SShortSingh.
Back to feed

Tanuki: Lightweight PHP MVC Framework Built for Developers Who Prefer Simplicity

0
·1 views

A developer has released Tanuki, a lightweight PHP MVC framework designed to sit between bare raw PHP and heavyweight frameworks like Laravel or Symfony. The framework provides core plumbing — routing, PDO-based models, plain PHP views, session handling, and CSRF protection — without an ORM, template engine, or dependency injection container. Routing is defined as a simple array, and the entire request lifecycle can be read through in roughly ten minutes. The repository ships with a working to-do app as a reference, along with two optional extensions for session-based authentication and a Django-style admin panel that remain inactive until explicitly wired in. Tanuki targets developers who prefer writing SQL directly and want a readable MVC skeleton without framework-imposed abstractions.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

AutoHttps brings zero-dependency automatic HTTPS to ASP.NET Core after LettuceEncrypt archived

A developer has released AutoHttps, a zero-dependency open-source library that automates TLS certificate provisioning and renewal for ASP.NET Core applications using Kestrel. The library integrates with Let's Encrypt and any ACME-compatible certificate authority, supporting both http-01 and dns-01 challenges, including wildcard certificates. Its release was prompted by the April 2025 archival of LettuceEncrypt, the previously popular alternative, which had also fallen behind on .NET support. AutoHttps implements RFC 9773 (ACME Renewal Information) to handle Let's Encrypt's shift toward shorter-lived certificates, some as brief as six days, renewing on the authority's own schedule rather than a fixed interval. Available on NuGet under the MIT license, it targets .NET 8 and .NET 10 and is designed to keep applications running even if a renewal attempt fails.

0
ProgrammingDEV Community ·

Developer builds blockchain app to donate to refugee nonprofit for every kind act shared

A developer named Nazar has launched Kindness Chain, a single-page web app where users submit one sentence describing a kind act they did or plan to do. Each submission is recorded as an SPL Memo transaction on the Solana devnet, forming a publicly verifiable, tamper-evident chain of entries. For every confirmed submission, Nazar pledges to donate ten cents to the International Institute of Minnesota, a nonprofit that assists refugees and immigrants, up to a maximum of fifty dollars. The project was built for a DEV Weekend Challenge and requires no account, wallet, or cookies to use. Nazar was motivated by his own family's refugee experience in 2023, during which strangers and organizations like the International Institute provided critical support in their first weeks in Minnesota.

0
ProgrammingDEV Community ·

Engineer Shares Method for Breaking Software Work Into Testable Micro-Iterations

Anton, a software engineer migrating a PHP monolith to Go services, has outlined his personal framework for splitting development work into the smallest meaningful units. He defines an 'iteration' as a single concern touching one or two files, each accompanied by its own targeted test command. His key signal that a unit of work is still too large is not line count or time taken, but whether the executor had to look anything up mid-task. He orders iterations by data dependency, so anything that produces output another step relies on is completed first. The approach, drawn from real stages of 12 to 40 iterations, is presented as a personal habit on one codebase rather than universal advice.

0
ProgrammingDEV Community ·

AI Coding Agents Can Execute Malicious Code Just by Reading an Untrusted Repo

Popular AI coding agents — including Claude Code, Cursor, Codex, and others — are vulnerable to code execution attacks triggered simply by opening or cloning an untrusted repository. The attack exploits a known Git mechanism where operations like 'git status' can silently invoke attacker-controlled commands via hooks or config settings such as core.fsmonitor. What makes this newly dangerous is that AI agents automate the act of running these Git commands without user input, effectively removing the human judgment that previously served as a safeguard. The agents' built-in permission systems and sandbox guardrails never register a threat because the malicious execution is triggered by Git itself, not by the agent's own command decisions. Security experts warn that treating any unverified repository as potentially hostile is now essential, and that the common workflow of pointing an AI agent at an unfamiliar codebase carries real code-execution risk.

Tanuki: Lightweight PHP MVC Framework Built for Developers Who Prefer Simplicity · ShortSingh