Critical security vulnerability in PrestaShop modules | PrestaShop Developers’ blog
▻https://build.prestashop.com/news/critical-security-vulnerability-in-prestashop-modules
Faille de sécurité dans Prestashop et plusieurs modules : l’attaque semble venir des composants PHPUnit intégrés
(ou : l’utilisation de lib externes dans un projet open-source n’a pas forcément que des avantages...)
Abstracting #WordPress Code To Reuse With Other CMSs: Concepts (Part 1) — Smashing Magazine
▻https://www.smashingmagazine.com/2019/11/abstracting-wordpress-code-cms-concepts
Making our code #CMS as agnostic as possible enables us to easily port our application to another CMS if the need arises. In this article, we will learn how code abstraction works, why it is a good idea, and the key concepts to achieve it.... Create packages, distribute them through #Composer
Tiens tiens...
Et donc on y apprend que Gutenberg a été entièrement porté pour Drupal, notamment :
▻https://www.drupal.org/project/gutenberg
La suite...
In the first part of this series, we learned the key concepts to build an application that is as CMS-agnostic as possible. In this second and final part, we will proceed to abstract a WordPress application, making its code ready to be used with Symfony components, Laravel framework, and October CMS (which is based on Laravel).
▻https://www.smashingmagazine.com/2019/11/abstracting-wordpress-code-reuse-with-other-cms-implementation
Using Composer With WordPress — Smashing Magazine
▻https://www.smashingmagazine.com/2019/03/composer-wordpress
Intégration de Composer dans Wordpress : problèmes techniques et solutions existantes. De nombreuses similitudes avec SPIP mais des solutions déja opérationnelles (entre autre un serveur packagist spécifique)
Laragon - portable, isolated, fast & powerful universal development environment for PHP, Node.js, Python, Java, Go, Ruby.
▻https://laragon.org
Un serveur web de développement opensource sous Windows : « light » (18 Mo), configurable (document root apache, datadir MariaDB) et portable. Intègre PHP, MariaDB, XDebug etc... mais aussi NodeJS et Composer, une appli d’envoi de mail et un « mail catcher ». Génère des vhost en .test et (depuis la v3.3) semble intégrer une génération de certificats SSL internes.
– Versions de PHP 5. et 7. + ajout « simple » d’une nouvelle version : ▻https://forum.laragon.org/topic/166/tutorial-how-to-add-another-php-version
– phpmyadmin n’est pas inclut par défaut : ▻https://forum.laragon.org/topic/98/tutorial-how-to-add-phpmyadmin
Documentation : ▻https://laragon.org/docs et tutoriaux : ▻https://forum.laragon.org/category/5/tutorials
GitHub : ▻https://github.com/leokhoa/laragon
SPIPremix
►https://spip.lerebooteux.fr
La doc de l’essais de James pour pouvoir intégrer Composer dans le développement de SPIP
Et pour une introduction à Composer : voir ►https://getcomposer.org/doc/00-intro.md
...Et tant qu’a rassembler un peu tout ce qui concerne ce projet :
– le fil de discussion sur spip-dev : ▻http://archives.rezo.net/archives/spip-dev.mbox/7CHGDXCWCANP2PW2N25UPBRWBWRLS4ZY
– le script spip_svn_loader :
présentation sur contrib ►https://contrib.spip.net/spip_svn_loader
et son repo git : ►https://github.com/JamesRezo/spip_svn_loader
– spip-cli (qui impose aussi l’usage de Composer) : ►https://contrib.spip.net/SPIP-Cli
#SPIP #composer #POC #développement
#ComposerPHP Release 1.4.0
▻https://github.com/composer/composer/releases/tag/1.4.0
Improved memory usage of dependency solver
—> ▻https://getcomposer.org/doc/articles/autoloader-optimization.md
#php
Global installation of #php tools with #composer
▻https://akrabat.com/global-installation-of-php-tools-with-composer
#shell
composer global require h4cc/phpqatools --dev^^ :-)
@james oui bon ça va hein :p
de mon côté j’ai fait ça pour installer ►https://github.com/thephpleague/geotools
curl -sS https://getcomposer.org/installer | sudo php -- --install-dir=/usr/local/bin --filename=composer
composer global require league/geotools
export PATH=~/.composer/vendor/bin:$PATH
#Composer installation without #github.com (nor #packagist) dependency - like a boss !
▻http://tech.m6web.fr/composer-installation-without-github.html
We chose to use #Satis - a great tool provided by the Composer team. The main idea is, regulary download packages and their informations on our local servers.
Très bon tuto (que je découvre seulement maintenant) et que je n’aurai donc pas besoin d’écrire ;)
#PHP
Setting Up a Local Mirror for #Composer Packages With #Satis
▻http://code.tutsplus.com/tutorials/setting-up-a-local-mirror-for-composer-packages-with-satis--net-36726
#PHP, ouais, toujours ...
#composer
►https://getcomposer.org/doc/00-intro.md
Composer is a tool for dependency management in #php. It allows you to declare the dependent libraries your project needs and it will install them in your project for you.
Tous les pays du monde en #JSON, #CSV et #XML.
▻https://mledoze.github.io/countries
installable via #composer (#PHP)
avec des données géographique en #svg :
▻https://github.com/mledoze/countries/tree/master/data
En licence ODL
via @codepo8
exploitée ici par exemple : ▻http://restcountries.eu
Toran Proxy and the future of #Composer - Jordi Boggiano
▻http://seld.be/notes/toran-proxy-and-the-future-of-composer
Composer and #Packagist remain free to use and fully open source. There is no way that will change. I just hope I can continue to work on them, for the community and supported by the community.
Changement de #modèle_économique ...
#PHP
#Authentication management in #Composer - Jordi Boggiano
▻http://seld.be/notes/authentication-management-in-composer
Jusque là, il y avait une solution sous forme de plugin :
The rise of #Composer and the fall of #PEAR - Fabien Potencier
▻http://fabien.potencier.org/article/72/the-rise-of-composer-and-the-fall-of-pear
it’s probably a good time to remove PEAR support from #PHP itself; and I’m not sure that it would make sense to bundle Composer with PHP.
End of Life for PEAR Installation Method · Sebastian Bergmann
▻https://github.com/sebastianbergmann/phpunit/wiki/End-of-Life-for-PEAR-Installation-Method
Today most users prefer to use a #PHP Archive (PHAR) of PHPUnit or #Composer to download and install PHPUnit.
We are taking the next step in retiring the #PEAR installation method with today’s release of #PHPUnit 3.7.35 and PHPUnit 4.0.17. These two releases are the last versions of PHPUnit released as PEAR packages. Installing them using the PEAR Installer will trigger a deprecation message on every execution of the commandline test runner.