
Security News
Crates.io Implements Trusted Publishing Support
Crates.io adds Trusted Publishing support, enabling secure GitHub Actions-based crate releases without long-lived API tokens.
This module allows you to run PHP code in Node.js in various ways:
To use this module, you must have PHP installed and in your PATH.
This module was built and is maintained by the Roosevelt web framework team, but it can be used independently of Roosevelt as well.
const php = require('php')
const output = await php.run('some_php_script.php')
const php = require('php')
const output = await php.runWithData('some_php_script.php', { hello: 'world' })
Then, assuming your some_php_script.php
file looks like this:
<p><?=$hello?></p>
The output will be:
<p>world</p>
const express = require('express')
const app = express()
const php = require('php')
// setup PHP templating engine
app.set('views', path.join(__dirname, 'templates'))
app.set('view engine', 'php') // set PHP as a view engine in your Express app
app.engine('php', php.__express)
// define a route
app.get('/', (req, res) => {
res.render('index.php', {
hello: 'world'
})
})
Then, assuming your templates/index.php
looks like this:
<p><?=$hello?></p>
The output will be:
<p>world</p>
As shown in the above examples, this module will register values from the data model you pass to the PHP script as global variables in your PHP script by default when you use PHP as an Express view engine or when you call runWithData
. You can disable this behavior if desired in the following ways:
Disable registering globally:
const php = require('php')
php.disableRegisterGlobalModel()
// can be reenabled by calling php.enableRegisterGlobalModel()
Disable registering on a per render basis in Express:
app.get('/', (req, res) => {
res.render('index.php', {
_REGISTER_GLOBAL_MODEL: false,
hello: 'world'
})
})
Disable registering on a per render basis in runWithData
(though if you're doing this, you probably should just use php.run()
instead, as that method was written to use simpler logic that doesn't support passing data to PHP):
const output = await php.runWithData('some_php_script.php', {
_REGISTER_GLOBAL_MODEL: false,
hello: 'world'
})
1.1.0
run
and runWithData
methods so this module can be used as a general purpose PHP runner.FAQs
Allows you to run PHP code in Node.js in various ways.
The npm package php receives a total of 0 weekly downloads. As such, php popularity was classified as not popular.
We found that php demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Crates.io adds Trusted Publishing support, enabling secure GitHub Actions-based crate releases without long-lived API tokens.
Research
/Security News
Undocumented protestware found in 28 npm packages disrupts UI for Russian-language users visiting Russian and Belarusian domains.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.