Alexander Makarov

Engineer having fun. CTO of Lead of Yii framework. Member of PHP-FIG. Organizer of IT conferences. Coffee enthusiast.

[Alexander Makarov @sam_dark]

Will solve complicated problems of virtually any level: tracking stolen money in blockhains, selecting database engine for specific needs, troubleshooting, making systems stable, improving performance, scaling systems, audit etc. High rates.

[The PHP Foundation @ThePHPF]

We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes, and what we need from you to continue this critical work. #php #security https://t.co/gbGTmk7yh1

[Alexander Makarov @sam_dark]

A story behind #PHP vulnerabilities from reporter: https://t.co/PhEPd6v8gQ

[Alexander Makarov @sam_dark]

@OndrejMirtes Good solution overall. Love it. Thanks!

[Alexander Makarov @sam_dark]

@OndrejMirtes Interesting. Have you considered dynamically getting the binary for the current arch on the 1st run and caching it?

[Alexander Makarov @sam_dark]

I love Hugo, ran a blog on it for some time, and it inspired me to create YiiPress. I wanted "templates in PHP" but also "can I make it faster in PHP?"

Finally benchmarked it properly. The answer is "yes, it is faster."

https://t.co/H7MiipUU0S

[Alexander Makarov @sam_dark]

@VotrubaT As a secondary editor besides PhpStrorm. See https://t.co/dJ22JaT4Sz

[Alexander Makarov @sam_dark]

⏩ Re-benchmarked different ways to serve PHP. https://t.co/um9sQy2nxW

[Alexandre Daubois @alexdaubois]

PDO::prepare() does not prepare anything on the server by default in #PHP. 🔐

mysql_driver.c sets H->buffered = H->emulate_prepare = 1. PDO builds the final SQL itself, client side, and sends ONE query.

That isn't automatically a hole: the emulation escapes according to the connection charset.

That's why charset=utf8mb4 in the DSN is a security setting, not a cosmetic one.

[Alexander Makarov @sam_dark]

@PELock You mean the apps? Maybe.

[Alexander Makarov @sam_dark]

No issue in #Yii 2 was closed without checking it in detail.

[Alexander Makarov @sam_dark]

@taylorotwell Interesting approach; I would see how it goes, but I think the opposite is way better for both maintainer and contributor. Another question is what happens to existing issues that are valid... another issue "bankruptcy"?

[Alexander Makarov @sam_dark]

@VotrubaT How to assess if the issue is valid and should be implemented? Relatively easy to trick the agent to introduce security weakness. Releasing automatically in this case isn't a good thing.

[Yii Framework @yiiframework]

We've got a new website: https://t.co/vgddRVFGTt. Enjoy!

[Alexander Makarov @sam_dark]

🎁 samdark/sitemap 3.1.0. Unlike other sitemap packages, this one is memory-efficient and fast.

This release adds support for image sitemaps.

https://t.co/obN10xQsH4

[Alexander Makarov @sam_dark]

@alexdaubois How about httpOnly?

[The PHP Foundation @ThePHPF]

In case you missed it, we launched our first State of PHP survey together with @phpstorm (a JetBrains IDE.) This initiative aims to build a clearer picture of today’s PHP ecosystem. Take the survey and help us map the herd! 👉 https://t.co/yxCzv1eDoW #phpcommunity #stateofphp

[Roman Pronskiy @pronskiy]

The X link-removal RFC didn't pass 🙌
So I updated the Social Media Policy RFC and it's open for feedback: https://t.co/nl157kTKHj

[Alexander Makarov @sam_dark]

@pronskiy @vanamerongen @ThePHPF If you need me and/or Qiang Xue to speak about Yii, let me know.

[exakat, static analysis for PHP @exakat]

The @ThePHPF Survey for 2026 is on: take a moment to ask yourself important #PHP questions, and contribute your observation with the community and the fundation.

https://t.co/jP1q638nOK