This document outlines updates and security fixes for various PHP versions and related frameworks as of January 2019, including notable patches for PHP 5.6, 7.1, 7.2, and 7.3. It also highlights upcoming features in PHP 7.4 and 8, maintenance updates for popular CMSes like Drupal and WordPress, and lists several upcoming PHP conferences. Additionally, it discusses the transition of the Joind.in service to a new foundation and mentions a security breach related to PEAR.

1. The Month in PHP
January 2019
Kansas City PHP User Group

2. PHP Patch Releases
PHP 7.1.26, 7.2.14, 7.3.1 - Upgrade!
● Security fixes
See:
● php.net/ChangeLog-7.php#7.1.2
6
● php.net/ChangeLog-7.php#7.2.1
4
● php.net/ChangeLog-7.php#7.3.1
PHP 5.6.40 - Upgrade!
● Security fixes
See:
● php.net/ChangeLog-5.php#5.6.4
0

3. PHP 7.4 & PHP 8
Official PHP Repo: github.com/php/php-src
● Master branch === PHP 8
○ Ex. github.com/php/php-src/blob/master/UPGRADING
● Dev branch === PHP 7.4
○ Ex. github.com/php/php-src/blob/PHP-7.4/UPGRADING

4. Pear
Pear security breach in go-pear.phar
● Date of Taint: 2019-01-15 - 2019-01-18
● Most PHP users and devs are unaffected
○ Must have used go-pear.phar to build pear stuff, which is not a usual thing.
● pear.php.net was taken down in order to scrub
● Clean version released on 2019-01-22
● See: gist.github.com/ashnazg/f40be76c05da965bc749c914828c0dba
● See: zdnet.com/article/mystery-still-surrounds-hack-of-php-pear-website

5. Joind.in
New Joindin Foundation takes over maintenance of the joind.in service
● Group formed Jan 28, 2019
● Foundation formed Feb 20, 2019
● 501(c)(3) organization
● joindin.wordpress.com/2019/02/04/new-joind-in-leadership-team
● joindin.wordpress.com

6. Upcoming Features via PHP RFC
FFI - Foreign Function Interface
● Target: PHP 7.4
● tl;dr: ever wanted to use raw C in PHP?
● See: wiki.php.net/rfc/ffi

7. Upcoming Features via PHP RFC
Strict typing: Covariant returns and params
● Target: PHP 7.4
● tl;dr: typehint of least->more defined in subclasses
● Note: Complies with the Liskov Principle (the “L” in “SOLID”)
● See: wiki.php.net/rfc/covariant-returns-and-contravariant-parameters

8. Upcoming Features via PHP RFC
Unbundle ext/wddx
● Target: PHP 7.4
● tl;dr: wtf is wddx? Why bundle it at all?
● Note: Deprecated and unbundled in 7.4, moved to PECL in 8.0
● See: wiki.php.net/rfc/deprecate-and-remove-ext-wddx

9. Upcoming Features via PHP RFC
Closure from callable function
● Target: PHP 7.4
● tl;dr: str_split, but for multibyte strings!
● See: wiki.php.net/rfc/mb_str_split
Note: Example ripped directly from the RFC :)
<?php
print_r(mb_str_split("победа", 2));
--EXPECT--
Array
(
[0] => по
[1] => бе
[2] => да
)

10. CMSes: Drupal
Drupal 7.[62, 63], 8.5.[9, 10] & 8.6.[5, 6, 7]
● Security Update
○ Fixes SA-CORE-2019-001
○ Fixes SA-CORE-2019-002
■ Remote execution vulnerability
● 8.6.5 - Patch update
○ drupal.org/project/drupal/releases/8.6.5

11. CMSes: WordPress
WordPress 5.0.3
● Maintenance Release
○
● See: wordpress.org/news/2019/01/wordpress-5-0-3-maintenance-release

12. μFrameworks - Slim 3.12
Slim 3.12
● Now compatible with zendframework/zend-diactoros
○ Continuing on with psr-7 compatibility
● See: slimframework.com/2019/01/15/slim-3.12.0.html

13. Frameworks - CakePHP
CakePHP 3.7.[2,] and 2.10.15
● A bunch of bugfix and maintenance updates
● See:
○ bakery.cakephp.org/2019/01/03/cakephp_372_released.html
○ bakery.cakephp.org/2019/01/21/cakephp_373_released.html
○ bakery.cakephp.org/2019/01/25/cakephp_21015_released.html

14. Frameworks - Laravel
Laravel 5.7.[20, 21, 22, 23, 24]
● Bugfix and maintenance updates
● See: github.com/laravel/framework/blob/master/CHANGELOG-5.7.md

15. Frameworks - Symfony
Symfony 3.4.21, 4.1.[10, 11], 4.2.2- Update!
● Maintenance and bugfixes
● The final update to Symfony 4.1
● See:
○ symfony.com/blog/symfony-3-4-21-released
○ symfony.com/blog/symfony-4-1-10-released
○ symfony.com/blog/symfony-4-1-11-released
○ symfony.com/blog/symfony-4-2-2-released

16. PHP: The Right Way
● Note: Every open-source project can use your help with documentation. What
are you waiting for?
○ See: NomadPHP Lightning Talk: “Your First PR: How to Contribute to Open-Source Projects”
■ youtu.be/a5foPCInZZ0

17. PHP Conferences
MidwestPHP 2019
● March 8-9 - Bloomington, MN
● See: 2019.midwestphp.org
DrupalCon 2019
● April 8-12 - Seattle, WA
● See: events.drupal.org/seattle2019
Longhorn PHP 2019
● May 2-4 - Austin, TX
● See: longhornphp.com
200OK
● May 17 - Tulsa, OK
● See: 200ok.us

18. PHP Conferences - Continued
php[tek] 2019
● May 21-23 - Atlanta, GA
● tek.phparch.com
Flyover Camp 2019
● May 31-June 2 - Kansas City, MO
● CFP due April 1
● flyovercamp.org
WordCamp KC 2019
● June 28-29 - Kansas City, MO
● See: 2019.kansascity.wordcamp.org
KCDC 2019
● July 17-19 - Kansas City, MO
● kcdc.info
Laracon VII
● July 24-25 - New York, NY
● CFP due by ?
● laracon.us
CoderCruise
● August 19-23 - Bahamas
● See: codercruise.com

19. Nomad PHP (Online) - March 21
Nomad PHP EU - 01:00 PM CDT
Migrating from PHP5 to PHP7 Doesn't have
to be Scary
● Andy Beak (@AndyBeak)
● nomadphp.com/live/4XnxzIJLSoUkaGKY
myMmQK/Migrating-from-PHP5-to-PHP7-
Doesn-t-have-to-be-Scary/
Nomad PHP US - 08:00 PM CDT
Building REST APIs that Don't Suck for
Modern Day SPAs
● Adewale Abati (@Ace_KYD)
● nomadphp.com/live/5RlZpCaEJUyi6uAOU
MYceI/Building-REST-APIs-that-Don-t-Suc
k-for-Modern-Day-SPAs/

20. Next Month in KCPHPUG
● Looking for a venue!
● Looking for speakers!
● Hack Night?