Mark Shust

I explain how PHP actually works under the hood. Architect of the Marko PHP framework ( 25+ years of shipping code. I simplify the complex.

[Mark Shust @MarkShust]

If you patched PHP yesterday, you're not done yet 🚨

php2shell started with an error every PHP dev has seen a thousand times:

"Allowed memory size of 134217728 bytes exhausted"

Here's what actually went wrong, and what the update didn't fix 👇

[Mark Shust @MarkShust]

Another PHP gotcha that bites quietly: strict_types=1 doesn't catch as much as you'd hope, read this: https://t.co/CCuTfCmY9F

[Mark Shust @MarkShust]

You added declare(strict_types=1) to your PHP code, so bad values throw a TypeError, ...right?

Not quite. So many of our PHP files start with that line, but it protects a lot less than most of us think 👇

[Mark Shust @MarkShust]

PHP package authors: a single |> in your code can fatal every user on PHP 8.4!!

PHP 8.5 shipped the pipe operator and clone with almost a year ago, and one line in your composer.json still decides if you can use them 👇

[Mark Shust @MarkShust]

Every other week, I break down how PHP actually works under the hood, like what really happens between a composer.json constraint and a parse error in production.

The newsletter is free, and you can get in on it at https://t.co/Ksx0EgHobb

[Mark Shust @MarkShust]

AI saved us all from ever doing this again 😂

[TheStandupPod @thestanduppod]

How to make a Stackoverflow Post

[Mark Shust @MarkShust]

Got FPM workers stacking up? This one covers why raising pm.max_children can take your server down: https://t.co/wKRhGwXOQ3

[Mark Shust @MarkShust]

Every PHP dev has seen this in their FPM log:

"server reached pm.max_children setting (5), consider raising it"

Most of us raise the number and move on, ...which is how you take a server down 🫠

Here's the math 👇

[Mark Shust @MarkShust]

Your PHP app's second browser tab just hangs until the first request finishes 🤔

Every request with that same cookie is waiting in line for something.

And most of us blame a slow query or throw more FPM workers at it, which does absolutely nothing 👇

[Mark Shust @MarkShust]

Stuff like this session lock is what I dig into: every other week, I figure out what PHP is really doing underneath.

Get the newsletter: https://t.co/adhycLpbIu

[Mark Shust @MarkShust]

@kunalabcdani @typesafeai This is giving me some interesting ideas. It’s kinda like Firebase on steroids. Thanks for sharing.

[Mark Shust @MarkShust]

@toddtimes @harpaljadeja @kunalabcdani @typesafeai McDonald’s has a predefined menu, it’s not endlessly variable, so it would have zero problems achieving the same level of speed here.

[Mark Shust @MarkShust]

@PovilasKorop FDE is more of "all roles in the entire department", and covers the full SDLC. It's extremely demanding.

[Mark Shust @MarkShust]

Well, we'll see about that, Claude. Let's see how many Fable subagents I can spawn off before heading to tennis tonight 😋🤣

[Mark Shust @MarkShust]

I'm model reset rich, biatch. Time to use Fable.

[Mark Shust @MarkShust]

@spacebat @pechynho_

[Mark Shust @MarkShust]

@tdinh_me None of this makes sense, AI costs keep dropping

[Mark Shust @MarkShust]

Just spent a ridiculous amount of time cleaning this thing up 🧼

[Mark Shust @MarkShust]

@JakubBoucek @pechynho_ haha

[Mark Shust @MarkShust]

@artillain @R3DWyvern @pechynho_ Agreed, that's a ridiculous use-case and anyone doing that doesn't understand what sessions are for. But for simple things like auth persistence, I don't see any reason not to use it.