Quiz: Can you defend against XSS vulnerability?

Nine tricky questions will test your knowledge of escaping in different HTML contexts. And as a bonus – a big comparison of Twig, Blade, Smarty, and Latte will show which templating engine truly protects you and which just creates a false sense of security.

3 years ago  ·  21 minutes to read

Finder 4.0: 10 years of experience under the hood

The completely rewritten Finder brings globstar masks for searching in subdirectories, an extended FileInfo object, a more flexible API for combining criteria and sorting results. Part of the Nette Utils 4.0 package.

3 years ago  ·  4 minutes to read

Nette Utils 4.0: UTF-8, Finder and named arguments

The new version replaces flags with named arguments for a more readable API, introduces an improved UTF-8 mode for regular expressions, and incorporates the rewritten Finder directly into the package. The changes are backward compatible except for a few removed deprecated functions.

3 years ago  ·  5 minutes to read

Nette Http 3.2: change access to credentials

For security reasons, credentials from HTTP Basic Authentication are no longer part of the Url object. They are replaced by the new method `getBasicCredentials()`, which eliminates the risk of accidentally exposing login credentials when outputting a URL.

3 years ago  ·  4 minutes to read

Nette DI 3.1: transition release

The freshly released version uses notices to warn about everything that will change in the next major version. This concerns autowiring of nullable parameters, @return annotations, renaming of configuration keys, and syntax changes in NEON. The article advises how to prepare your code.

3 years ago  ·  2 minutes to read

Prefixes and Suffixes Do Not Belong in Interface Names

Why prefixing interfaces with `I` or suffixing them with `Interface` is an antipattern that obscures OOP principles, adds noise to the code, and complicates refactoring. Arguments that will convince you to change the habit.

4 years ago  ·  16 minutes to read

I-prefixes disappear from interface names

The gradual and quiet removal of the I prefix from Nette interfaces has been underway for several years while fully maintaining backward compatibility. How exactly does the whole process work, why is distinguishing interfaces in names a misstep, and what remains in Nette 4?

4 years ago  ·  5 minutes to read

Latte 3: an impressive leap

A completely rewritten compiler, five years of development, and a result like a dream come true. The new Latte switches to two-step compilation via an AST tree, introduces a formalized grammar of the PHP dialect in tags, and under the hood leverages coroutines for parallel tokenization and parsing.

4 years ago  ·  7 minutes to read

For less screaming in the code

The Nette Coding Style is transitioning class constants from SCREAMING_SNAKE_CASE to PascalCase. The tradition of uppercase letters originates from C and has no justification in PHP. Check out the readability comparison, backward compatibility solutions, and tips for transitioning in your own code.

4 years ago  ·  4 minutes to read

Nette Vite – using Nette with Vite for rapid local development

Stop recompiling with every frontend change. Introducing Vite integration with Nette – loading JS and CSS directly from source, Hot Module Replacement, and a simple helper class for switching between development and production.

4 years ago  ·  10 minutes to read

Dependent selectboxes elegantly in Nette and pure JS

A clean and reusable solution using data attributes and vanilla JS that can handle a cascade of multiple selectboxes. Works even without JavaScript and preserves all the security mechanisms of Nette forms.

4 years ago  ·  8 minutes to read

New plugin NEON Nette Support

A paid plugin for PhpStorm that understands your Nette application – it suggests services, parameters, classes, and methods, handles refactoring across NEON and PHP files, and catches errors through inspections. Lightning fast even in large projects, with a free 30-day trial.

4 years ago  ·  9 minutes to read

Tracy 2.9 and evolution of the iconic screen

After 15 years, the first truly major transformation of the red screen is here. Tabs for switching between Latte and PHP, a modernized call stack, decoupling from native sessions, and elegant creation of files and classes directly from exceptions.

4 years ago  ·  4 minutes to read

Nette Http 3.1: much smarter sessions

The new version brings a smarter autostart that conserves server resources, `set()`, `get()`, and `remove()` methods without the pitfalls of previous approaches, better protection against session ID forgery, and new `$onStart` and `$onBeforeWrite` events for debugging.

5 years ago  ·  6 minutes to read

How to pass app directory paths to services

Instead of repeatedly adding services to your NEON configuration just because of paths like %appDir% or %tempDir%, we'll create a simple DirectoryProvider – a single service that centralizes all directory paths and simplifies your DI configuration.

5 years ago  ·  4 minutes to read

Nette Utils 3.2 with PHP 8.1 support and Type

The new class Nette\Utils\Type fully covers the capabilities of the PHP 8.1 type system, including intersection types. It replaces older reflection methods and can verify type compatibility or create types from string notation. Backported to v3.1 as well.

5 years ago  ·  2 minutes to read

PhpGenerator 3.6: news from PHP 8.1 and more

The new version brings complete support for PHP 8.1 features – enums, readonly properties, intersection types, and final constants. A big bonus is loading classes directly from PHP code without executing it, better handling of traits, and smarter literals with placeholders.

5 years ago  ·  6 minutes to read

Nette Tester 2.4.0 is out

A recap of all changes from patches 2.3.1–2.3.5 plus the new 2.4.0 release: significantly faster code coverage reports, new `Assert::hasKey()` methods, repeatable `-o` option, TestCase method caching for speed, and the ability to skip individual test methods.

5 years ago  ·  5 minutes to read

News in Nette Schema 1.2

Version 1.2 brings skipDefaults() for structures, more precise control over the requirement of nested elements, key type in arrayOf(), structured error messages facilitating translations, and the ability to mark elements as deprecated.

5 years ago  ·  6 minutes to read

News in PhpGenerator 3.5

Full PHP 8 syntax support: constructor property promotion via `addPromotedParameter()`, attributes for classes and their members, union types, and named parameters in generated code. All with practical examples.

5 years ago  ·  3 minutes to read

News in Nette Security 3.1

The new version introduces cookie-based storage that allows you to build websites with login functionality entirely without sessions. In addition, thanks to the IdentityHandler interface, you can easily update roles or other identity details on every request.

5 years ago  ·  6 minutes to read

You've reached the end.