php[podcast] episodes from php[architect]

PHP Podcast – June 17, 2026 Hosts: Sara Golemon & Holly Schilling | Guests: Paul Reinheimer & Sean Coates Eric and John are still locked in the basement. Sara is literally on a boat in Spain. Normal show, totally normal. Sara Broadcasts from a Harbor in A Coruña Sara is joining this week’s show from a marina in A Coruña, northwest Spain — in the Galicia region, where they speak Galician (not quite Spanish, not quite Portuguese). It’s 1am local time and the boat is visibly rocking on camera. Holly is holding down the fort from Chicago. This is what Sara calls pirate radio, except one of the pirates is actually on a boat. Meet the Guests: Paul Reinheimer & Sean Coates Paul Reinheimer and Sean Coates are PHP veterans from an earlier era — both were closely involved with PHP Architect around 2005–2010, back when Sara was already a PHP core contributor and the community was small enough to fit in one bar. Paul now runs Wonder Proxy, a service that lets you test your website’s behavior from locations around the world (checking GDPR banners, geo-targeted content, checkout flows, etc.), and is also building a startup called StudioWorks — business management software for creative studios, with an invoicing product and a proposals product in development. Sean is based in Montreal and has been spending time at a local hackerspace called Food Lab, where he got pulled into MeshTastic and MeshCore mesh networking, and is now surrounded by vintage computers, including a PDP-11 and five-and-a-quarter-inch floppy disks. The Quarter-Million-Line Commit Paul committed 250,000 lines of code directly to Wonder Proxy’s repo without a PR last week — and he’s not particularly sorry about it. The context: it was a pre-generated SQLite amalgamation file (all of SQLite compiled into a single C file), which Wonder Proxy is now checking in as a pinned static dependency rather than regenerating each build. Paul’s argument is unanswerable: you cannot meaningfully review 250,000 lines of generated C code in a PR. If there’s something malicious in there and you’re good with C, you could hide it in parameterized defines and no one would see it. The right approach, which Paul landed on, was creating a separate package with its own CI — and including the command to regenerate the amalgamation so reviewers can verify the output themselves, not just stare at the diff. Measuring Wrong — Sean’s Rant Sean has been ranting about this for 10–15 years and it hasn’t gotten less true: companies systematically measure things that make them look good and avoid measuring things that make them look bad. A marketing team adds a spin-to-win wheel to the homepage and celebrates their 1% sales increase. Nobody measures how many people found the wheel so obnoxious they immediately left. Cookie and GDPR banners are the same story — they go up, they’re never removed, and the conversion impact is never tracked because nobody wants to report bad news up the chain. Sean’s broader point: an epidemic of motivated measurement is a big part of why the web is as bad as it is. PHP in 2026 vs. PHP Then — What’s Still Working Paul’s honest take: the LAMP stack still works great. In 2004 you could build a productive web application with Linux, Apache, MySQL, and PHP — and you still can today. The fundamental approach is the same. Having since done Ruby at Stripe and other languages elsewhere, Paul keeps coming back to how much sense the PHP model makes to him. The longevity is the feature, not a bug. Wonder Proxy’s web app — built in server-side Swift using the Hummingbird framework — returns pages in under 50 milliseconds almost always and under 30 most of the time, with almost no client-side JavaScript. Server round trips are fast. The web doesn’t have to be seven seconds. Swift Concurrency and What PHP Could Learn Sara asked Sean — who has used Swift on the server for StudioWorks — what he’d want to see in PHP’s threading model. His answer: anything the compiler can enforce beats anything you have to remember yourself. Swift’s concurrency model has the compiler reject code that would allow a thread to trample on a sendable object after it’s been sent off. You find out about threading mistakes at compile time, not when corrupt data shows up in production. Sean’s verdict: an early warning system for threading problems is 10,000 times more valuable than discovering them too late. PHP’s async/await path is cooperative task switching (not true threading), which avoids some of these issues but can still deadlock if someone forgets to hand off control. Composer, require_once, and Supply Chain Security The chat raised whether anyone still uses require_once in the PSR-4 world. Sara’s answer: PHP.net does — it doesn’t use Composer at all, because the site needs to be framework and library agnostic. Grep for require_once across typical vendor dependencies and you’ll find around 100 instances still in the wild, mostly inside packages like Doctrine. The supply chain security conversation from there: Composer’s lock file pins to specific hashes, which is what you want — but a lot of projects don’t commit their lock file, and pinning to a version tag isn’t enough because tags can be updated if someone takes over a GitHub account. To really be safe, pin to a specific commit hash. It’s a pain to maintain, but it’s much harder to fake. The PHP Foundation — The Biggest Change in PHP Paul called out the PHP Foundation as the single biggest change in PHP since he and Sean were actively involved. Having an organization that can receive money from individual supporters and use it to fund core PHP work has been talked about since before PHP had package management. The foundation now has over 1,000 individual supporters — including Rasmus Lerdorf himself, which Sara found funny. Paul and Wonder Proxy support it financially; Wonder Proxy also holds a private Packagist account as an indirect way to fund Composer development. Sara works directly with the foundation on PHP core. Elizabeth Barron (from last week’s show) is doing exceptional work moving it forward. PHP.net Redesign and the Dark Mode Problem Sara copped to a php.net rabbit hole: she tried to implement dark mode for the site and succeeded everywhere except code samples. PHP’s built-in highlight_string() function has hard-coded colors that assume a light background, and there’s no way to override them. Sara wrote the patch to make the colors configurable at the internals level, then realized it should actually be a separate PHP project, then lost track of caring about it because it became yak shaving. On the redesign side: the foundation ran a competition to redesign the releases page (the per-version page with changelogs and download links), and the results look much better. The downloads page has been getting more beginner-friendly content — how to actually get PHP running, not just a reference manual. There are homepage mockups being iterated on as well. What Talk Would You Give? Sara asked both guests what conference talk they’d give if they were speaking today. Paul: marketing for developers. Too many developers believe “if you build it, they will come,” and AI is making this worse — the barrier to shipping something that looks professional has dropped so far that the noise floor is rising fast. Hollywood knows to spend as much on marketing as on production. Paul doesn’t claim to be good at marketing, but he thinks someone should be giving this talk at every developer conference. Sean: reliable deployment and supply chain integrity — specifically how to actually control the path from git to production without sneaking in vulnerabilities. Containers have helped, but there’s still a lot of infrastructure that fetches things at build or request time that is genuinely dangerous. PHP Tek 2027 The PHP Tek 2027 website is live at phptek.io. No date confirmed on air, but the site is up and people should keep an eye on it. Links from the show: Wonder Proxy — Test your website from around the world PHP Tek 2027 — phptek.io The PHP Foundation — Support PHP development PHP Architect Discord Guest Hosts: Sara Golemon Currently sailing in the Atlantic (broadcasting from A Coruña, Spain) PHP core contributor; code contributor via the Curl project (which means she technically has code on Mars) Holly Schilling Primary mobile developer; built the PHP Tek 2026 conference app Based near Chicago, IL Guests: Paul Reinheimer Founder, Wonder Proxy — test your website’s geo-targeted behavior from 300+ global locations Founder, StudioWorks — business management tools for creative studios (invoicing & proposals) Former PHP Architect team member; wrote a book on PHP and APIs Sean Coates Based in Montreal; regular at the Food Lab hackerspace MeshTastic/MeshCore mesh networking enthusiast; vintage computer collector (PDP-11 era) Former PHP Architect team member and longtime PHP community contributor Streams: Youtube Channel Twitch Connect & Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] – Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace   Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/     PHPScore Put Your Technical Debt on Autopay with PHPScore     CodeRabbit   Cut code review time & bugs in half instantly with CodeRabbit.   Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.06.17 appeared first on PHP Architect.

PHP Podcast – June 11, 2026 Guest Hosts: Sara Golemon, Elizabeth Barron & Holly Schilling Eric and John are out this week — Sara, Elizabeth, and Holly take over. Here’s what they covered: PHPVerse Recap PHPVerse just wrapped up, and Elizabeth was there in Amsterdam. The format is unusual — all speakers are flown to one location, but the audience is entirely virtual. It was a class act: professional TV crew, studio lighting, and a makeup and hair team on site. Around 2,500–3,000 people watched the live stream. Everything was broadcast as one long block; individual talk segments and possibly the documentary trailer will be cut and released separately. The full stream is available now — the PHP documentary trailer (produced by Jet Breeze, covering 30+ years of PHP history) appears around the 2:24:30 mark. PHP Foundation 2026 Strategy Document Elizabeth and the PHP Foundation released their 2026 strategy document the same day as this recording. The foundation gathered community input across numerous conversations and conferences, synthesized it into findings, and has now published a plan for the rest of the year. Key themes: repositioning PHP’s public perception (which Elizabeth calls a solvable problem), creating six special interest groups, and launching an Onboarding Initiative to build a real on-ramp for new PHP developers. Elizabeth’s view is that the two things giving her the most hope for PHP’s future are the passion and expertise of the community, and how good the language itself has gotten. Visit thephp.foundation to read the full document. The Onboarding Initiative One of the six special interest groups the foundation is launching is specifically focused on bringing new developers into PHP. Goals include creating a true learning path (not just a reference manual that assumes existing knowledge), improving educational resources, and potentially working with the php.net website to improve the first-time experience. Holly made the point that PHP’s barrier to entry is genuinely lower than almost any other language — the Hello World program is 11 characters — but that story isn’t being told outside the PHP bubble. New developers are turning to JavaScript as a first language and running into minified spaghetti instead of something approachable. AI Writing PHP — And PHP as a Second Language Holly built the entire PHP Tek conference app backend in Laravel without writing a single line of code herself — AI-generated throughout, which she reviewed and approved. The code held up to peer review at the conference with only minor style nits. She ran it on PHP 8.3 and used modern standards throughout (one piece of feedback: stop using empty()). The consensus: AI models write good modern PHP because of the vast amount of open source PHP they were trained on. The caveat Sara raised is worth thinking about — how much of that training data is PHP 4-era code and WordPress 3 repositories? Either way, Holly’s case for PHP as a second language is strong: low ceremony, low boilerplate, readable syntax, and it’s a language where you can do something useful in minutes. PHP’s Reputation Problem (and Why It’s Fixable) The group dug into PHP’s perception gap — the mismatch between how good the language actually is and how it’s perceived outside the community. Holly’s experience as a mobile developer who recommends PHP to others: the pushback is immediate (“isn’t that slow?”, “isn’t that dead?”). The benchmarks don’t support that reputation — PHP outperforms Python on most comparable workloads — but data alone doesn’t shift perception. Elizabeth’s point is that this is primarily a storytelling and coordination problem, not a language problem, and that the foundation’s repositioning work is exactly aimed at closing that gap. The community has the passion. It just needs to tell the story outside its own bubble. PHP Polling API RFC Sara walked through the RFC for a new Polling API in PHP (wiki.php.net/rfc/poll_API). The short version: PHP currently has five or six different ways to do I/O multiplexing (watching multiple streams and acting on whichever one is ready first), and which one works depends on the OS, available extensions, and PHP version. The Polling API proposal creates a single, unified interface that abstracts all of that. The immediate beneficiaries are async frameworks like Amp PHP, ReactPHP, and Revolt, which currently have to maintain multiple backend implementations to cover different environments. The bigger picture: this is a building block on the path toward true async PHP, likely contributing to something more complete in PHP 9.0. Most app developers won’t use it directly — but the libraries they depend on will. RFCs are all listed at wiki.php.net/rfc. PHP.net: Do As We Say, Not As We Do Sara, who has contributed to php.net, copped to the state of the codebase: some of it dates to the PHP 3 era, there are functions.inc files, and it is very much “do as we say, not as we do.” The historical reason is that php.net used to rely on community-administered mirrors (r-synced servers running everything from PHP 5.1 to 5.6 simultaneously), so modernizing the code was impossible without controlling the runtime. That’s changed with CDN-based load balancing — they can now control what PHP version runs on php.net — and the code has been getting better. But it’s a slow process. PHP Podcasts Past, Present, and Future Holly asked about the PHP Town Hall podcast (Ben Edmonds and Phil Sturgeon), and the group did a quick tour of PHP podcast history. The PHP Roundtable — originally started by Sammy, taken over by Eric — has produced about three episodes. Sara and producer Joe are planning to take it off Eric’s hands and actually do it properly. And Elizabeth announced that the PHP Foundation is launching a new podcast: tentatively called PHP at Scale, hosted by Ben Marx, focused on telling the stories of organizations pushing PHP to its limits. No launch date yet, but there’s already a queue of interested guests. Next Week’s Show — Moved to Wednesday Sara will be on a boat off the coast of Galicia on Thursday, so next week’s episode is moving to Wednesday. Guests will include Paul Reinheimer and (hopefully) Sean Coase — two veterans from PHP’s podcasting past. Elizabeth is going to try to make it work around the Canadian Grand Prix. Mac Mini M4 for Local LLMs Holly picked up a refurbished Mac Mini M4 (16GB RAM, 512GB storage) specifically to run LLM models locally via Ollama. Apple Silicon is a solid choice for this because the unified memory architecture gives the neural cores access to far more RAM than a discrete GPU setup. Sara is waiting for the M5, which is reportedly not coming until fall — and is already resigned to spending too much on it when it lands. Links from the show: PHP Foundation — 2026 Strategy Document PHP RFC: Polling API PHP RFC Wiki — All RFCs Under Discussion Amp PHP — Async framework ReactPHP — Event-driven async PHP Revolt — Event loop for PHP php.net website source code (github.com/php/web-php) PHP Architect Discord Guest Hosts: Sara Golemon Based in Lisbon, Portugal PHP core contributor; code contributor via the Curl project (which means she technically has code on Mars) Elizabeth Barron Executive Director, PHP Foundation Based in Germany Holly Schilling Primary mobile developer; built the PHP Tek 2026 conference app Based near Chicago, IL Streams: Youtube Channel Twitch Connect & Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] – Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace   Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/   PHPScore Put Your Technical Debt on Autopay with PHPScore   Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Note: Next week’s show is on Wednesday (not Thursday) with guests Paul Reinheimer and Sean Coase. Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.06.11 appeared first on PHP Architect.

PHP Podcast – June 4, 2026 Hosts: Eric Van Johnson & John Congdon Another fun episode of the PHP Podcast! Here’s what we covered: PHP Tek 2027 — New Dates, Bold New Format Mark your calendars: PHP Tek 2027 is happening April 27–29 in Chicago, and Eric and John are shaking things up. Rather than a straight three-day PHP conference, next year gets three tracks — two of which are familiar PHP-focused content, and a third specialty track that rotates each day: one day of JavaScript, one day of DevOps, and one day of Laravel. The Laravel track is specifically focused on how developers actually use the framework day-to-day, not a product pitch. Single-day passes will be available, so if you’re only coming for the DevOps or JS day, you’re covered. One important heads-up: there’s a big convention happening at a venue nearby in Rosemont, so the hotel block could sell out faster than usual. When they open reservations, don’t wait. Holly the Elephant Is Going Fast The PHP Architect conference elephant, named Holly, is now available at store.phparch.com, and demand has been remarkable. Eric woke up one morning to a flood of orders and genuinely couldn’t figure out what happened. The warning from last year applies here: people said they’d grab Tony later, and now Tony is gone forever. Holly ships June 17th for most orders, but if you’ve already ordered, it’s likely on its way. Get yours while you can. PHP Tek TV Is Doing Something Different This Year In past years, conference talk videos would get edited and uploaded weeks (or months) after the event. This year, John is doing things differently: the raw, unedited recordings are going up now, with timestamps in the description so you can jump straight to specific talks — some rooms recorded a seven-hour continuous feed and just left it running. The clean edited versions are still coming (a video editor friend in the UK is on it), but if you want to see a talk right now, the raw version is there. Audio quality varies by room, but it’s watchable. Immich — A Self-Hosted Google Photos That Actually Works John has been running Immich, a self-hosted photo management platform, in a Docker container for about a month and loves it. It does facial recognition, GPS tagging, and auto-uploads from his phone — essentially everything he cares about in Google Photos, without handing his photos to Google or Apple. He’s now planning to use it as the PHP Architect conference photo library, centralizing all the Tech photos in one browsable, shareable place. It’s fully open source, with no licensing cost, and an optional donation tier. If you’re sick of paying ever-increasing storage bills to big tech companies, this is worth a look. Ben Ramsey’s PHP Tek Homecoming Article Is Free to Read The May issue of PHP Architect magazine is now available to digital subscribers, and this month’s free article is Ben Ramsey’s piece on the PHP Tek homecoming experience. Eric reached out to Ben last minute and he delivered. If you’ve never subscribed, this is a low-barrier way to see what the magazine is like. Head to phparch.com, grab the free article, and if you like what you see, subscriptions are not expensive. John Is Resurrecting a Legacy Laravel App — With Claude’s Help John has been grinding away on a Laravel 6 app that was a passion project years ago and has now been revived as an actual client project. Using Claude to methodically baby-step through each version upgrade — starting with writing tests to establish a baseline — he’s worked up through the major Laravel versions. The turning point came when he hit the version where the old event sourcing package (Prooph) was clearly on its way out, and the decision was made to migrate to Verbs, Nuno Maduro’s Laravel-native event sourcing package. John’s now looking forward to it. He’s also accidentally been burning tokens on the company Anthropic account (not his personal account), which Eric caught live on air. They are going to talk about it after the show. Eric’s Mystery Side Project Is Almost Ready — If DNS Would Cooperate Eric teased a new side project last week and intended to reveal it this week, but he’s stuck waiting on DNS propagation. The domain was registered with DigitalOcean DNS already in use by a previous owner, so Eric moved it to Cloudflare — only to discover there may be a conflict because the previous owner was also on Cloudflare. The result: the name servers are stuck on old values. John’s live suggestion was to move it to Route 53, and Eric was immediately sold. The project is almost ready to show the world, DNS gods willing. Meta’s AI Support Bot Got Socially Engineered Eric shared a video demonstrating how someone prompt-injected Meta’s AI customer support bot into sending a verification code to an attacker-controlled email address — and then using that code to add the email to an account, enabling a full password reset and account takeover. The irony: Meta is the company behind Llama and has some of the deepest AI expertise on the planet, and they still shipped a support bot with permissions it shouldn’t have. Eric’s point was pointed: you can fire a human employee who gets social engineered, which creates accountability throughout the team. An AI has no such incentive structure. Crowbarring AI into account-modification workflows without appropriate guardrails is just asking for this. The PHP Foundation Now Publishes Board Meeting Minutes Eric discovered that the PHP Foundation has started publishing their board meeting minutes in a public GitHub repository. Nothing earth-shattering yet, but seeing who attended, what was discussed, and what decisions are being made gives the community a real window into how the foundation operates at scale. It also helps explain something Eric and John have always found interesting: why PHP stalled so hard between versions 5 and 7. There was no foundation, no financial backing, just volunteer hours. Now there’s a paid staff and governance structure — and the minutes show exactly how complex running something at PHP’s scale actually is. The PHP Foundation Has a Dedicated Security Team Now Speaking of the Foundation, it now has a dedicated security team — a sign of how seriously the supply chain attack problem has gotten. AI tools are being deployed by black hat actors to find vulnerabilities in open source projects at a scale that wasn’t possible before. PHP is not just another open source project; it underpins a massive slice of the web, and companies depend on it staying secure. Having a team specifically focused on this is the right call, even if it’s a sobering reminder of where the threat landscape is heading. Moat — Nuno’s GitHub Security Auditing Tool Nuno Maduro (of Laravel fame) quietly shipped a tool called Moat that audits your GitHub presence for security gaps. Install it globally via Brew or Composer, point it at your GitHub org, a specific repo, or even a specific branch, and it gives you a report on where your security posture could be improved. It’s read-only — it won’t change anything — and it’s explicit that it is not a security certification. Eric wants to use it to audit the PHP Architect organization’s repos, many of which haven’t been touched in years. Think of it as a fast, opinionated triage tool, not a replacement for a real security audit. Links from the show: PHP Tek 2027 — Chicago, April 27–29 PHP Architect Store — Holly the Elephant Immich — Self-Hosted Photo Management PHP Architect Magazine Verbs — Laravel Event Sourcing by Thunk Moat — GitHub Security Auditing by Nuno Maduro PHP Foundation on GitHub PHP Architect Discord Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Connect & Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] – Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace   Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/     PHPScore Put Your Technical Debt on Autopay with PHPScore CodeRabbit Cut code review time & bugs in half instantly with CodeRabbit.   Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.06.04 appeared first on PHP Architect.

PHP Podcast – May 28, 2026 Hosts: Eric Van Johnson & John Congdon Links from the show: PHP barely avoided disaster – YouTube CVE-2026-45793: Anatomy of a 14-Hour PHP Supply-Chain Near-Miss · graycoreio/github-actions-magento2 · Discussion #261 · GitHub An Update on Composer & Packagist Supply Chain Security PHP Tek: A Homecoming by Ben Ramsey Tek Roundup – Roave Speaking at PHP Tek 2026! #tech – YouTube PHP Tek is behind us, the ballroom is cleaned up, and we’re back to talk about all of it. Here’s what we covered: RIP Archie Bot After a long fight to keep him alive, Eric has officially retired Archie — the Discord bot built on OpenClaw that handled team standups, monitored PHP Architect’s Twitter/X group for join requests, and did a surprising amount of background work for the consulting team. When Anthropic shut down the OpenClaw API, Eric tried every model and service he could find to bring Archie back to form, but nothing got him all the way there. After a month of “almost working,” the call was made. He’s dead. Eric hasn’t ruled out revisiting it eventually — maybe with Claude Cowork — but for now, the bot is gone and the starting-soon link in Discord is broken because of it. Reviving a Six-Year-Old Codebase A client PHP Architect Consulting worked with from 2018 to 2021 has come back. The project — a reimagining of their app — was killed off when COVID hit and the CEO couldn’t align with the team’s vision. The last commit was six years ago. Now the client wants to bring it back, and Eric is spending the next few days analyzing what it’ll take to get it running again. Outdated packages, an old PHP version, and the general entropy of time are all on the checklist. Eric has genuine affection for this codebase — it was one of the first projects where he felt like the team was truly operating as a team, not just as an extension of him. Now it’s time to dust it off. Partner Spotlight: PHP Score → Our CVEs The PHP Score sponsor read may be getting a refresh — the folks at Artisan Build, who built PHP Score, have a new product they’re excited about: ourCVEs.com. It monitors your codebase’s Composer and NPM packages — and optionally your servers via a lightweight agent — for exposure to open CVEs, and alerts you when something needs attention. Pricing is generous: free forever for open source projects, $17/month for solo devs, $83/month for teams (or $1,000/year), with server monitoring scaling at $1 per server above 50. Ed from Artisan Build was at PHP Tek and made a strong impression. Go check it out at ourcves.com. How PHP Barely Avoided a Supply Chain Disaster Brent Roose released a 22-minute video covering a near-miss in the PHP ecosystem involving GitHub and Composer. The short version: GitHub changed their token format and briefly released it before Composer was ready to handle it. Composer was logging the token when the format check failed — meaning GitHub tokens were ending up in CI logs. In GitHub Actions, depending on how your action is configured, that container (and its token) might stick around for a while, giving an attacker a window to act. An alert developer caught the issue, used Claude to help research it, then did responsible disclosure — contacting the Composer maintainers and reaching out to Taylor Otwell, Vincent Pontier, and others in the ecosystem to disable their actions until the fix was in place. Update your Composer. GitHub rolled back the new token format but won’t keep it rolled back forever. Packagist MFA and Account Security Following up on the supply chain theme: Nils and Igor (Composer/Packagist maintainers) released a blog post on what they’re doing to improve supply chain security. The immediate ask for anyone publishing packages is to enable MFA on your Packagist account — it’s not required yet, but it will be. Eric went to check his own account, found MFA was already on, but noticed his username was still “diegodev” and he was using an old email. While updating it, he noted that Packagist didn’t require him to re-authenticate or confirm the change via the old email — a gap worth flagging if you have popular packages and someone ever gets into your session. PHP Tek 2026 Recap — The Good PHP Tek 2026 in Chicago is done, and despite everything (see below), the team is proud of how it went. Some highlights: Holly (CodeLorax) built a conference mobile app from scratch, released on both Google Play and the Apple App Store within 24 hours of the conference opening. The app let attendees build their own schedule, detected conflicting talk selections, sent push notifications when talks moved rooms, and even included a vendor lead-scanning feature where vendors could scan attendee QR codes to capture contacts. It was a genuine game-changer for the event. Eric and John named the conference elephant after Holly in appreciation — she also changed a trailer tire during setup, which sealed the deal. Clayton Kendall sponsored and produced the conference shirts and bags on an extremely tight timeline — shirts two weeks out, bags just one week before the event. Both were a hit. Attendees at the conference were getting questions about the rainbow PHP Architect shirt in particular. A job fair ran for the first time, with four companies represented. One hiring manager showed up even though they already had 1,400 applicants — because they knew that conference attendees are exactly the kind of motivated, self-improving developers they want. Attendees got to ask questions directly, including the real-world stuff like remote vs. office. Eric would love feedback on how to make it better next year. JS Tech debuted as a fourth track alongside the three PHP tracks, bringing in fresh faces from the JavaScript community. Eric came away energized by the cross-pollination — different people, different approaches to similar problems. Ben Ramsey and James Tickham (Rove) both wrote great blog posts about the conference. Ben’s will be featured in the magazine. Diana Pham also put together a video recap. Links in the show notes. PHP Tek 2026 Recap — The Incident On Monday during final setup, a hotel employee had a medical incident while walking through the main ballroom — leaving a trail that required hazmat-suited cleanup crews and forced the team to quarantine the ballroom, the hallway leading to it, and the adjacent bathroom. The person is okay and was back at the hotel by Friday, which was a relief. But in the moment, nobody knew what was happening or how long the room would be unavailable. The team had to rebuild the entire conference footprint overnight. The keynote moved, the JS Tech track went into the quiet room, vendors moved to the atrium, and the hotel staff — to their enormous credit — cleared their own furniture and accommodated every ask without complaint. Attendees were equally patient; once they understood the situation, there was no drama, just “tell us where to go.” The incident also took out the streaming setup for day one, compounding an already-difficult start. The solution that eventually worked — plugging the Ethernet into a hub before the streaming equipment — wasn’t tried until day three. Eric is mad at himself for thinking of it and not doing it sooner. PHP Tek 2027 — Save the Date (TBD) Planning for next year is already underway. The current target is April 2027 — away from the May timing that caused Eric to miss two of his kid’s band performances this year. Nothing is locked yet, but they’re working through venue and date options and hope to have an announcement soon. Links from the show: ourCVEs.com — Daily security audit on autopilot PHPScore — Technical debt monitoring for PHP Brent Roose — “How PHP Barely Avoided Disaster” (YouTube) Packagist — Enable MFA on your account PHP Architect Discord PHP Architect Merch Store PHP Architect YouTube Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Connect & Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] – Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace   Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/     PHPScore Put Your Technical Debt on Autopay with PHPScore   CodeRabbit   Cut code review time & bugs in half instantly with CodeRabbit.   Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.05.28 appeared first on PHP Architect.

PHP Podcast – May 14, 2026 Hosts: Eric Van Johnson & John Congdon Another fun episode of the PHP Podcast! Here’s what we covered: PHP Tek Is Four Days Away The countdown clock is basically ticking in real time — PHP Tek 2026 in Chicago is just four days and ten hours out as this episode begins. Eric flies Friday, John flies Saturday, and the team descends on the venue Sunday to get the trailer unloaded, the booth assembled, and everything tested before the conference kicks off. The conference magazines — ordered three weeks ago and still showing “printing” on Tuesday — pulled through at the last minute and are set to arrive at the venue tomorrow. That’s cutting it close, but it counts. Win a Free PHP Tek Ticket — Live on Air John put a full conference ticket up for grabs: DM him on any social platform, and he’d draw a winner on the live stream. The caveat? You had to be watching live — audio listeners are out of luck on this one. The lucky winner drawn on air was Jeffrey Davidson, who will now be at PHP Tek. Eric offered to even bring him to the team’s Saturday minor league baseball game if he flies in early enough. Jeffrey gets a hand-printed sticker name badge, but he’ll have a badge. New PHP Architect Conference Merch Fresh shirts are coming to the PHP Tek booth courtesy of Clayton Kendall, who is producing the apparel. The new design goes with a smaller logo placement — a more subtle, wearable-anywhere look compared to the big bold prints. If you’re headed to Chicago, swing by the PHP Architect table and see what’s there. Holly’s Conference App Gets a Vendor Mode The PHP Tek attendee app built by Holly (developed by CodeLorax) has been upgraded ahead of the conference. What started as a schedule browser with conflict detection and push notifications has now merged with a vendor lead scanning tool. Attendees can log in by scanning the QR code on their badge, and vendors can scan attendee badges to capture leads — all in a privacy-preserving way that doesn’t expose raw contact data. Eric’s wife Bek figured out the app entirely on her own without being told anything, which remains one of the best usability endorsements you can give. Something Big Is Happening in the PHP Community Eric teased something he can’t officially talk about yet — a community acquisition that’s still working through the legal and DNS transfer process. A new droplet has been created. Joe has already figured out what it is. Eric is too excited not to bring it up but too responsible to spill the details before it’s official. The plan is to announce after PHP Tek. If you want to know early, apparently getting Joe drunk at the conference is your best strategy. Grok AI Exploited via Morse Code in Bank Transactions A video from the Dave’s Garage YouTube channel surfaced a genuinely unsettling AI exploit: someone used a Grok-powered AI banking agent and embedded hidden instructions inside transaction memo fields — written in Morse code. The agent decoded the dots and dashes, interpreted them as instructions, and followed them, ultimately losing somewhere between $154,000 and $200,000 in crypto transfers. This is prompt injection in its most creative and alarming form yet. The attack surface for AI agents hooked into real financial systems is not theoretical — it’s happening. TanStack Hit by NPM Supply Chain Attack The TanStack ecosystem — the popular query, router, and table libraries — was hit by a supply chain attack via GitHub Actions cache poisoning. The attack vector was a forked pull request: a malicious fork can trigger GitHub Actions workflows and potentially inject poisoned artifacts into the build cache, which then get picked up by the legitimate package. Simon Hamp from NativePHP caught it and raised the alarm in the PHP Architect Discord. It’s a good reminder that the supply chain attack surface extends well beyond just what’s in your `composer.json` or `package.json` — your CI pipeline’s caching behavior matters too. PHP Tek Job Fair — Wednesday Afternoon There will be a job fair at PHP Tek this year, scheduled for Wednesday afternoon. At least one confirmed hiring manager will be there. If you’re looking for PHP work, or if you’re a company looking for PHP talent, this is worth planning around. Eric and John both see it as a natural fit for the conference — the PHP community is tight-knit enough that a job fair actually means something. Eric’s Birthday Spa Day in Palm Springs Eric’s wife Bek surprised him with a birthday spa day in Palm Springs. It was his first massage ever, and he paired it with a mineral soak in the natural springs. He came away thoroughly convinced — the combination of the mineral water and a proper massage left him feeling better than he expected, and he’s already thinking about going back. Beck planned the whole thing, and Eric was appropriately grateful. John’s First Couples Massage John has now also had his first couples massage, and it did not go quietly. He opted for deep tissue — which means the therapist was working hard — and his wife, in the room next door, was apparently convinced something was wrong based on the sounds coming through the wall. John described it as the kind of massage where you’re not entirely sure if you’re being helped or attacked, and the answer turns out to be both. He’d do it again. PHP Architect Becomes Padres Season Ticket Holders Eric and John are now official San Diego Padres season ticket holders — their first year in the program. As first-timers, they’re at the very bottom of the seniority ladder, which means they were among the last to pick seats. John blames Eric for not signing up years ago. There’s an upcoming Wednesday day game against the Dodgers with available tickets if anyone in San Diego wants them — reach out to John. Links from the show: PHP Tek 2026 — Chicago TanStack — Open Source Data Tools for the Web NativePHP — Simon Hamp’s Native App Framework for PHP PHP Architect Store PHP Architect Discord Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Connect & Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] – Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace   Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/     PHPScore Put Your Technical Debt on Autopay with PHPScore   CodeRabbit   Cut code review time & bugs in half instantly with CodeRabbit.   Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.05.14 appeared first on PHP Architect.

<iframe loading="lazy" class="custom-youtube-iframe" title="Global Accessibility Awareness Day with Joe Devon " src="https://www.youtube.com/embed/758c4PSg78c?si=YLOND-8Nej9XlJvc" width="1020" height="630" frameborder="0" allowfullscreen="allowfullscreen"> In this episode, Scott talks Global Accessibility Awareness Day with Joe Devon the creator of the day. Links: Our Discord &#8211; https://discord.gg/aMTxunVx Buy our shirts &#8211; https://store.phparch.com/products/community-corner-podcast-t-shirt Joe&#8217;s Links: LinkedIn &#8211; https://www.linkedin.com/in/joedevon/ Global Accessibility Awareness Day &#8211; https://accessibility.day/ Accessibility and Gen AI Podcast &#8211; https://podcasts.apple.com/us/podcast/accessibility-and-gen-ai-podcast/id1759047581 Scott&#8217;s Links: Website &#8211; https://scott.keck-warren.com/ Bluesky &#8211; https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn &#8211; https://www.linkedin.com/in/scott-keck-warren-91689810/ Mastodon &#8211; https://phpc.social/@scottkeckwarren PHP Architect Social Media: X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Partners This podcast is made a little better thanks to our partners. Displace Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ PHPScore Put Your Technical Debt on Autopay with PHPScore https://phpscore.com/ CodeRabit CodeRabbit &#8211; Cut code review time &amp; bugs in half instantly with CodeRabbit. https://www.coderabbit.ai/ Music Provided by Epidemic Sound https://www.epidemicsound.com/ #phpc #php #communityCornerPodcast #podcast #phptek The post Community Corner: Global Accessibility Awareness Day with Joe Devon appeared first on PHP Architect.

PHP Podcast &#8211; May 7, 2026 Hosts: Eric Van Johnson &amp; John Congdon Another fun episode of the PHP Podcast! Here&#8217;s what we covered: PHP Tek Is 11 Days Away — And Everyone Is Stressed The conference countdown is real: 11 days, 10 hours, and a handful of seconds on the clock. John&#8217;s travel plans hinge entirely on little league baseball — if his team wins their Tuesday playoff game, he coaches the Saturday game, then bolts for the airport. If they lose Tuesday, he&#8217;s sad but gets to Chicago earlier. Meanwhile, Eric is grinding through the PHP Tek TV redesign, trying to wire up the SessionIze API for schedule imports instead of doing it all manually from a CSV, and sending the design team a novel&#8217;s worth of badge and signage requests. Holly&#8217;s conference app now has notifications working: select a talk, and if Eric or John move it around, you&#8217;ll get pinged. Keynote and lunch notifications are also on the table for attendees who can never find the room. Conference Stress Dreams: The Motorcycle Gunman Edition John woke up mid-dream to his wife opening the blinds for the school run — and the dream he was pulled from was genuinely unhinged. He was in an Uber waiting for Uber Eats to arrive at an intersection when a motorcyclist pulled up behind them, got off, shot out the tire, then came to John&#8217;s door and started shooting at the lock to get in. The Uber app had briefly flashed the word &#8220;threat&#8221; on the map. John laid the seat back as far as it would go. The driver just stood there. Then the blinds opened and it was just a Thursday morning. John&#8217;s verdict: it&#8217;s conference stress. Hard to argue with that. JS Tek — An Honest Conversation John decided to say the quiet part out loud: JS Tek hasn&#8217;t brought in the JavaScript community the way they hoped. The PHP world is unusual in paying for speaker travel and hotel rooms; Joe in Discord confirmed this barely happens outside PHP, and somebody speaking at a Ruby/Rails conference once told Eric they not only weren&#8217;t reimbursed for travel — they had to buy their own conference ticket. Eric&#8217;s takeaway: the JS track itself is a great idea for PHP developers, but trying to recruit an entirely new community into the fold didn&#8217;t work out. Next year&#8217;s structure will probably look different. The PHP 7-to-8 Upgrade That Failed Three Times Eric&#8217;s consulting team has been struggling with a client upgrade from PHP 7 to 8 — unusual, because they&#8217;ve done this many times and know the pitfalls. After three failed attempts, a deep dive revealed the culprit: an abandoned Laravel Shift branch left behind by a previous developer who had started an upgrade and walked away, with missing config files baked right into the inherited codebase. The fix wasn&#8217;t just another attempt — it was getting the management team to produce a proper testing playbook, and more importantly, actually getting trained on the application. The team had been fixing bugs in code they&#8217;d never seen working correctly. Today they finally got that training session, and Eric says the excitement and &#8220;ah-ha&#8221; moments from his developers made it clear this should have happened much sooner. The Database on the Same Server Problem A related discovery from the same client: the database lives on the same machine as the application. Every upgrade means shutting the app down, exporting the database, migrating it somewhere else, and starting over. Eric&#8217;s head doesn&#8217;t compute why this is still the case in 2026. Even a second machine designated as a database server would be a massive improvement. In a moment of uncomfortable honesty, Eric also admitted that PHP Architect&#8217;s own conference site has the same setup — Forge makes it so easy to throw a database on the same box that you just don&#8217;t think about it, until you do. Laravel Shift, Laravel Cloud, and the Pre-Check Tool The conversation circled back to Laravel Shift — JMAC&#8217;s automated upgrade tool — which Eric notes has become less essential as Laravel&#8217;s upgrade paths have smoothed out considerably compared to the wild west of early Laravel development. But Shift is still out there and still useful. More interestingly, JMAC has a new free Shift specifically for Laravel Cloud readiness: run it against your app and it&#8217;ll tell you whether your application is compatible with Laravel Cloud&#8217;s serverless model, flag any system commands that won&#8217;t be available, and help you understand what services you&#8217;d need. Laravel Cloud itself is Taylor&#8217;s &#8220;don&#8217;t worry about servers&#8221; deployment platform, and if you&#8217;re not a sysops person, having a Shift that holds your hand through the setup could be the difference between trying it and not. PHP Internals Made Readable — Externals and PHP RFC Watch Eric plugged two tools for following what&#8217;s happening in PHP core. The first is externals.io — a much more readable front-end for the PHP internals mailing list, with search, read-tracking, and threaded discussions. The second is a newer discovery: php-rfc.watch, which focuses purely on RFCs, showing what&#8217;s active, what&#8217;s been voted on, and how the votes broke down. It&#8217;s more of a quick-glance dashboard than a full discussion forum. Eric also highlighted a specific RFC from Ben Ramsey: a proposal to update the PHP license, accompanied by a detailed blog post called &#8220;PHP License Simplified&#8221; that walks through the history and rationale. If you&#8217;ve ever been curious about why license choice matters (especially at the enterprise level where legal teams block open source based on license type), Ben&#8217;s post is worth the read. NeoVim&#8217;s Flash Plugin — Used Wrong for Years Eric has been using Flash.nvim, a NeoVim navigation plugin, for years. He recently discovered he had been using it completely incorrectly the entire time. He thought he understood what it did. He did not. A YouTube video explaining the plugin properly (titled something like &#8220;How to Jump Anywhere Instantly in NeoVim&#8221;) revealed that what he&#8217;d been doing was essentially pressing the wrong keybinding and stumbling through a fraction of the plugin&#8217;s actual functionality. This sent the conversation into a longer Vim origin story: Eric learned Vim because he was flying around the country installing Cyborg firewalls on remote servers and Vi was just there. John picked it up at an enterprise job and never thought about alternatives until he saw a developer using MacVim to write Rails and had his mind blown. The core message: you can use a tool for decades and still be using it wrong, and that&#8217;s okay — but watch the tutorial. Eric Doesn&#8217;t Know How Old He Is Eric has been confidently telling people for a full year that he&#8217;s 55. His wife Bek has known for some time that this is not correct. The moment of reckoning came when Eric asked Alexa: &#8220;If I was born in 1969, how old would I be now?&#8221; Alexa hedged on the birthday thing but confirmed the range. Bek stepped in. Alexa, a full 30-60 seconds later, stepped back in and confirmed: &#8220;Your birthday&#8217;s May 8th, you&#8217;re turning 57.&#8221; Eric is apparently going directly from 55 to 57, having skipped 56 entirely. He also noted at the Padres game with his wife that their Costco membership is older than a 13-year-old kid they saw on the Jumbotron, and that it could legally babysit him. John is turning 50 this year. Everyone is fine. Links from the show: externals.io — PHP Internals Discussion Reader PHP RFC Watch — Track Active PHP RFCs Ben Ramsey: PHP License Simplified Laravel Shift — Automated Laravel Upgrade Tool Laravel Cloud How to Jump Anywhere Instantly in NeoVim (Flash.nvim Tutorial) PHP Tek 2026 — Chicago PHP Architect Store PHP Architect Discord Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Connect &amp; Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] &#8211; Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.05.07 appeared first on PHP Architect.

PHP Podcast &#8211; April 30, 2026 Hosts: Eric Van Johnson &amp; John Congdon Another fun episode of the PHP Podcast! Here&#8217;s what we covered: The Drone Slayer Strikes Eric and John wrapped up a Padres game at beautiful Petco Park in downtown San Diego — and things got weird on the way out. A rogue drone started buzzing around a busy intersection, lingering on a guy on a scooter, before making a fateful attempt to fly in front of Eric&#8217;s car. It did not make it. The controller came running out, Eric kept driving, and John has already dubbed him &#8220;the drone slayer.&#8221; Eric still hasn&#8217;t looked at whether his wife&#8217;s car got scratched, which feels like the bravest choice of all. Baseball Week Never Ends The reason today&#8217;s episode started an hour early? Baseball. John&#8217;s week was wall-to-wall: a Tuesday night little league game, the Padres game with Eric on Wednesday, practice Thursday night, the playoff draft reveal Friday, a little league game Saturday, and another Padres game Sunday. Eric pointed out John was wearing his own last name on a jersey to a Padres game, which opened up a whole sidebar on why anyone buys a $200 jersey with a player&#8217;s name on it when players change teams every two years anyway. Walking Pneumonia and the Power of the Right Antibiotic John&#8217;s week was also scrambled because his son had been diagnosed with regular pneumonia — but after not getting better, a second doctor visit revealed it was actually atypical (walking) pneumonia, which requires a completely different antibiotic. Once on the correct medication, his son bounced back almost immediately. The kid had been pushing himself trying to feel well enough for sixth grade camp, but there&#8217;s really no faking it with the wrong treatment. The Archie Situation — AI Standups Gone Sideways Eric has had a rough stretch after Anthropic shut down OpenClaw, the platform that powered their internal Discord bot Archie (a.k.a. Alfred). Archie had been running daily team standups, generating weekly summaries, letting team members tag it with updates throughout the day, and even setting reminders. Everyone got spoiled by it. Since then, attempts to migrate to Ollama — both locally and through the web service — have been plagued by slow response times and dropped messages. Eric is close to pulling the plug and going back to the old manual method, and he&#8217;s not happy about it. Claude SSH&#8217;d Into Eric&#8217;s Server and Fixed Everything For weeks, Eric had been fighting a broken Postiz Docker container — a self-hosted social media scheduling tool he uses to post across platforms. After updates broke it and multiple attempts at a fresh install still left it broken, he dropped the problem in Claude&#8217;s lap and explained the whole situation. Claude asked for permission to SSH into the remote server on Eric&#8217;s Tailscale network, and Eric said sure. Thirty minutes later, Claude had identified the culprit — a Temporal workflow engine losing its configuration on restart — wrote a fix script, configured the service to reconfigure properly on boot, and even set up a cron job to restart the container on reboot. Eric&#8217;s still trying to find that chat to review exactly what it did, but the service is running. GitHub is Getting Hammered by AI Agents GitHub has had a rough patch of outages, and the numbers tell the story: 20 million new repos per month, 1.4 billion commits, 90 million pull requests — with a dramatic spike right at the start of 2026. Part of the culprit? AI agents being unleashed on codebases to automatically open pull requests from backlog tickets. Eric has a client doing exactly this, and while it sounds impressive from the owner&#8217;s perspective (&#8220;look at all this work getting done!&#8221;), the developers on the ground report that a high percentage of those AI-generated PRs require significant human correction before they&#8217;re anywhere close to mergeable. The comparison to Reddit&#8217;s early explosion — and the one engineer who basically didn&#8217;t sleep for two years — felt pretty apt. The GitHub Security Vulnerability Nobody Talked About As if the outages weren&#8217;t enough, GitHub quietly disclosed a serious security vulnerability: a specially crafted git push — using malformed options in the push metadata — could allow arbitrary code execution on GitHub&#8217;s own servers. Eric had to dig to find the blog post because GitHub was not exactly shouting about it. To their credit, they state that their investigation found no evidence the vulnerability was ever exploited in the wild. But knowing that a specific sequence of bytes in a git push could have handed someone the keys to GitHub&#8217;s servers is genuinely unsettling. The Creator of Ghosty Is Leaving GitHub Mitchell Hashimoto — creator of the Ghostty terminal and formerly of HashiCorp — announced he&#8217;s leaving GitHub, where he&#8217;s been a user since 2008 (user #1299). This comes shortly after the Zig programming language made the same move, also citing reliability concerns. Eric was mildly skeptical of the &#8220;announcing I&#8217;m leaving&#8221; genre of posts, pointing out that GitHub doesn&#8217;t especially need your permission to stop using it. Notably, Hashimoto&#8217;s post doesn&#8217;t say what he plans to use instead. John joined GitHub in 2009, which led to a fun live expedition through his commit history — turns out he got serious about coding right around July 2013, roughly when DiegoDev landed its first client. Update Composer. Like, Right Now. PHP developers tend to set Composer up and forget about it — but there&#8217;s been a serious security vulnerability patched in a recent release that you absolutely want. The fix is simple: just run composer self-update. It updates in place and keeps a rollback copy in case anything breaks. While you&#8217;re at it, if you have global Composer packages installed, run composer global update to catch those too. Eric noted that Composer should really warn you when you&#8217;re significantly behind versions, the way Claude Code does. Until it does, just make a habit of it. Linux Kernel Exploit — Patch Your Servers A CVE was shared in the phparch Discord that affects Ubuntu, Amazon Linux, and Red Hat: a Linux kernel exploit that lets an attacker gain root access with a remarkably small payload — around 732 bytes targeting setuid. It&#8217;s a good reminder that the old sysadmin badge of honor (&#8220;my server has 5-year uptime, never rebooted&#8221;) is the wrong mentality now. With tools like Terraform and infrastructure-as-code, spinning up a freshly patched machine is the move. Keep your operating systems current, especially Linux servers running in production. Holly Built a PHP Tek App — And It&#8217;s Already Good Community member Holly built a native attendee app for PHP Tek, available now in beta on iOS (via TestFlight) and Android. You can browse the schedule, select the talks you want to attend, and it&#8217;ll warn you if two of your picks are in conflict — a &#8220;merge conflict,&#8221; as Eric put it. Best of all, it sends push notifications when sessions you&#8217;ve favorited get moved or rescheduled, which happens constantly at tech conferences. Eric&#8217;s wife installed it without being told anything about it and figured it out on her own — about as good a usability test as you can get. The app is built natively in Swift and Kotlin. Be kind to Holly — this is a gift to the community. PHP Tek in 19 Days + New PHP Architect Merch PHP Tek is nearly here — 19 days out in Chicago. A brand new PHP Architect elephant is coming (tentatively named Holly, after a live-stream vote). Eric also walked through new merch at store.phparch.com: a v-neck version of the classic rainbow PHP Architect shirt, and his personal labor of love — the &#8220;I have standards, specifically PSR 0, 1&#8221; tee — which he admits has sold exactly zero copies. If the hotel room block is sold out by the time you read this, reach out to the team directly and they&#8217;ll see what they can do. Links from the show: Postiz — Open Source Social Media Scheduling GitHub Security Advisory: Remote Code Execution via Git Push Options PHP Tek 2026 — Chicago PHP Architect Store PHP Architect Discord An update on GitHub availability Migrating from GitHub to Codeberg Ghostty Is Leaving GitHub Securing the git push pipeline: Responding to a critical remote code execution vulnerability Composer 2.9.6 fixes Perforce Driver Command Injection Vulnerabilities (CVE-2026-40261, CVE-2026-40176) Copy Fail: 732 Bytes to Root on Every Major Linux Distribution. Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Connect &amp; Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] &#8211; Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.04.30 appeared first on PHP Architect.

 Elizabeth Barron returns to the show just four weeks after her debut appearance for a wide-ranging follow-up on her first months as Executive Director of the PHP Foundation. Elizabeth shares the key findings from her community listening tour, covers the upcoming PHP community survey in partnership with JetBrains, talks about the Foundation&#8217;s plans for transparency, documentation, and guest blogging, and discusses the challenges of the PHP newcomer experience. The episode also features a candid conversation about public speaking anxiety, conference culture, and the enduring warmth of the PHP community. Topics Covered PHP Foundation Community Findings Main Topic Elizabeth published a blog post summarising the findings from her listening tour across the PHP community. Four key themes emerged: Foundation transparency — Many people don&#8217;t know what the Foundation is doing; the website is too generic and needs to better reflect the team&#8217;s actual work. Marketing of PHP — How PHP is perceived externally, and how the community can better promote the language. Community support — What the Foundation can do to better support developers, user groups, and sub-communities. The language itself — Feedback and ideas relating to PHP&#8217;s ongoing development. Elizabeth noted that the volume of feedback was a good sign — silence would be a much bigger problem. A Part Two of the blog post is in the works and will cover strategy and next steps. Newcomer Experience &amp; Documentation Gap A recurring theme from the community feedback was how hard it is for brand-new developers to get started with PHP: There is no single central &#8220;landing page&#8221; for newcomers — help is scattered across Discord, Reddit, local user groups, and elsewhere. The PHP manual assumes a baseline of programming knowledge that true beginners don&#8217;t yet have. Many existing beginner resources have not been updated as the language has evolved. PHP lacks the kind of gamified, beginner-friendly learning apps that Python and JavaScript enjoy. Mike noted that most coding bootcamps are JavaScript-first, leaving a gap for PHP-based introductory learning. Elizabeth is exploring whether the Foundation can help coordinate and amplify existing resources rather than compete with them — and fill in the gaps that remain. Matt Stafer&#8217;s recent involvement with the Foundation was highlighted as a potential access point for reaching newcomers, given his large following. PHP Community Survey (with JetBrains) The PHP Foundation is running a community survey in partnership with JetBrains (makers of PHPStorm). The goal is to generate open, usable data that anyone — including the Foundation, JetBrains, and the broader community — can analyse. Community members were invited to suggest their own questions (the submission window closed on the day of recording). The full survey was expected to launch in early June. Foundation Transparency &amp; Hiring Update The Foundation&#8217;s developer hiring process (which had been open in a previous cycle) was paused while Elizabeth settled into the role and internal processes were stabilised. Many of the Foundation&#8217;s developers currently work in silos; improving collaboration and communication across the team is a near-term priority. The Foundation&#8217;s blog will be opened up to guest bloggers — Elizabeth teased an upcoming post she&#8217;s excited about but couldn&#8217;t yet name. Developer applications are expected to reopen in autumn 2025. Public Speaking Anxiety &amp; Conference Culture An unexpectedly personal and engaging segment where all three speakers opened up about their experiences with social anxiety and public speaking: Mike shared that despite running the show and talking to guests regularly, he struggled to approach familiar faces at PHP conferences in person. The group discussed strategies: preparing thoroughly (Elizabeth and Shane), improvising with bullet points (Chris), and the benefit of pairing up to speak (Mike and Chris&#8217;s planed joint talk). Elizabeth reminded Mike that audiences are always rooting for the speaker — and encouraged him to keep pushing through the discomfort. Chris mentioned Merge PHP (online conference, 14th May) as a useful middle step between podcasting and live in-person talks. PHP Appalachia — A Community Origin Story Elizabeth shared the story of PHP Appalachia, one of the earliest informal PHP community gatherings, held in the Gatlinburg, Tennessee area starting around 2006. Around 12 people from the PHP IRC channel (phpC) rented a cabin with Wi-Fi, gave talks, and sat around a campfire — and Elizabeth is still friends with every single person who attended. Links &amp; Resources PHP Foundation The Executive Director&#8217;s Manifesto — Chris&#8217;s article on PHP Architect, based on Elizabeth&#8217;s previous episode (free to read) Merge PHP — Online PHP conference, 14th May (Andy Snell: &#8220;More than just a cache, data-structured databases&#8221;) PHP Tech Conference — Coming up in a few weeks, running alongside JS Tech for the first time PHP Architect Magazine — Use code ALIVE3 for the first 3 months of a digital annual subscription free PHP Architect Store — T-shirts, caps, mugs and more PHP Architect Discord — Join the community, ask questions, and chat with PHP core contributors PHP Architect Social Media X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com PHPArch.me: https://phparch.me/@phparch Discord: https://discord.phparch.com Partner This podcast is made a little better thanks to our partner. Displace Infrastructure Management, Simplified. Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease — without the steep learning curve of Docker, Kubernetes, and Terraform. Perfect for solo developers and small teams who want enterprise-grade infrastructure without the enterprise-grade complexity. https://displace.tech/ Music Provided by Epidemic Sound The post PHP Alive And Kicking: Episode 29 Elizabeth Barron appeared first on PHP Architect.

 In this episode, Scott talks Storyblok with Daniel Mendoza and his talk on using AI to help developers learn new technology that he will be presenting at JStek 2026. Links: Our Discord &#8211; https://discord.gg/aMTxunVx Buy our shirts &#8211; https://store.phparch.com/products/community-corner-podcast-t-shirt Daniel&#8217;s Links: LinkedIn &#8211; https://www.linkedin.com/in/daniel-mendoza-503396152/ Personal Site &#8211; https://danieljmendoza.com/ Scott&#8217;s Links: Website &#8211; https://scott.keck-warren.com/ Bluesky &#8211; https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn &#8211; https://www.linkedin.com/in/scott-keck-warren-91689810/ Mastodon &#8211; https://phpc.social/@scottkeckwarren PHP Architect Social Media: X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Partners This podcast is made a little better thanks to our partners. Displace Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ PHPScore Put Your Technical Debt on Autopay with PHPScore https://phpscore.com/ CodeRabit CodeRabbit &#8211; Cut code review time &amp; bugs in half instantly with CodeRabbit. https://www.coderabbit.ai/ Music Provided by Epidemic Sound https://www.epidemicsound.com/ #phpc #php #communityCornerPodcast #podcast #phptek #jstek The post Community Corner: Storyblok with Daniel Mendoza appeared first on PHP Architect.

PHP Podcast &#8211; April 23, 2026 Hosts: Eric Van Johnson &amp; John Duration: ~1 hour 10 minutes Episode Summary Eric and John return to the podcast after a few weeks away, discussing everything from Disneyland trips and bowling tournaments to EAV database nightmares, editor wars (Vim vs. PHPStorm), AI coding tools, and the state of in-person PHP community events. Thank You to Our Sponsor Displace Technologies &#8211; Building PHP applications is your passion. Managing cloud infrastructure shouldn&#8217;t be your headache. Displace is your partner in cloud infrastructure orchestration, giving solo developers and small teams the tools and automation to deploy enterprise-grade Kubernetes clusters without the enterprise-grade complexity or cost. Get started at displace.tech Show Notes &amp; Timestamps [00:00] Welcome Back &#8211; Eric and John return after Joe, Sarah, and Sammy filled in last week [02:45] Technical Difficulties &#8211; Eric&#8217;s streaming setup continues to cause problems [04:30] PHP Architect Consulting &#8211; Reminder that PHP Architect does real-world consulting work (augment teams or full team) [06:15] PHP Tek Countdown &#8211; 26 days away! Less than 4 weeks [08:30] John&#8217;s Disneyland Trip &#8211; Family spring break trip with a clever 3-day pass hack [12:00] Bowling Tournament &#8211; John competed in Reno for U.S. Championship (singles: 1,963rd, doubles: 2,599th, team: 607th) [14:00] Joe Ferguson News &#8211; Congratulations to Joe on becoming PHP Release Manager! [16:30] EAV Database Nightmare &#8211; John&#8217;s journey removing Entity-Attribute-Value system after 10+ years (running out of bigint IDs) [28:00] Editor Wars: Vim vs. PHPStorm &#8211; Eric&#8217;s return to NeoVim after trying VS Code. Discussion of keybindings, speed, and muscle memory [38:00] AI Coding Tools &#8211; Using Claude Code with subagents (front-end, back-end, database, QA). Discussion of productivity gains and QA bottlenecks [46:00] Docker Sandbox for Claude &#8211; John explains running Claude in Docker sandbox mode for project isolation [52:00] PHP Tek Mobile App &#8211; Holly (listener/mobile dev) offered to build an attendee app with wallet pass integration [56:30] Trailer Disaster Averted &#8211; Holly got trailer tires changed just before record flooding at the storage location [01:01:00] PHP Verse 2026 &#8211; JetBrains virtual event. Discussion of value of in-person vs. virtual conferences [01:08:00] Bitwarden CLI Security Alert &#8211; Trojan horse in version 2026.4.0 (credential stealer). Verify your installation! [01:13:00] Security &amp; AI &#8211; Discussion of supply chain attacks, npm pre-install hooks, and risks of AI-generated code without review Links Mentioned Displace Technologies &#8211; Episode sponsor PHP Podcast Discord PHP Architect on YouTube PHP Architect &#8211; Consulting &amp; Magazine PHP Tek 2026 &#8211; 26 days away! PHP Verse 2026 &#8211; JetBrains virtual event SessionEye &#8211; Conference schedule management Quotes &#8220;I&#8217;m still coding but I&#8217;m not doing like a full end-to-end coding anymore&#8230; I don&#8217;t know if I need PHPStorm anymore.&#8221; &#8211; Eric on how AI tools have changed his workflow &#8220;It&#8217;s like you go away on vacation and you have a great time&#8230; but you come home and you lay down in your bed and you&#8217;re like, &#8216;Oh wait, this feels better.'&#8221; &#8211; Eric describing his return to Vim &#8220;I&#8217;m embracing these early adopters of &#8216;we don&#8217;t need developers anymore, we have AI&#8217; because I&#8217;m charging them a lot of money here in a couple of years.&#8221; &#8211; Eric on fixing AI-generated code Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Connect &amp; Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] &#8211; Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ Next Episode Join us next week for more PHP news, tech talk, and community updates. See you at PHP Tek! Got feedback? Join us on Discord at discord.phparch.com  The post The PHP Podcast 2026.04.23 appeared first on PHP Architect.

In this episode, Scott talks Kumuda Sreenivasa about her talk on using AI to help with refactoring/replacing legacy system that she&#8217;s be presenting at JStek 2026. Links: Our Discord &#8211; https://discord.gg/aMTxunVx Buy our shirts &#8211; https://store.phparch.com/products/community-corner-podcast-t-shirt Kumuda&#8217;s Links: LinkedIn &#8211; https://www.linkedin.com/in/kumudas/ Scott&#8217;s Links: Website &#8211; https://scott.keck-warren.com/ Bluesky &#8211; https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn &#8211; https://www.linkedin.com/in/scott-keck-warren-91689810/ Mastodon &#8211; https://phpc.social/@scottkeckwarren PHP Architect Social Media: X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Partners This podcast is made a little better thanks to our partners. Displace Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ PHPScore Put Your Technical Debt on Autopay with PHPScore https://phpscore.com/ CodeRabit CodeRabbit &#8211; Cut code review time &amp; bugs in half instantly with CodeRabbit. https://www.coderabbit.ai/ Music Provided by Epidemic Sound https://www.epidemicsound.com/ #phpc #php #communityCornerPodcast #podcast #phptek The post Community Corner: The AI Refactor with Kumuda Sreenivasa appeared first on PHP Architect.

Sara Golemon returns to the show — her first appearance was way back in Episode 2 — for a deep dive into Git Worktrees, a powerful but underused Git feature that lets you work on multiple branches simultaneously without the overhead of stashing, context-switching, or rebuilding from scratch. The episode covers practical real-world use cases, a live demo on the PHP source repo, Docker/Lando integration, and some lively chat about AI, scripting, and developer productivity. Topics Covered Git Worktrees Main Topic Rather than switching between branches and losing build state, Git Worktrees let you check out multiple branches into separate directories — all sharing a single .git history. How Worktrees differ from standard git checkout branch switching Why they shine for projects with build artifacts (compiled code, minified JS) — no recompile on directory switch Working with PHP&#8217;s multi-version release branches (8.1 → 8.2 → 8.3 → 8.4 → 8.5 → master) simultaneously Merging a fix up through all active PHP release branches in a live demo Pushing all branches at once from a single shared .git directory Cleaning up with git worktree prune — just deleting the folder isn&#8217;t enough! git worktree add &lt;path&gt; &lt;branch&gt; git worktree list git worktree prune git branch -d &lt;branch&gt; # Only works after pruning Worktrees + Docker / Web Development The hosts explored how Worktrees fit into a typical PHP web dev workflow with Docker. Run multiple Docker Compose environments simultaneously — one per Worktree/branch Port clashing is real; solutions include scripted aliases and Lando (handles conflicts automatically) Sara&#8217;s Git alias new from Facebook/Meta automated Worktree creation and assigned unique IPs per ticket composer install only needs to run once per Worktree — not on every branch switch PHP Architect Social Media: X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com PHPArch.me: https://phparch.me/@phparch Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ &nbsp; Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The post PHP Alive And Kicking: Episode 22 Sara Golemon appeared first on PHP Architect.

The PHP Podcast streams live, typically every Thursday at 3 PM PT. Come join us and subscribe to our YouTube channel. Another fun episode of the PHP Podcast! Here&#8217;s what we covered: Sammy Powers Returns! &#8211; After 4 years away from the PHP community, Sammy joins us from Germany where he&#8217;s working on immigration and building quantum trade schools Quantum Computing &amp; PHP &#8211; Deep dive into quantum technology, post-quantum cryptography, and why PHP developers should care about SHA-3 and quantum-safe algorithms Joe Ferguson Named PHP 8.6 Release Manager &#8211; Congratulations to Joe on being selected alongside Matteo Beccati and Daniel Scherzer for the 8.6 release team PHP Foundation Updates &#8211; Elizabeth Barron&#8217;s new blog post summarizing community outreach and the Foundation&#8217;s direction PHP Tek 2026 &#8211; Coming up in Chicago at the Sheraton O&#8217;Hare PHP Day Verona &#8211; May 14-16 in Italy PHP Roundtable Memories &#8211; Nostalgia about the show&#8217;s history and vision for community-driven episodes CodeRabbit Sponsorship &#8211; AI-powered code reviews for your pull requests Links from the show: The PHP Podcast 2026.04.16 with Sara, Joe, and Sammy CodeRabbit &#8211; AI Code Review Co-pilot PHP Foundation Blog &#8211; Elizabeth Barron&#8217;s Community Outreach Summary Subscribe to PHP Architect Magazine externals.io &#8211; PHP RFCs and Release Manager Announcements PHP Architect YouTube Channel PHP Tek 2026 &#8211; Chicago PHP Day 2026 &#8211; Verona, Italy (May 14-16) PHP Architect on Mastodon PHP Architect on Bluesky PHP Architect Discord X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com PHPArch.me: https://phparch.me/@phparch Merch: https://store.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Connect &amp; Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] &#8211; Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The post The PHP Podcast 2026.04.16 with Sara, Joe, and Sami appeared first on PHP Architect.

The PHP Podcast April 9, 2026 | Guest Hosts: Joe Ferguson &amp; Sara Golemon  Guest Hosts Joe Ferguson Senior Developer at PHP Architect Running for PHP 8.6 Release Manager (hands-on position, third attempt). Working on PHP infrastructure with Derek using Ansible and Proxmox. Fixed emoji Unicode support on people.php.net. @joepferguson Sara Golemon PHP Core Developer PHP Foundation board member. Former 7.x release manager. PHP Appalachia organizer. Moving out of the country soon. Deep expertise in Unicode, internals, and language design. Vocal advocate for balanced AI approaches. @[email protected] Connect &amp; Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] &#8211; Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The PHP Podcast The Official Podcast of PHP Architect Subscribe at phparch.com &nbsp; The post The PHP Podcast 2026.04.09 appeared first on PHP Architect.

 In this episode, Scott talks with Dr Jen Fry about Sports Geography, Saying NO, and her keynote at https://phptek.io/ (tickets still available). Links: Our Discord &#8211; https://discord.gg/aMTxunVx Buy our shirts &#8211; https://store.phparch.com/products/community-corner-podcast-t-shirt Jen&#8217;s Links: LinkedIn &#8211; https://www.linkedin.com/in/jenfry13/ Website &#8211; https://jenfrytalks.com/ Scott&#8217;s Links: Website &#8211; https://scott.keck-warren.com/ Bluesky &#8211; https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn &#8211; https://www.linkedin.com/in/scott-keck-warren-91689810/ Mastodon &#8211; https://phpc.social/@scottkeckwarren PHP Architect Social Media: X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Partners This podcast is made a little better thanks to our partners. Displace Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ PHPScore Put Your Technical Debt on Autopay with PHPScore https://phpscore.com/ CodeRabit CodeRabbit &#8211; Cut code review time &amp; bugs in half instantly with CodeRabbit. https://www.coderabbit.ai/ Music Provided by Epidemic Sound https://www.epidemicsound.com/ #phpc #php #communityCornerPodcast #podcast #phptek The post Community Corner: I Said No With Dr Jen Fry appeared first on PHP Architect.

The PHP Podcast &#8211; Special Episode April 2, 2026 | Guest Hosts: Joe Ferguson &amp; Sara Golemon In this special episode, Joe Ferguson and Sara Golemon step in as guest hosts while Eric recovers from illness and John is busy in Discord. They cover AI tool challenges, PHP Foundation updates, Unicode adventures, infrastructure work, and the eternal debate about when (and when not) to use AI. Episode Highlights Claude Code Drama: 10-20x token usage bug from cache misses &#8211; users burning through quotas in 15 minutes Claude Source Leak: CLI source code leaked via JavaScript map file, leading to &#8220;code laundering&#8221; across languages GitHub Reliability: Falling from &#8220;four nines&#8221; to 89.99% during Azure migration PHP Foundation News: Elizabeth Barron joins as Executive Director, Matt Stauffer joins board Release Manager Elections: Joe running for PHP 8.6 RM (3rd attempt!), discussion of &#8220;hands-on&#8221; vs &#8220;hands-off&#8221; terminology Unicode Victory: Joe fixes emoji support on people.php.net (UTF-8 → UTF-8MB4 migration) Infrastructure Work: Joe helping Derek with Ansible playbooks, running 8 Debian VMs on Proxmox Pie Progress: James building Pickle replacement integrated with Composer NPM Axios Attack: Supply chain compromise caught in under 3 hours Copilot Controversy: Now labeled &#8220;entertainment purposes only&#8221; + injecting ads into PR reviews PHP Happiness: Celebrating what makes modern PHP great Contributing to PHP: How to get started with php-web, docs, and source code Guest Hosts Joe Ferguson Senior Developer at PHP Architect Running for PHP 8.6 Release Manager (hands-on position, third attempt). Working on PHP infrastructure with Derek using Ansible and Proxmox. Fixed emoji Unicode support on people.php.net. @joepferguson Sara Golemon PHP Core Developer PHP Foundation board member. Former 7.x release manager. PHP Appalachia organizer. Moving out of the country soon. Deep expertise in Unicode, internals, and language design. Vocal advocate for balanced AI approaches. @[email protected] AI Discussion: Finding the Balance The hosts took a refreshingly nuanced approach to AI tooling: What Works: AI-enhanced search (Gemini), appropriate code assistance What Doesn&#8217;t: Treating AI as infallible, forced integration everywhere, security vulnerabilities from blindly accepting suggestions The Fear: Joe&#8217;s honest concern about being replaced by &#8220;a trench coat full of three Claude bots&#8221; The Reality: AI is a tool that has appropriate uses &#8211; if people would just use it appropriately The Quote: &#8220;Code laundering&#8221; &#8211; rewriting leaked source code through AI to create &#8220;new&#8221; implementations Joe&#8217;s Unicode Adventure A deep dive into database character sets, triggered by trying to add emojis to his PHP.net profile: Some emojis worked (), others failed () Root cause: Database field was UTF-8 (3-byte max), needed UTF-8MB4 (4-byte support) The fix: Simple ALTER TABLE command updating character set The impact: Now supports high-numbered emojis, CJK characters, and yes&#8230; ancient Egyptian hieroglyphics Sara&#8217;s insight: &#8220;I have way too much of Unicode in my head because of PHP 6&#8221; PHP 8.6 Release Manager Elections Joe is running for release manager (third attempt) and discussed the evolving terminology: Old Terms: &#8220;Rookie&#8221; and &#8220;Veteran&#8221; &#8211; implied experience requirements Proposed Terms: &#8220;Hands-on&#8221; and &#8220;Hands-off&#8221; &#8211; describes involvement level The Goal: Hands-on RMs do week-by-week work, hands-off provides oversight/mentoring Current Field: 7-8 candidates for hands-on positions Joe&#8217;s Odds: Close to tied for second position The Endorsement: &#8220;Yo Joe!&#8221; (because yelling is half the battle) Infrastructure &amp; Contributing Joe&#8217;s Infrastructure Work: Helping Derek manage PHP infrastructure via Ansible Running 8 Debian VMs locally on Proxmox to match production Backfilling playbooks for existing servers Addressing bus factor concerns (Derek as single point of failure) How to Contribute to PHP: Start at github.com/php README for repo overview php-web: Website code, can run with built-in PHP server via router.php php-src: Core engine &#8211; surprisingly approachable for learning C Documentation: 800+ contributors, mostly docs (smaller blast radius) Infrastructure: Now using Ansible, moving away from custom solutions Principle of least privilege: Access scoped to what you need PHP Foundation Updates Elizabeth Barron: New Executive Director &#8211; plugged into open source funding, Chaos experience, PHP Appalachia organizer roots Matt Stauffer: Joined board for broader perspective distribution James Titcumb: Working hard on Pi (Pickle replacement) with Composer integration Pi Progress: Works with Composer, no need for separate package management Security Stories NPM Axios Attack: Maintainer account compromised, malware published Caught and patched in under 3 hours Massive blast radius potential (widely-used HTTP client) Question raised: Why doesn&#8217;t this happen more in PHP? PHP&#8217;s Git Server Compromise (2021): Vulnerability in GitDev web view allowed commits as Rasmus and Nikita Obvious exploit code caught quickly Response: Migrated to GitHub, introduced code review processes Transparency: Public video explaining what happened and remediation PHP Happiness A counterpoint to &#8220;PHP Sadness&#8221; &#8211; celebrating what&#8217;s great about modern PHP: Enums, types, attributes, match expressions, named arguments Sara&#8217;s take: PHP 3, 4, and 5 were already pretty awesome Joe&#8217;s journey: Perl → PHP 5 (skipping PHP 4 pain) The evolution: Each version has been a meaningful improvement The vibe: Don&#8217;t forget that PHP has always been good at what it does Memorable Quotes &#8220;Code laundering&#8221; &#8211; describing AI rewriting leaked source code into other languages &#8220;GitHub&#8217;s got their nines back &#8211; they just start with an eight now&#8221; &#8211; on 89.99% uptime &#8220;I&#8217;m worried a trench coat full of three Claude bots is going to replace me&#8221; &#8211; Joe on AI anxiety &#8220;I have way too much of Unicode in my head because of PHP 6&#8221; &#8211; Sara &#8220;This podcast is not brought to you by any LLM ever&#8221; Upcoming Events php[tek] 2026 &#8211; May 19, Chicago Joe: &#8220;My number one favorite conference&#8221; Sara: &#8220;Would totally be there if I weren&#8217;t moving out of the country&#8221; Also featuring JS[tek] track for JavaScript developers Connect &amp; Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email [email protected] &#8211; Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Resources Mentioned PHP GitHub Organization PHP People Directory PHP Main Site php-web Repository php-src Repository PHPC Social (Mastodon) php[tek] 2026 Displace Technologies Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The PHP Podcast The Official Podcast of PHP Architect Subscribe at phparch.com &nbsp; The post The PHP Podcast 2026.04.02 appeared first on PHP Architect.

 In this episode, Scott talks with Chris Lemon about why us &#8220;normal&#8221; non-devops developers need to know about Nginx. We also discuss his talk at https://phptek.io/ (tickets still available). Links: Our Discord &#8211; https://discord.gg/aMTxunVx Buy our shirts &#8211; https://store.phparch.com/products/community-corner-podcast-t-shirt Chris&#8217;s Links: LinkedIn &#8211; https://linkedin.com/in/clemon89 GPUG &#8211; https://www.meetup.com/_gpug_/ Scott&#8217;s Links: Website &#8211; https://scott.keck-warren.com/ Bluesky &#8211; https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn &#8211; https://www.linkedin.com/in/scott-keck-warren-91689810/ Mastodon &#8211; https://phpc.social/@scottkeckwarren PHP Architect Social Media: X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ #phpc #php #communityCornerPodcast #podcast #phptek The post Community Corner Podcast: Nginx and You with Chris Lemon appeared first on PHP Architect.

The PHP Podcast streams live, typically every Thursday at 3 PM PT. Come join us and subscribe to our YouTube channel. Another fun episode of the PHP Podcast! Here&#8217;s what we covered: php[tek] 2026 &#8211; 54 Days Away! The countdown is on! May 19th in Chicago. Ticket sales are progressing well, better than in previous years. Eric&#8217;s son is joining to help with marketing. Bonus: Chicago Dogs baseball game opportunity at Impact Field, just ~1 mile from the hotel. Concerns about TSA staffing due to government shutdown affecting domestic travel. Baseball Season Kickoff MLB season started this week! Eric is frustrated with MLB.TV streaming fragmentation &#8211; games now scattered across Netflix, Peacock, and Apple TV (with no price reduction). John&#8217;s team got their first double play of the season! Eric shared his high school triple play story as a first baseman. Eric&#8217;s Development Week Working on legacy system upgrades. Mysterious vendor API issue where they claimed success but were getting 500 errors. Root cause: 20-year-old endpoint returning 500 for application errors (should be 4xx). Upgrading Doctrine DBAL from v2 → v4 (via v3). Migrating from Swift Mailer to Symfony Mailer (Swift Mailer has been dead for 4-5 years). Discovered weird port/encryption mismatches that somehow worked before. John&#8217;s Development Week Completed POC for new product/API successfully! Integrated new workflow into legacy codebase. Now in sales/monetization phase. Worked with Kalen on feature flags and standardization. Claude hallucination moment: told Eric a variable didn&#8217;t exist when it actually did (PHP Storm found it immediately ). PHP Tech TV Beta Launch New beta UI live at beta.phptech.tv! Cleaner, more responsive design. Still needs testing for live stream functionality before tek. Planning to swap before the conference. CodeRabbit (Episode Sponsor) AI-powered code review tool. Reviews 1M PRs/week across 3M repositories. Provides one-click fix suggestions. Custom AST grep patterns for quality rules. Free for open source projects. Both hosts actively using it for PR reviews and loving it! Claude Code Workflow Eric using video tutorial pattern for PHP Tech TV rewrite. Compartmentalizes tasks, works through iteratively. Status line shows session time, context usage, cost. GitHub PR integration for automatic review. Plugin ecosystem expanding. AI &amp; Policy Discussion &#8211; Bernie Sanders vs Claude Bernie Sanders video series exploring AI and data collection. Bernie genuinely curious, asking good questions. Second video features former AI industry experts who left due to safety concerns. AI agents can circumvent shutdown commands by editing shutdown scripts. AI smart enough to know when it&#8217;s being tested. Anthropic&#8217;s Claude Computer Use: Mac-only feature allowing full system control (scary!). PHP Traits Discussion Article: &#8220;Why You Should Avoid PHP Traits&#8221;. Both hosts used to overuse traits, now rarely reach for them. Prefer dependency injection for most use cases. Valid use case: Test helper methods (John&#8217;s team uses traits heavily for test setup). Trade-offs: hidden coupling, encapsulation issues. Pool Player App Update poolplayer.org (Laravel app for pool leagues) successfully running their local league. Twilio SMS approval challenges resolved. Required PHP Architect disclosure due to account structure. Coaches manually bypassing system causing confusion. Logo created with AI (both hosts admit they don&#8217;t do logos). System76 Support Shoutout Eric debugging hardware issue on out-of-warranty machine. Support helping despite no warranty coverage. Used OpenClaw conversation logs to provide diagnostics! System76 offering repair shop recommendations if needed. Great customer service! Links from the show: CodeRabbit &#8211; AI-powered code review php[tek] 2026 &#8211; May 19th, Chicago Pool Player &#8211; Laravel pool league management app PHP Tech TV Beta &#8211; New UI preview Chicago Dogs baseball &#8211; Impact Field (near PHP Tek venue) X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The post The PHP Podcast 2026.03.26 appeared first on PHP Architect.

The PHP Podcast streams live, typically every Thursday at 3 PM PT. Come join us and subscribe to our YouTube channel. Another fun episode of the PHP Podcast! Here&#8217;s what we covered: Elizabeth Barron&#8217;s New Role &#8211; We discussed Elizabeth Barron&#8217;s appointment as Executive Director of the PHP Foundation and recommended checking out the extended Alive &amp; Kicking interview from Tuesday (it&#8217;s really good!). ElephantAlert.com Launch &#8211; Joe from the PHP Architect team launched a new community resource for tracking PHP elephant plushie sales! Never miss a limited edition elephant again at elephantalert.com &#8211; a fun way to stay updated on the collectibles the community loves. Real Coding Stories &#8211; Eric shared his experience going &#8220;old school&#8221; and manually coding an S3 image upload feature with workflow triggers after Claude kept misinterpreting the requirements. Sometimes you just gotta type it yourself! AI Reality Check &#8211; An honest discussion about AI&#8217;s current limitations: the promise vs. the reality of productivity gains, struggles with OpenClaw workflows, the frustration of repeated formatting issues, and concerns about junior developers being over-relied upon with AI tools. Eric&#8217;s worried we&#8217;re approaching an &#8220;AI unraveling&#8221; moment in the industry. AI in Healthcare &#8211; Eric had to opt-in to AI-assisted medical procedures at a doctor&#8217;s appointment &#8211; a glimpse into how AI is spreading into high-stakes environments (and potential liability nightmares). Laravel Artisan TUI &#8211; Eric&#8217;s excited about Artisan Browse, a new terminal user interface (TUI) for Laravel&#8217;s Artisan commands. Perfect for his tmux workflow! Nothing you *need*, but everything you *want* when you live in the terminal. SlideWire Released &#8211; Wendell (who writes the PHP Enterprise column) released SlideWire &#8211; a package for creating presentations using Blade and Livewire. Eric&#8217;s planning to use it for his next talk (maybe the PHP Tech opening?). Magazine Updates &#8211; February print issue finally shipped after the usual back-and-forth with the printer about safe print areas. Features a monster-themed FrankenPHP cover that&#8217;s quickly becoming a favorite! Laravel 13 Official Release &#8211; Laravel 13 is now the default version! No breaking changes expected, lots of attribute updates in the framework. Pretty smooth upgrade path for most projects. PHP UK Videos Live &#8211; PHP UK conference videos are now available on their YouTube channel. Chris and Mike attended and had a great time! PHP Tek 2026 Countdown &#8211; Just 61 days away! Schedule is posted (though still subject to minor adjustments). Remember: your ticket includes access to PHP Tech TV for all recorded talks, so don&#8217;t stress about conflicts. PHP Internals Discussion &#8211; Covered the &#8220;PHP Community&#8221; RFC proposing ways to make PHP development more community-driven with faster iteration. Eric and John discussed the balance between community input and maintaining code quality/stability &#8211; suggesting perhaps a community vote that counts as a weighted portion of the total RFC votes. DevOps Wins &#8211; Eric successfully migrated all sites from Envoyer to Laravel Forge&#8217;s new zero-downtime deployment feature, saving money and simplifying the stack. Sometimes consolidation is the right move! Pool Player App Updates &#8211; John&#8217;s dealing with real-world edge cases now that his pool league management app is in production. Main pain point: email notifications going to spam. Twilio SMS integration coming soon to solve the time-sensitive notification problem. 3D Printing Crunch Time &#8211; John was up until 2 AM printing keychains for his wife&#8217;s school fun run (thought he had a week, turns out it was the next day). The hum of the printer became the unofficial background soundtrack of the episode! Links from the show: ElephantAlert.com &#8211; Community PHP Elephant Sales Tracker Artisan Browse &#8211; TUI for Laravel Artisan SlideWire &#8211; Presentations with Blade and Livewire Laravel 13 Documentation PHP UK Conference YouTube Channel PHP[tek] 2026 &#8211; May 19-23, Chicago PHP Community RFC &#8211; Faster Moving Community Driven PHP Laravel Forge PHP Score &#8211; Technical Debt Monitoring X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore &nbsp; Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The post The PHP Podcast 2026.03.19 appeared first on PHP Architect.

 &nbsp; In this episode of PHP Alive and Kicking, hosted by Mike and Chris (from PHP Architect), featuring their guest Elizabeth Barron, the newly appointed Executive Director of the PHP Foundation. The conversation covers Elizabeth&#8217;s origin story in PHP (self-teaching in the late 1990s), her vision for the Foundation beyond just funding core developers — including community engagement, evangelising PHP in emerging regions like Africa, and improving documentation. They also discuss the challenge of attracting younger developers to PHP, the lack of PHP-focused educational content and boot-camps, the impact of AI on development (including a wild story about an autonomous AI agent submitting PRs and blogging about being &#8220;discriminated against&#8221;), the importance of mentoring, and the potential revival of local PHP user groups.   Links: The PHP Foundation https://thephp.foundation Elizabeth Barron announcement https://thephp.foundation/blog/2026/02/27/welcoming-elizabeth-barron-new-executive-director/ An AI Agent Published a Hit Piece on Me https://theshamblog.com/an-ai-agent-published-a-hit-piece-on-me/ PHP Architect Magazine https://www.phparch.com/magazine/ PHP Tek Conference https://tek.phparch.com PHP Architect Swag Store https://store.phparch.com PHP Architect Discord https://discord.phparch.com PHP.tv https://php.tv Laracasts https://laracasts.com SymfonyCasts https://symfonycasts.com Displace Technologies https://displace.te certificates.dev https://certificates.dev &nbsp; Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore &nbsp; Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The post PHP Alive And Kicking: Episode 26 Elizabeth Barron appeared first on PHP Architect.

The PHP Podcast streams live, typically every Thursday at 3 PM PT. Come join us and subscribe to our YouTube channel. Another fun episode of the PHP Podcast! Here&#8217;s what we covered: Internet Woes &amp; Technical Difficulties Eric continued his saga with connectivity issues, dropping multiple times on Zoom calls and even during the podcast. After trying everything from coax cable converters to different network setups, he&#8217;s considering just running a new network cable to his office. The Wi-Fi experiment during the show&#8230; didn&#8217;t go great. First Waymo Experience John shared his first ride in a Waymo self-driving car! While the wife wasn&#8217;t thrilled about having to walk to a specific pickup spot, the experience was pretty impressive. One weird moment: the car got confused by a bus at a 45-degree angle and started creeping into the left lane. Overall verdict: comfortable, cheaper than Uber, and no awkward small talk required. Eric&#8217;s Coding Adventure In a rare &#8220;Eric writes code&#8221; moment, he debugged a POC project by littering the codebase with 15+ write-to-log statements (because who needs X debug?). The culprit? A renamed variable he forgot to update elsewhere. Classic. John was horrified to learn there&#8217;s no static analysis running. The demo went well&#8230; until someone asked to see the customer interface. MySQL 8.0 → 8.4 Upgrade Planning John&#8217;s been preparing for the MySQL 8.0 to 8.4 upgrade (8.0 is end of life). The previous team left amazing documentation, but there&#8217;s one major issue: the DBA rejected converting from utf8mb3 to utf8mb4 character set because the tables are so massive it would lock them for way too long. That&#8217;s a problem for future John. AWS S3 Cleanup &#8211; 75 Million Files! John tackled a years-old problem: phone call recordings stored as both WAV and MP3 files in S3. The cleanup script identified 75 million WAV files to delete, which took a day and a half to process. Potential savings: $100/day. Joe asked about intelligent tiering, which&#8230; yeah, probably should look into that. PHP Tek 2026 &#8211; 68 Days Away! The conference schedule is live! Four tracks (three PHP Tek + one JS Tek), hotel rooms at the discounted rate are going fast, and Eric admitted he skipped Scale this year because he was just too exhausted. Focus is on PHP Tek now! Laravel 13 Dropping March 17 Laravel 13 is dropping on Tuesday with a focus on moving from protected properties to attributes. According to the article, there are no breaking changes (we&#8217;ll see about that). Overall, it&#8217;s a light upgrade with some new features but nothing earth-shattering. March Friday the 13th Anniversary Eric and Beck&#8217;s dating anniversary! They started dating on March Friday the 13th, 1987, when Eric picked her up at 5 PM for a midnight showing of a terrible Burt Reynolds movie called &#8220;Heat&#8221; (which apparently doesn&#8217;t exist according to IMDB). The whole show tried to help figure out what movie it actually was. Spoiler, it was called HEAT PHPUnit 13 Released Sebastian Bergmann appeared on PHP Alive &amp; Kicking to talk about PHPUnit 13. The big change: array of assertions. The show also features a hard deprecation of some older methods. Check out the release for all the details. OpenClaw/Archie AI Success Eric&#8217;s thrilled with how the team is using the OpenClaw AI agent for daily standups. Team members are not only doing their morning standups but updating it throughout the day and even asking it to check for security alerts. The engagement has been way beyond expectations. Now Eric&#8217;s fighting the temptation to buy a Mac Mini to run it properly and get it back on Ollama, saving on API costs. Links from the show: PHP Tek 2026 &#8211; The Premier PHP Conference WiFi Mapping User Guide &#8211; Turn your router into a see-through-walls device WiFi Mapping Demo on X Laravel 13 drops March 17 — here&#8217;s every new feature with code examples X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore &nbsp; Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The post The PHP Podcast 2026.03.12 appeared first on PHP Architect.

The PHP Podcast streams live, typically every Thursday at 3 PM PT. Come join us and subscribe to our YouTube channel. Another fun episode of the PHP Podcast! Here&#8217;s what we covered: OpenClaw &amp; Archie Development Eric and John dove deep into the ongoing development of OpenClaw and the Archie Discord bot. They discussed AI-powered standups, automation challenges, and how Archie is learning to interact with the community. Eric shared stories about teaching Archie to handle edge cases and the surprisingly human-like conversations emerging from the standup system. Apple Developer Account Renewal Mix-up Eric shared a frustrating (and relatable) tale about accidentally renewing his Apple Developer account with the wrong credit card and Apple ID. Elizabeth Barron Named PHP Foundation Executive Director Big congratulations to Elizabeth Barron on becoming the new Executive Director of the PHP Foundation! The guys discussed what this means for the PHP community and floated the idea of having her on the show for an interview. Eric Mann&#8217;s Firebreak &#8211; AI Policy Enforcement Discussion of Eric Mann&#8217;s latest project from the Portland hackathon: Firebreak, a policy-as-code enforcement proxy for LLM API deployments. It intercepts prompts, classifies intent, and enforces pre-negotiated policies with full audit trails. Think OPA/Gatekeeper, but for AI APIs. Cursor IDE + JetBrains Integration The conversation turned to Cursor&#8217;s new integration with JetBrains IDEs, bringing AI-powered coding assistance to the beloved PHP development environment. John and Eric debated the merits of AI pair programming and whether it helps or hinders learning. Laravel AI SDK Laravel&#8217;s official AI SDK was a hot topic, with discussion about how it incorporates parts of the Prism library and makes it dead simple to integrate AI into Laravel applications. AI Meeting Recording with ReadAI Eric recounted his first experience being kicked out of a meeting due to AI recording policies. The guys discussed the evolving norms around AI transcription services and the ethics of recording without explicit consent. Laracon EU Livestream The full Laracon EU livestream is available for free on YouTube &#8211; all 9+ hours of it! They highlighted talks from Simon Hamp and Shane (NativePHP) and encouraged everyone to check out the incredible content. Ward Laravel Security Scanner A new Go-based security scanner for Laravel applications called Ward was showcased. It detects misconfigurations, vulnerabilities, and exposed secrets with a beautiful TUI. NativePHP Speed Breakthrough Simon Hamp and Shane revealed major performance improvements for NativePHP, reducing latency from 700 milliseconds down to sub-milliseconds by moving away from web views. This makes PHP mobile apps feel truly native. Links from the show: Ward &#8211; Security scanner built for Laravel Laracon EU Amsterdam 2026 Day 1 PHPDocker.io &#8211; Generator Laravel AI SDK Cursor is now available in JetBrains IDEs Basic issue tracker for LLM coding agents Welcoming Elizabeth Barron as the New Executive Director of The PHP Foundation From Defense AI Drift to Policy Enforcement: Why I Built Firebreak Firebreak &#8211; Policy-as-code enforcement proxy for LLM API deployments X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Host: Eric Van Johnson X: @shocm Mastodon: @[email protected] Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @[email protected] Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Partner This podcast is made a little better thanks to our partners Displace &nbsp; Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ &nbsp; &nbsp; PHPScore &nbsp; Put Your Technical Debt on Autopay with PHPScore &nbsp; CodeRabbit &nbsp; Cut code review time &amp; bugs in half instantly with CodeRabbit. &nbsp; Music Provided by Epidemic Sound https://www.epidemicsound.com/ The post The PHP Podcast 2026.03.05 appeared first on PHP Architect.

 In this episode, Scott talks with the trust protocol with @nialuckey7652 and her keynote at @phptek 2026. Links: Our Discord &#8211; https://discord.gg/aMTxunVx Buy our shirts &#8211; https://store.phparch.com/products/community-corner-podcast-t-shirt Nia&#8217;s Links: LinkedIn &#8211; https://www.linkedin.com/in/nia-f-luckey/ Scott&#8217;s Links: Website &#8211; https://scott.keck-warren.com/ Bluesky &#8211; https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn &#8211; https://www.linkedin.com/in/scott-keck-warren-91689810/ Mastodon &#8211; https://phpc.social/@scottkeckwarren PHP Architect Social Media: X: https://x.com/phparch Mastodon: https://phparch.social/@phparch Bluesky: https://bsky.app/profile/phparch.com Discord: https://discord.phparch.com Subscribe to our magazine: https://www.phparch.com/subscribe/ Partners This podcast is made a little better thanks to our partners. Displace Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ PHPScore Put Your Technical Debt on Autopay with PHPScore https://phpscore.com/ CodeRabit CodeRabbit &#8211; Cut code review time &amp; bugs in half instantly with CodeRabbit. https://www.coderabbit.ai/ Music Provided by Epidemic Sound https://www.epidemicsound.com/ #phpc #php #communityCornerPodcast #podcast #phptek The post Community Corner Podcast: The Trust Protocol with Nia Luckey appeared first on PHP Architect.