I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
it's pretty nice now, you don't even need a framework
PHP Core Security Audit Results
41–50 of 72 posts
Re: PHP Core Security Audit Results
#42Earlier quoted context omitted.
It's the creator of Laravel, Taylor Otwell
People are calling him savior of PHP. :D
Shame his financial contribution doesn't really match up. $34k is pretty darn low considering how much money Laravel makes. Even worse when you see much smaller operatons like Private Packagist have donated more than Laravel and Symfony combined.
Re: PHP Core Security Audit Results
#43I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
Laravel. My previous employer was using it for casino/sportsbook websites and they were able to scale so much with Laravel micro services.
(They had hundreds of millions of profit)
Re: PHP Core Security Audit Results
#44Huge shout-out to the PHP Foundation for this. Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Some of the recent initiatives from the Foundation ( https://thephp.foundation/blog/2025/03/31/transparency-and-i... ) : - All PHP versions now receive a to…
>>> Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Wow, Automattic itself donated more than half of it: Silver Sponsor $387,500 USD Why many donors with more than USD 24K and USD 100K still listed as Silver sponsor? Source: https://opencollective.com…
It feels pretty off that Laravel and Symfony, arguably the two largest benefactories to PHP being in such a good position have donated so little. Those contribution values are lifetime, Laravel hasn't funded it for over 3 years now, meanwhile its a multimillion dollar business with a huge amount of financial backing.
I know its all donations and not expected, but them kicking in ~$30k a month would realistically be nothing to them, but benefit the PHP foundation massively. The same goes for Symfony.
Re: PHP Core Security Audit Results
#45Earlier quoted context omitted.
Is it true, though? Serious question, I don’t participate much in PHP topics.
It's hyperbole, but like so often, there's a grain of it truth somewhere. Also, like most things, Laravel is built on the shoulders of others. It sometimes makes hard things easy to access (ppl like this) and hides complexity away, clouding how things actually work (ppl don't like this). I primarily use Laravel but like to think I code in a generalist if way as to not get stuck in its system.
Laravel (when it started) was mostly built upon Symphony components, which in turn was inspired by Java frameworks.
Re: PHP Core Security Audit Results
#46I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
If all the other reasons given here don't convince you already, I have one more to offer: Match Expressions[1]! [1]: https://php.watch/versions/8.0/match-expression
That's a great one. On of the things I really enjoy when using Rust.
https://doc.rust-lang.org/reference/expressions/match-expr.h...
Re: PHP Core Security Audit Results
#47I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
It just works and has batteries included.
Yep, nuclear batteries. Laravel and the whole PHP ecosystem is just so much ahead of any other programming language when it comes to building websites and APIs it's insane.
Re: PHP Core Security Audit Results
#48Earlier quoted context omitted.
Crazy that Automattic only makes 4,843,750 a year (and donates 8% to the PHP foundation).
Automattic has annual revenue of over $700m where did you get that number from?
Revenue is not profit.
While the 8% is probably a dig, the donation of .06% of revenue is going to be a much higher proportion of profits. No idea what their profits or margins are (a quick search does not provide useful info)
Re: PHP Core Security Audit Results
#49I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
Because it's good enough for almost everything. The vast majority of projects will never have to scale to billions of users, so hyperscalability is not a huge concern. It has a low barrier to entry and great language features - static typing being one of the big ones. It has become a really nice language over the years, great to work in and in no way less satisfying or effective than for example golang. And, of cours…
> The vast majority of projects will never have to scale to billions of users, so hyperscalability is not a huge concern.
I would have thought PHP would scale very well. It may not be high performance, but its start each request-response cycle from scratch should scale horizontally very well, surely?
Re: PHP Core Security Audit Results
#50I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
TL;DR Your dad's PHP is no longer the current PHP. The language itself has been thoroughly modernized, made more consistent, bug free and performant. There is nothing better than a piece of software that keeps getting improved decade after decade borne out of real developer needs and experience. - Type annotations are integrated and work well with PHP now. This results in a kind of scripty Java OOP that is more succi…
> Your dad's PHP is no longer the current PHP.
I am pretty much in the "your dad" category here. Where best to start learning how PHP has changed since I used it?
There are things that appeal to be about PHP.