Table des matières

Laravel

Laravel The PHP Framework For Web Artisans.

Voir aussi :

Documentation

Discussion:

News

Handbooks & Cheats sheets

Tutoriels/Tutorials

Creating a Multi-User To-Do Application with Laravel JetStream 2020 with Laravel, Jetstream & Livewire

Laravel 5

Tutoriels:

Exemples:

Tutorials:

Fait avec ou pour Laravel

Free

Starters:

CMS :

No Free

Unknow

CMS on top of Laravel

Unmaintened, abandonned

Packages

Mes indispensables

Actuellement pour Laravel 5.x, à voir si ces packages ont survécus :-)

Admin panel

Menus, CRUD & more :

Préférés:

Autres:

Not free:

Unmaintened:

Only templates:

Validation

Voir aussi model validation

CSRF, XSS, SQL ...

Excluding Routes from the CSRF Middleware in Laravel 5.1

Dans la documentation: routing csrf-excluding-uris

It's now super easy to exclude specific routes from your CSRF middleware:
source: https://mattstauffer.co/blog/excluding-routes-from-the-csrf-middleware-in-laravel-5.1

Plus d'information : Excluding Routes from the CSRF Middleware 

// app/Http/Middleware/VerifyCsrfToken
protected $except = [
 'webhook/*'
];

Client side validation

Avec JQuery

Le package proengsoft/laravel-jsvalidation fait la passerelle entre Laravel et “jQuery Validation Plugin” jqueryvalidation. La majorité des règles de validation et ainsi que leurs messages d'erreur sont compatibles, c'est excellent.

Avec Alpine.Js

Rien trouvé. Il y a le micro-framework Ionide mais pas compatible avec Laravel, notamment le format des messages d'erreur.

Avec Vue.js

Pas de réponse à ma question Validation VUE package compatible with Laravel Validator Rules.

Packages à évaluer:

Data, ORM, Eloquent

Boot & initialize Trait

Eloquent peut booter et initialiser les Traits utilisés par les modèles, en utilisant la méthode de nommage boot<Trait> and initialize<Trait>,

https://orkhan.dev/2020/08/17/using-traits-to-boot-and-initialize-eloquent-models/

Model validation

Discussion about Laravel Validation Options – Model, Form Request or Livewire? 2021

On client side (javascript)

Utiliser côté client les règles de validation et messages d'erreurs définis pour les Models.

Autres

ModelForm, Laravel implementation of Django Forms, is a PHP Form Abstraction for Laravel based on Django Forms and Formset.

versions des données

Gérer les versions des données

Divers

Cursor() vs get()

La méthode cursor() au lieu de get() fonctionne vraiment :-)

Comparaison de la consommation mémoire (avec la même requête):

get() cursor()
memory_get_usage 29 360 128 12 582 912

Nested tree

Gestion d'arborescence (Nested tree structure, Nested category) :

import/export & bulk

Doctrine

Doctrine avec Laravel: http://www.laraveldoctrine.org - Problème: à cause de la forte dépendance de Laravel avec Eloquent, les packages externes continueront d'utiliser Eloquent.

SQL View

Authentification

Multi-Auth

Laravel 5.2, you may define additional authentication drivers as well define multiple authenticatable models or user tables, and control their authentication process separately from each other. For example, if your application has one database table for “admin” users and one database table for “student” users, you may now use the Auth methods to authenticate against each of these tables separately.

Authentication Scaffolding

Laravel 5.2: This command will generate plain, Bootstrap compatible views for user login, registration, and password reset. The command will also update your routes file with the appropriate routes.

Note: This feature is only meant to be used on new applications, not during application upgrades. 

php artisan make:auth

Manage User last login datetime

// Migration
$table->dateTime('last_login_at')->nullable();
 
class User {
 ...
    protected $fillable = [
        'name', 'email', 'password','last_login_at'
    ];
    protected $dates = [
        'created_at', 'updated_at', 'last_login_at'
    ];
}
 
class LoginController {
 ...
 function authenticated( Request $request, $user )
 {
   $user->timestamps = false;
   $user->update([
     'last_login_at' => Carbon::now(),
   ]);
 }

OAuth

Laravel Passport est le serveur OAuth officiel.

Autres:

Passing parameters to Middleware

source: https://mattstauffer.co/blog/passing-parameters-to-middleware-in-laravel-5.1

Using parameterized middleware in the route defintion. When you're adding middleware to a route definition, you'd normally set it like this: 

Route::get('company', ['middleware' => 'auth', function () {
    return view('company.admin');
}]);

So, let's add in our parameter to show that the user must have the owner role: 

Route::get('company', ['middleware' => 'auth:owner', function () {
    return view('company.admin');
}]);

Note that you can also pass multiple parameters as a comma-separated list: 

Route::get('company', ['middleware' => 'auth:owner,view', function () {
    return view('company.admin');
}]);

How to disable remember me token ?

Simply overload some methods: 

class User extends BaseModel implements UserInterface, RemindableInterface
{
  ...
  public function getRememberToken(){
    return null; // not supported
  }
 
  public function setRememberToken($value){
    // not supported
  }
 
  public function getRememberTokenName(){
    return null; // not supported
  }
 
  /**
   * Overrides the method to ignore the remember token.
   */
  public function setAttribute($key, $value)
  {
    $isRememberTokenAttribute = $key == $this->getRememberTokenName();
    if (!$isRememberTokenAttribute)
    {
      parent::setAttribute($key, $value);
    }
  }
  ...

Sentinel

https://cartalyst.com/manual/sentinel

A modern and framework agnostic authorization and authentication package featuring:

The package follows the FIG standard PSR-4 (Autoloader) to ensure a high level of interoperability between shared PHP code.

The package requires PHP 5.4+ and comes bundled with a Laravel 5 Facade and a Service Provider to simplify the optional framework integration.

Route

Implicit Model Binding

Laravel 5.2: Implicit Model Binding 

use AppUser; 
Route::get('/user/{user}', function (User $user) {
    return $user;
});

REST API

Simple but usefull RestControllerTrait

Dingo https://github.com/dingo/api/

JWT-auth provides a simple means of authentication within Laravel using JSON Web Tokens

Views

Laravel Mix

Laravel Mix provides a fluent API for defining Webpack build steps for your Laravel application using several common CSS and JavaScript pre-processors.

Components

Laravel Collective

Component Pull

La documentation View Composers présente l'insertion automatique de données dans des vues que je vois comme du “Component Push”. Ça manque d'exemple, notamment le paradigm du “Component Pull” : Exprimer l'insertion d'un composant depuis une vue.

Appeler le “composant” depuis une vue Blade: 

 @inject('navstage', 'NavStage')
 {{ echo $navstage->render() }}.

L'appel @inject() demande au “Service Container” de trouver l'instance d'un objet référencé sous le nom NavStage. Il faut donc que cet objet ai été créer et référencé: 

 // dans App/Providers/AppServiceProvider.php
 public function boot()
 {
  $this->app->singleton('NavStage', function ($app) {
   return new \App\Services\NavStage();
  });
 }

Il faut bien sûr qu'existe la classe \App\Services\NavStage avec une méthode render() (cf. la vue Blade).

Nota bene: l'appel {{ $navstage→render() }} n'imprime pas le résultat de l'appel à render(), il faut donc faire un echo dans la méthode.

Nota bene Dans le cas d'un composant qui n'est pas utilisé dans toutes les requêtes, on va préférer le charger que si besoin : Deferred Providers (aka lazy loading)

Parent component

La directive Blade @aware permet d'accéder aux propriétés du composant parent. Attention, les propriétés par défaut qui ne sont pas explicitement attribuées au tag du composant parent ne seront pas accessibles.

Twig template engine with Laravel

Give the power of Twig to Laravel 4 & 5.

Inertia

https://inertiajs.com/how-it-works

Inertia replaces your application's view layer. Instead of using server-side rendering via Blade templates, the views returned by your application are JavaScript page components. This allows you to build your entire front-end using React, Vue, or Svelte while still enjoying the productivity of Laravel or your preferred server-side framework.

At its core, Inertia is essentially a client-side routing library. It allows you to make page visits without forcing a full page reload. This is done using the <Link> component, a light-weight wrapper around a normal anchor link. When you click an Inertia link, Inertia intercepts the click and makes the visit via XHR instead. You can even make these visits programmatically in JavaScript using router.visit().

Wysiwyg editor

CKeditor laravel package:

Laravel file manager (for CKEditor and TinyMCE) with multi-users support

VUE.js

voir Vue.js

Since many JavaScript frameworks also use “curly” braces to indicate a given expression should be displayed in the browser, you may use the @ symbol to inform the Blade … Blade & JavaScript Frameworks

Divers

Localization

Messages de validation en 52 langues pour Laravel4/5: https://github.com/caouecs/Laravel-lang

Manage translation in database:

Manage translation files:

Translation in Eloquent ORM

Tests & Testing

Others

Command

$this->getOutput()->isQuiet()       - no verbosity is set                                   (no option set)
$this->getOutput()->isVerbose()     - if the level is quiet or verbose                      (-v)
$this->getOutput()->isVeryVerbose() - if the level is very verbose, verbose or quiet        (-vv)
$this->getOutput()->isDebug()       - if the level is debug, very verbose, verbose or quiet (-vvv)

Cache

Cache Lock

Cache Lock appears with Laravel 5.5, only for Redis et Memcached cache driver. It's not in the cache documentation but in Release documentation. 

try {
    $lock = Cache::lock('foo', 10)->block(5);
 
    // Lock acquired after waiting maximum of 5 seconds...
} catch (LockTimeoutException $e) {
    // Unable to acquire lock...
} finally {
    optional($lock)->release();
}

Security

Throttle

Le middleware Illuminate\Routing\Middleware\ThrottleRequests retourne un code HTTP 429 quand le nombre de requêtes dans un nombre de minutes est dépassé. Il utilise le cache Illuminate\Cache\RateLimiter. Pour identifier le client il utilise la méthode fingerprint() de Illuminate\Http\Request.
Malheureusement cette méthode fingerprint() n'utilise que l'IP comme données du client.
Bien qu'il soit impossible de calculer une empreinte sure, j'ai demandé l'ajout du remote port #12872.

Ce bug n'est-il pas réapparu ? Un test unitaire existe-t-il ?

Laravel cookie forgery, decryption, and RCE MWR, 11 April 2014

Infrastructure & serveur

To make default prefixed route working, like /admin or /foo, while a folder with the same name exists, like public/admin or public/foo, should remove the $uri/ from nginx rewriting: 

replace
 location / {
  try_files $uri $uri/ /index.php?$query_string ;
 }
by
 location / {
  try_files $uri /index.php?$query_string ;
 }

Error catcher

informatique/error_services

Avec Sentry.io :

PhpDoc

Merci à Italo Baeza Cabrera pour Laravel: PHPDocs for Models everyone should have 

/**
 * @mixin \Illuminate\Database\Eloquent\Builder
 *
 * @method static \Illuminate\Database\Eloquent\Builder|static query()
 * @method static static make(array $attributes = [])
 * @method static static create(array $attributes = [])
 * @method static static forceCreate(array $attributes)
 * @method \App\Models\User firstOrNew(array $attributes = [], array $values = [])
 * @method \App\Models\User firstOrFail($columns = ['*'])
 * @method \App\Models\User firstOrCreate(array $attributes, array $values = [])
 * @method \App\Models\User firstOr($columns = ['*'], \Closure $callback = null)
 * @method \App\Models\User firstWhere($column, $operator = null, $value = null, $boolean = 'and')
 * @method \App\Models\User updateOrCreate(array $attributes, array $values = [])
 * @method null|static first($columns = ['*'])
 * @method static static findOrFail($id, $columns = ['*'])
 * @method static static findOrNew($id, $columns = ['*'])
 * @method static null|static find($id, $columns = ['*'])
 *
 * @property-read int $id
 *
 * @property string $first_name
 * @property string $last_name
 * @property \Illuminate\Support\Collection|null $favorite_songs
 * @property int $stars
 *
 * @property-read \Illuminate\Support\Carbon $created_at
 * @property-read \Illuminate\Support\Carbon $updated_at
 * @property-read \Illuminate\Support\Carbon $deleted_at
 *
 * @property-read string $full_name
 *
 * @property-read \App\Models\Avatar $avatar
 * @property-read \App\Models\Biography|null $biography
 * @property-read \Illuminate\Database\Eloquent\Collection|\App\Models\Post[] $posts
 *
 * @method \Illuminate\Database\Eloquent\Builder|static age(int $age)
 */

Wordpress and Laravel

Charts & graphs

Package development

Wordpress and Laravel

Charts & graphs

Tools

tinker and tinkerWell

Queue and MQ

Laravel Queue

When the queued job is being pulled out from the queue, the CallQueuedListener will check if it’s using the InteractsWithQueue trait, and if it is, the framework will inject the underlying “job” instance inside.

More about horizon.

RabbitMQ

RabbitMQ

Posts:

Libs: