SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Tanuki: Lightweight PHP MVC Framework Built for Vanilla PHP Developers

0
·1 views

A developer has released Tanuki, a lightweight PHP MVC framework designed for those who prefer writing plain PHP without the overhead of full-stack frameworks like Laravel or Symfony. The framework provides essential plumbing — routing, a thin PDO-based model layer, CSRF protection, session handling, and flash messages — without introducing ORMs, template engines, or dependency injection containers. Views are plain PHP files, routes are defined as simple arrays, and the entire request lifecycle can be read and understood in roughly ten minutes. Tanuki also includes a built-in i18n system using JSON dictionaries and optional URL-prefix-based language switching. A fully functional to-do app is bundled with the repository to serve as a practical learning reference.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

AutoHttps brings zero-dependency automatic HTTPS to ASP.NET Core after LettuceEncrypt archived

A developer has released AutoHttps, a zero-dependency open-source library that automates TLS certificate provisioning and renewal for ASP.NET Core applications using Kestrel. The library integrates with Let's Encrypt and any ACME-compatible certificate authority, supporting both http-01 and dns-01 challenges, including wildcard certificates. Its release was prompted by the April 2025 archival of LettuceEncrypt, the previously popular alternative, which had also fallen behind on .NET support. AutoHttps implements RFC 9773 (ACME Renewal Information) to handle Let's Encrypt's shift toward shorter-lived certificates, some as brief as six days, renewing on the authority's own schedule rather than a fixed interval. Available on NuGet under the MIT license, it targets .NET 8 and .NET 10 and is designed to keep applications running even if a renewal attempt fails.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer builds blockchain app to donate to refugee nonprofit for every kind act shared

A developer named Nazar has launched Kindness Chain, a single-page web app where users submit one sentence describing a kind act they did or plan to do. Each submission is recorded as an SPL Memo transaction on the Solana devnet, forming a publicly verifiable, tamper-evident chain of entries. For every confirmed submission, Nazar pledges to donate ten cents to the International Institute of Minnesota, a nonprofit that assists refugees and immigrants, up to a maximum of fifty dollars. The project was built for a DEV Weekend Challenge and requires no account, wallet, or cookies to use. Nazar was motivated by his own family's refugee experience in 2023, during which strangers and organizations like the International Institute provided critical support in their first weeks in Minnesota.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Engineer Shares Method for Breaking Software Work Into Testable Micro-Iterations

Anton, a software engineer migrating a PHP monolith to Go services, has outlined his personal framework for splitting development work into the smallest meaningful units. He defines an 'iteration' as a single concern touching one or two files, each accompanied by its own targeted test command. His key signal that a unit of work is still too large is not line count or time taken, but whether the executor had to look anything up mid-task. He orders iterations by data dependency, so anything that produces output another step relies on is completed first. The approach, drawn from real stages of 12 to 40 iterations, is presented as a personal habit on one codebase rather than universal advice.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Coding Agents Can Execute Malicious Code Just by Reading an Untrusted Repo

Popular AI coding agents — including Claude Code, Cursor, Codex, and others — are vulnerable to code execution attacks triggered simply by opening or cloning an untrusted repository. The attack exploits a known Git mechanism where operations like 'git status' can silently invoke attacker-controlled commands via hooks or config settings such as core.fsmonitor. What makes this newly dangerous is that AI agents automate the act of running these Git commands without user input, effectively removing the human judgment that previously served as a safeguard. The agents' built-in permission systems and sandbox guardrails never register a threat because the malicious execution is triggered by Git itself, not by the agent's own command decisions. Security experts warn that treating any unverified repository as potentially hostile is now essential, and that the common workflow of pointing an AI agent at an unfamiliar codebase carries real code-execution risk.

0 comments Read more at DEV Community
Tanuki: Lightweight PHP MVC Framework Built for Vanilla PHP Developers · ShortSingh