Contents
Introduction
Section 1: Auditing
What's Covered?
Planning Your Auditing Strategy
Getting Into the Right Mindset
Recording Your Findings
Automated Tooling
PHP Insights
Enlightn
Larastan
Style CI
Code Coverage
Manual Auditing
Investigating "raw" Database Queries
Finding Incorrect Authorisation
Checking Validation
Finding "Fake Facades"
Finding Business Logic in Helpers
Finding N+1 Queries
Finding Controllers That Use Other Controllers
Finding Logic and Queries in Blade Views
Finding Hard-Coded Credentials
Check Open Package Routes
Reviewing Project Documentation
Section 2: Testing
What's Covered?
Planning Your Testing Strategy
The Benefits of Writing Tests
Spotting Bugs Early
Making Future Work and Refactoring Easier
Changing the Way You Approach Writing Code
Tests-As-Documentation
Prove That Bugs Exist
Structuring Your Tests
Directory Structure
Choosing What To Test
Test Structure
Data Providers
Writing the Tests
Prioritising Mission-Critical Tests First
Writing the Rest of the Tests
Benefits of Writing the Easy Tests First
Preventing Test Fatigue
Testing Your UI with Laravel Dusk
Installation
Testing a Simple Form
Dusk Pages and Selectors
Running Failed Tests and Groups
Creating a CI Workflow Using GitHub Actions
Using an .env.ci File
Running the Test Suite
Larastan
Laravel Dusk
Output
Section 3: Fixing
What's Covered?
Planning Your Fixing Strategy
Using an Error Reporting System
Types of Errors
The Benefits of an Automated Error Reporting System
Error Reporting Using Flare
Uptime Checking, Queue Monitoring, and Scheduler Monitoring
Uptime Monitoring with Oh Dear
Scheduler Monitoring with Oh Dear
Queue Monitoring with Oh Dear
Updating PHP, Laravel, and Packages
Upgrading in Small Increments
Automating the Upgrade Using Laravel Shift
Planning Upgrades Early
Using a Suitable Local Development Environment
Using Tests to Fix Bugs
What is Test-Driven Development?
The Advantages of Test-Driven Development
The Disadvantages of Test-Driven Development
Fixing a Real Bug Using Test-Driven Development
Safely Removing Dead Code
Checking the Version Control History
Scream Test
Logging or Reporting the Usage
Removing the Code with an Atomic Commit
Section 4: Improving
What's Covered?
Planning Your Improvement Strategy
Making the Most of PHP's Type System
Using Type Hints and Return Types
Union Types
Type Hints and Return Types in Closures
DRYing Up Your Code
Advantages of DRYing Up Your Code
When to DRY Up Your Code
Refactoring Conditions
Reducing Indented Code
Replacing if and elseif with match
Using the Nullsafe Operator
Using Database Transactions
Adding the Database Transactions
Manually Using Database Transactions
Tips for Interacting with Third-Party Services
Using Automatic or Manual Transactions
Dispatching Queued Jobs inside Database Transactions
Improving the Testability of Your Code
Using Objects Over Arrays
Final Words
Discount Codes
Flare
Oh Dear
StyleCI
Laravel Security In Depth
Compilers are notoriously difficult programs to teach and understand. Most books about compilers dedicate one chapter to each progressive stage, a structure that hides how language features motivate design choices. By contrast, this innovative textbook provides an incremental approach that allows students to write every single line of code themselves. Jeremy Siek guides the reader in constructing their own compiler in the powerful object-oriented programming language Python, adding complex language features as the book progresses. Essentials of Compilation explains the essential concepts, algorithms, and data structures that underlie modern compilers and lays the groundwork for future study of advanced topics. Already in wide use by students and professionals alike, this rigorous but accessible book invites readers to learn by doing.
Deconstructs the challenge of compiler construction into bite-sized pieces
Enhances learning by connecting language features to compiler design choices
Develops understanding of how programs are mapped onto computer hardware
Classroom-tested, hands-on approach suitable for students and professionals
Extensive ancillary resources include source code and solutions