#php-error-handling

[ follow ]
Information security
fromThe Hacker News
5 hours ago

New PHP Composer Flaws Enable Arbitrary Command Execution - Patches Released

Two high-severity vulnerabilities in Composer could allow arbitrary command execution through command injection flaws in the Perforce VCS driver.
#web-development
Web development
fromTreehouse Blog
6 hours ago

The Difference Between Front End, Back End, and Full Stack Development

Front-end, back-end, and full stack are distinct roles in web development, each with unique responsibilities and technologies.
fromSpeckyboy Design Magazine
2 months ago
Web development

Tips for Streamlining Your Web Development Workflow - Speckyboy

Web development workflows must adapt to project needs and use integrated tools and frameworks to improve productivity and manage complexity.
Web development
fromTreehouse Blog
6 hours ago

The Difference Between Front End, Back End, and Full Stack Development

Front-end, back-end, and full stack are distinct roles in web development, each with unique responsibilities and technologies.
#wordpress
Information security
fromTechCrunch
3 hours ago

Someone planted backdoors in dozens of WordPress plugins used in thousands of websites | TechCrunch

Dozens of WordPress plugins were compromised by a backdoor, distributing malicious code after a change in ownership of the plugin maker.
Information security
fromTechCrunch
3 hours ago

Someone planted backdoors in dozens of WordPress plugins used in thousands of websites | TechCrunch

Dozens of WordPress plugins were compromised by a backdoor, distributing malicious code after a change in ownership of the plugin maker.
Node JS
fromFrontendmasters
1 week ago

What To Know in JavaScript (2026 Edition)

JavaScript's ECMAScript 2025 introduces new iterator methods and improved set functionalities, enhancing performance and usability for developers.
Software development
fromDevOps.com
1 week ago

Why Code Validation is the Next Frontier - DevOps.com

Shared staging environments are inadequate for modern development; isolated, on-demand setups are needed for effective validation.
#jquery
jQuery
fromjQuery Plugins
2 weeks ago

jQuery Terminal - Create Interactive Browser-Based Command Line Interfaces

jQuery Terminal is a jQuery plugin for creating command line interfaces in the browser.
jQuery
fromjQuery Plugins
2 weeks ago

jQuery Terminal - Create Interactive Browser-Based Command Line Interfaces

jQuery Terminal is a jQuery plugin for creating command line interfaces in the browser.
React
fromInfoQ
2 weeks ago

TanStack Start Introduces Import Protection to Enforce Server and Client Boundaries

TanStack Start introduces import protection to prevent server-only and client-only code from leaking into incorrect bundles.
Information security
fromThe Hacker News
1 week ago

Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers

Threat actors exploit HTTP cookies for PHP web shells on Linux servers, enabling remote code execution with stealthy control mechanisms.
#laravel
Python
fromDEV Community
3 weeks ago

I Analyzed the Readability of 10 Popular Developer Documentation Sites

Readability of developer documentation is crucial; many popular docs score below standard readability levels.
Node JS
fromThe Cyber Express
2 weeks ago

Node.js Fixes CVE-2026-21637 And Critical Flaws Now

Node.js has released security updates addressing multiple vulnerabilities, including critical issues in TLS error handling and HTTP request processing.
Software development
fromMedium
4 weeks ago

From Concept to Production: The Complete Guide to XML Prompt Engineering for Software Developers

Treat LLMs as compilers, not chatbots, using Structured XML Prompting to generate professional-grade code through a five-stage AI-assisted development cycle with rigid constraints.
fromInfoWorld
3 weeks ago

We mistook event handling for architecture

Events are essential inputs to modern front-end systems. But when we mistake reactions for architecture, complexity quietly multiplies. Over time, many front-end architectures have come to resemble chains of reactions rather than models of structure. The result is systems that are expressive, but increasingly difficult to reason about.
React
Information security
fromThe Hacker News
3 weeks ago

Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

A critical security flaw in Magento's REST API allows unauthenticated attackers to upload malicious executables, risking code execution and account takeover.
Web development
fromTheregister
4 weeks ago

Brilliant backups landed web developer in big trouble

A website migration oversight caused a two-year disconnect where office staff viewed outdated content due to hardcoded DNS settings, while the client only discovered the issue when accessing the site from the office.
UX design
fromMedium
1 month ago

Claude Code Best Practices

Plan before executing when using Claude Code to avoid spending excessive time fixing errors and redirecting the AI toward correct solutions.
Web design
fromSpeckyboy Design Magazine
1 month ago

How to Use AI To Extend the Functionality of WordPress Plugins - Speckyboy

AI enables WordPress developers to efficiently extend existing plugins with custom features, reducing development time from hours to minutes while maintaining code quality and functionality.
Information security
fromTheregister
1 month ago

Crooks compromise WordPress sites, spread infostealers

Attackers compromised legitimate WordPress sites including a US Senate candidate's website to distribute infostealer malware through fake Cloudflare CAPTCHA pages that trick users into running malicious commands.
Web frameworks
fromThe Hacker News
1 month ago

Fake Laravel Packages on Packagist Deploy RAT on Windows, macOS, and Linux

Malicious Packagist PHP packages disguised as Laravel utilities distribute a cross-platform remote access trojan enabling full system compromise on Windows, macOS, and Linux.
fromSitePoint Forums | Web Development & Design Community
2 months ago

I'm a website freelance builder, how to waste less effort in manual check if feature work

Just learn to vibe code recently, last week I manage to make a small e-com website for pet shop. After adding tons of new product onto website, I notice my vibe agent been shovel out more error. Whenever I fix one things, my vibe gave out like 3 new bugs. I feel exhausted have to manually checking everything and test this check out button working or not.
E-Commerce
fromThedrum
2 months ago

Aston Darby: Improving site speed through development optimisations

Speed is critical to the way users interact with websites. Google research shows that bounce rate increases dramatically the longer a site takes to load on mobile. Those that have a 3-second delay risk an increase of 32%, while those that take up to 10 seconds can expect to see it increase by 123%. When we were hired by investment firm Aston Darby to help with their digital marketing, the slowness of their site was one of the first issues we identified. When we first started with them, the site took around seven seconds to load. By the time we'd implemented our optimisations, that figure dropped to just three seconds.
JavaScript
fromLogRocket Blog
2 months ago

A guide to async/await in TypeScript - LogRocket Blog

TypeScript supports asynchronous programming through promises, async/await, and modern patterns like for await...of, AbortController, and Promise.all for concurrency and cancellation.
Web development
fromInfoWorld
2 months ago

PHP language still relevant, advocate insists

PHP remains widely used and relevant in 2026, powering many websites and integrating well with modern tools and performance improvements.
Artificial intelligence
fromInfoWorld
2 months ago

Output from vibe coding tools prone to critical security flaws, study finds

Popular AI code-generation tools frequently produce insecure code, including critical API authorization and business-logic vulnerabilities, requiring careful debugging and context-aware review.
Information security
fromInfoWorld
1 month ago

Angular releases patches for SSR security issues

Google's Angular team released two security updates for SSR vulnerabilities: a critical SSRF/header injection flaw and a moderate open redirect flaw, requiring immediate patching to prevent authorization header theft and phishing attacks.
fromNedbatchelder
2 months ago

Testing: exceptions and caches

Kacper Borucki blogged about parameterizing exception testing, and linked to pytest docs and a StackOverflow answer with similar approaches. The common way to test exceptions is to use pytest.raises as a context manager, and have separate tests for the cases that succeed and those that fail. Instead, this approach lets you unify them. I tweaked it to this, which I think reads nicely: One parameterized test that covers both good and bad outcomes. Nice.
Software development
fromVue.js Jobs
2 months ago

PHP Developer (Laravel-VueJS) at Octal Philippines Inc. - VueJobs

Fullstack Web Developer required with expertise in PHP/Laravel, Vue.js/React, GCP deployment, database design, API development, security, and healthcare data compliance.
Web frameworks
fromLoicpoullain
1 month ago

The future of web frameworks in the age of AI

AI agents now generate 90-95% of production code, requiring frameworks to be AI-understandable with comprehensive documentation and clear examples to remain competitive.
#react
fromThisweekinreact
2 months ago
React

This Week In React #266: DoS, shadcn, Skills, Rspack, React Aria, TanStack, Remotion, ChartGPU | Expo 55 beta, Hermes, Expo Router, Widgets, CSS, AI, Bootsplash, Detox | TC39, Rolldown, Yarn, Nodde, Mermaid, Unplugin | This Week In React

fromThisweekinreact
2 months ago
React

This Week In React #266: DoS, shadcn, Skills, Rspack, React Aria, TanStack, Remotion, ChartGPU | Expo 55 beta, Hermes, Expo Router, Widgets, CSS, AI, Bootsplash, Detox | TC39, Rolldown, Yarn, Nodde, Mermaid, Unplugin | This Week In React

fromVerou
3 months ago

Web dependencies are broken. Can we fix them? * Lea Verou

Dear JS ecosystem, I love you, but you have a dependency management problem when it comes to the Web, and the time has come for an intervention. No, this is not another rant about npm's security issues. Abstraction is the cornerstone of modern software engineering. Reusing logic and building higher-level solutions from lower-level building blocks is what makes all the technological wonders around us possible. Imagine if every time anyone wrote a calculator they also had to reinvent floating-point arithmetic and string encoding!
Node JS
Web development
fromVue.js Jobs
2 months ago

PHP Developer (Laravel-VueJS) at Octal Philippines Inc. - VueJobs

Fullstack Web Developer required to build and maintain secure, scalable web applications using PHP/Laravel, Vue.js/React, Google Cloud Platform, databases, APIs, and healthcare data security.
fromLogRocket Blog
2 months ago

How to solve package validation pain with Publint - LogRocket Blog

Package validation is the process of verifying that your library is correctly structured, configured, and ready to be consumed by others before you publish it. It's not about checking whether your logic works. That's what tests are for. It's about making sure your package metadata, entry points, module formats, and published files all line up so that consumers can install and use it without unexpected runtime errors.
Node JS
fromSitePoint Forums | Web Development & Design Community
1 month ago

How I excluded specific CSS files from optimization in WordPress using a simple filter

I ran into a situation where some CSS files from Elementor were breaking when optimization/minification was applied globally. Instead of disabling optimization completely, I used a small snippet to exclude only specific CSS files while allowing others to remain optimized. I added this using the Code Snippets plugin and ran it everywhere. Here is the code: add_action('wp_enqueue_scripts', 'bhavin_remove_unused_elementor_css', 100); function bhavin_remove_unused_elementor_css() { // Check if Elementor is active if (!did_action('elementor/loaded')) { return; }
Web development
fromDjango Project
2 months ago

Recent trends in the work of the Django Security Team

We also patched two potential denial-of-service vulnerabilities when handling large, malformed inputs. One exploits inefficient string concatenation in header parsing under ASGI ( CVE 2025-14550). Concatenating strings in a loop is known to be slow, and we've done fixes in public where the impact is low. The other one ( CVE 2026-1285) exploits deeply nested entities. December's vulnerability in the XML serializer ( CVE 2025-64460) was about those very two themes.
Web frameworks
fromSitePoint Forums | Web Development & Design Community
2 months ago

What's the most impactful first step to improve website speed when starting from scratch?

When building or optimizing a website from scratch, performance can easily be overlooked until problems start showing up-slow load times, poor user experience, and lower search rankings. There are many ways to improve website speed, such as image optimization, code minification, caching, choosing better hosting, or using a CDN. For developers and site owners starting fresh, it's often unclear which step delivers the biggest impact
Web development
[ Load more ]