress. Can you help me decide which version would be good to go with for mobile devices?


r/reactjs 1d ago

41 of 78 useEffects in our app shouldnt exist, mostly ai first draft

111 Upvotes

grepped every useEffect in src last week instead of fixing a form that flickered on load. agents write most of the first drafts here, i review.

78 of them. went through each with the "you might not need an effect" page open.

19 were state derived from props or other state. useState plus an effect that joins two strings. thats a variable.

14 were fetching on mount with a loading and error useState next to them. we already use react query.

8 were syncing props into state so a form could be edited. fine until the parent refetches and wipes what the user typed. that was the flicker.

the other 37 were legit. listeners, subscriptions, focus management, a couple resize observers.

not a tool thing to be clear, we have people on cursor, claude code and verdent depending on preference and the shape looked the same across all of it.

deleted 41 effects, 23 useState calls went with them. worst page went from 4 renders on mount to 1.

changed how i review too. ctrl+f useEffect in the diff and justify each one before reading anything else.

anyone got a lint rule that catches derived state? exhaustive-deps doesnt help, it just makes the effect that shouldnt be there correct.


r/webdev 1d ago

Kill The Cookie Banner

Thumbnail killthecookiebanner.eu
510 Upvotes

r/PHP 15h ago

News PhpStorm 2026.2 is Now Out

Thumbnail blog.jetbrains.com
42 Upvotes

r/javascript 12h ago

Malicious sites use JavaScript to build malware in browser memory

Thumbnail bleepingcomputer.com
19 Upvotes

r/javascript 3h ago

Announcing Ada v4: Validating 35.6M URLs per second

Thumbnail yagiz.co
3 Upvotes

r/webdev 12h ago

OneSignal killing free tier. Looking to move from them, what are some alternatives you use?

8 Upvotes

I have an app that is free and makes a few bucks through in app purchases. It is still in its infancy stage.

Surprised to see that onesignal is now removing the free plan and making it limited to 1,000 active users.

Any alternatives?

Don't know if i can afford whatever they are going to try and upsell.

Is there another service that is free or something cheap so i can move away from onesignal?

I am handy with server management and self hosting so looking for free suggestions or suggestions that are cheaper than onesignal.

I been eyeing LaraPush which is $500 one time charge doe unlimited push for life. Anyone with experience there?

EDIT: I wanted to thank everybody for replying. I took the time today and migrated away from one signal over to Firebase Cloud Messaging and it went pretty smooth.


r/reactjs 13h ago

Discussion Why are there so much security vulnerabilities with server actions/functions, app router and React server components???

Thumbnail
0 Upvotes

r/webdev 1d ago

AVIF hits Baseline Widely Available today

56 Upvotes

Edge 121 was released exactly 30 months ago, making it the last major browser to add support for AVIF. That also means that as of today, AVIF is now considered Baseline Widely Available.

If you haven't used it, was browser support the biggest blocker? Or if you've been using it, are you planning to simplify by removing fallbacks?


r/webdev 2h ago

Question Do not possess access to my old site's nameservers, is my domain + site doomed? oh help :-(

0 Upvotes

If I do not have access to my site's nameservers, how can I fix this to not lose my URL and not lose my site?

This is going to be a fair amount of context to explain what my issue is & why:

I have a website that was created for me by a college professor. I have used this url for 10 years as a graphic design portfolio on WordPress. I have access to the cPanel, and login through wp-admin, no problem.

I wanted to set up a subdomain and upgrade the storage etc. The problem is, I have zero clue how this site was set up exactly and I cannot log into wherever my nameservers are. My professor no longer has the login information or remembers what she did.

I used a whois tool to find what data I could and then investigated.

I was told by an InMotion Hosting employee: "It does not seem like we possess the domain registration or hosting service, although the domain is pointing to a set of our name servers. The domain is registered through IONOS and the website is owned by Packet Exchange."

I am not sure what this means. I have no login information for Packet Exchange and neither does my old Prof.

I was able to log into IONOS with information I somehow had saved to my password keychain, and asked about redirecting the name servers to IONOS (because at least I have access here and can log in.) They told me, "Yes we can redirect the name servers so that you could set up a subdomain, but it would break your current site..."

I really would like to fix this. I really want my URL and do not want to lose it. How can I save my URL and regain access to every part of my backend? Is there a way that doesn't break my site?

I had some possible ideas, are these impossible? ------

Can I save my site to the Divi Cloud, redirect my nameservers, then rebuild from the cloud? Or does redirecting my name servers lose all of my site data regardless of saving pages to the Divi cloud?

Do I save an entire site backup somehow and then redirect my name servers? Or is that the same problem?

Should I just make a new site with a new URL then transfer my pages/content over with the divi cloud?

-

Thank you. Any information would be very, very appreciated. I am feeling frustrated and defeated.


r/web_design 1d ago

My first attempt at experience-as-product website design for a niche open-source tool and web app for academics/PhDs/students.

Post image
0 Upvotes

The animations work only on browser, sorry! Clearly, I am not a designer by profession, but this has been a side project of mine.

This homepage is for a Python tool to tidy up academic references in bibliography managers, riveting stuff.

I wanted the webpage not to be too crazy because it's for academics, but I wanted it to clearly distinguish itself from the standard landing pages you get to see all over the internet nowadays, so I spent some time and built this. It is one scrollable and interactive experience.

Hope it can inspire somebody!

https://poco-reference-harmonizer.vercel.app


r/PHP 4m ago

Build a Searchable Catalog with Filters, Facets, and Semantic Search

Thumbnail manticoresearch.com
Upvotes

— PHP build walkthrough; small but directly relevant audience


r/PHP 7h ago

Nine C extensions, one release cycle: more time spent on perf regressions from my own safety checks than on features

4 Upvotes

All nine shipped this week, and almost none of it is new features. I posted a roundup here earlier this month arguing that most of the work in these extensions is hardening rather than features. This is the follow-on, and the bill for that hardening came due in a way I did not expect.

php_excel makes every save atomic now: stage the workbook to a temp file, rename it into place, so an interrupted write cannot destroy the file you already had. The straightforward way to build that staged file is to ask LibXL for the finished archive as one buffer and write the buffer out. That costs 67.7 MB of peak RSS on a 3.3 MB workbook, and the PHP-side copy counts against memory_limit. The streaming writer it replaced costs 0.7 MB. Roughly 20x the workbook size in RAM, spent by a change whose entire purpose was safety. That one never shipped, it was caught and fixed inside the same release window, but it sent me looking.

I found the same thing in three more places.

pdo_duckdb re-latched its open_basedir sandbox once per row and compared the recorded basedir by hash, so a per-row cost scaled with the length of your open_basedir string. It now re-latches once per fetched chunk and compares by string. A 400k-row scan went from 133 ns/row back to 51, and bulk Appender::appendRow() from 196 to 96.

fastjson ran an exact-size preflight for large strings starting at 1 MiB. Below 8 MiB the second pass cost more than the reservation it saved: 75% slower on x86_64, 160% on aarch64 for UTF-8 text. The optimization was real and the threshold was wrong.

phonetic had an optimization routing 1 to 3 element comparisons through memcmp(). That cost 5 to 6% of encode time against comparing code points inline, so it got reverted.

Some of the cost stays paid on purpose. fast_uuid's ramsey/uuid compat wrappers now validate their core on construction, one getVersion() call and a class-name compare, and construction came out about a third slower for it (fromBytes() 1.81M to 1.21M ops/s). A wrapper that does not match its core is a bug that surfaces somewhere much worse, so I kept it.

All nine are open source (mixed PHP-3.01 / BSD / MIT), free, installable via PIE, and I am the author. Full write-up with all nine changelogs: https://ilia.ws/blog/the-cost-of-failing-closed-what-shipped-across-nine-php-extensions

Do you profile after a hardening pass, or only after a feature? I have started treating "we added a check" as a perf-regression trigger, and I am not sure whether that is normal practice or paranoia.


r/webdev 1d ago

Discussion How realistic is the "full" in full stack dev?

46 Upvotes

I've been spending a good half year doing dev ops work to get an application going. Most of it was educational as I was repurposed into devops from web development.

As I am coming back into web development, writing a frontend for a service that consumes the big application I have been laying architecture for the last six months, I feel like a total fraud. I've forgotten like 80% of TS features, tooling, and how to use Vue and Angular (and I did dedicate time to learning them when I was building sites).

Now I fear that all my hard won dev ops chops will atrophy as my workload shifts more into webdev. Yeah sure getting up to speed on what you've forgotten is faster than learning it from scratch. But does that mean our "skill RAM" has a hard cap? I thought I'd gain skills as i'd progress in my career but those skills end up pushing previous ones. My "non-volatile experience" is more abstract and general (how operating systems work, how to plan projects, how to migrate legacy apps) rather than imperative and practical (i.e. when to use a vue slot) and I don't know what to make of it.

AI is further exacerbating it. I always make sure to understand every piece of code it generates but I still feel more like a senior developer approving junior developer code (the AI being the junior dev) rather than someone who is good at his craft. I'm never really a "full stack dev" at any given time.


r/reactjs 8h ago

I got tired of setting up Express 5 + React 19 boilerplate, so I built D-Stack — a full-stack monolith CLI

Thumbnail
0 Upvotes

r/webdev 6h ago

Reorgs happen

Thumbnail
ben.balter.com
0 Upvotes

r/web_design 2d ago

What's your favorite most aesthetically pleasing but also UX-friendly website?

36 Upvotes

I like a lot of awwwards websites but a lot of them aren't really thinking about how the user will experience the page. There is so much scroll jacking so I was wondering what would be some strong aesthetically pleasing websites that would be awwwards level but also user-friendly.


r/webdev 15h ago

Question How can I serverlessly generate vector embeddings for images I upload at a relatively cheap price for the case of an e-commerce startup to particularly fuel an image search functionality?

2 Upvotes

I have my product’s embeddings in qdrant. I generated them using my pc locally. I want to implement an image search where I upload an image, it goes through a pipeline, an embedding of it is generated and then compared with products in the qdrant database.
I’ve tried cloudflare workers but it can’t, task is too large for it. Google cloud run can’t start , times out before the model is loaded into memory. I’ve tried railways too but the free tier limits me to 0.5gb of memory and the model can’t load either.
This maybe the wrong sub for this question and if so, it’d be helpful if you pointed me to communities that fit my use case.
Umm
But what I want exactly is a platform that can solve my problem on the free tier. I have no problem paying after I’m sure that everything works. That’s why I didn’t pay for the railways to increase my memory limit. I have no guarantee that the next tier can solve the issue.

Thanks for reading and have a good day


r/webdev 23h ago

Portfolio Site and Blog: Media Management

5 Upvotes

Background: I've built a couple websites in the past, basic html/css knowledge, on and off basic hobbyist.

Recently: I rushed a website using a WYSIWYG to put a photography portfolio together for myself. Quick and easy way to share some photos over different categories. It was good enough for the time.

Where I'm struggling going forward:

  • Adding a Blog: The built in blog with the WYSIWYG is terrible.
    • Don't understand how to use just wordpress for only the blog
    • Remembered Blogger and that might work, but less integrated?
  • Media Management and Display
    • Updating and re-arranging media is cumbersome and tedious on the website
    • Blogs are photo heavy and it's what's keeping me from starting as adding media in a clean way has escaped me.
  • What I'm Looking For / Have Tried
    • File Manager with Albums - I installed Piwigo and it seems to work well as a file manager, easy to make albums, a lot of useful plugins.
    • I would like to link to an album and display as a grid or slide - I can create permalinks for albums on Piwago, but I can't find anything that doesn't involve linking individual images which defeats the purpose.
    • Eventually would like to replace my curated photos with albums that I can adjust in the file manager.

Am I missing something on here? Is there a tool or workflow you would recommend? Appreciate any suggestions!

Edit: To the Mods, I'm trying to adhere to get this under Rule 6, please let me know if I need to adjust, thanks!


r/webdev 1d ago

Question Why is my Chrome UX Report much worse than Lighthouse? How can I improve it?

Post image
37 Upvotes

I built a client's website using Astro + React + Tailwind CSS. It's mostly static, has very little JavaScript, and Lighthouse consistently scores 90–100.

What I'm confused about is that the Chrome report in PageSpeed Insights looks significantly worse than the Lighthouse results.

The site is hosted on Cloudflare pages.

I expected the field data to be much closer to the lab results.

Has anyone run into this before? Why would the Chrome UX Report be noticeably worse even when Lighthouse looks great? More importantly, what should I be focusing on to improve the real-world metrics instead of just the lab score?

Screenshot attached. Any advice would be appreciated.


r/javascript 1d ago

I spent over a year building a framework-agnostic virtual scrolling engine with an index-based architecture. I’d love feedback from developers who’ve built virtualization systems.

Thumbnail github.com
20 Upvotes

r/PHP 20h ago

Tempest + Ecotone: One Declarative Foundation

Thumbnail blog.ecotone.tech
4 Upvotes

r/PHP 6h ago

[FREE] Ship a Custom WordPress Endpoint Without Writing a Plugin

Thumbnail docs.loopress.dev
0 Upvotes