Limited return type covariance and argument type contravariance
The following code will now work:
<?php
class A {}
class B extends A {}
class Producer {
public function method(): A {}
}
class ChildProducer extends Producer {
public function method(): B {}
}
?>
Full variance support is only available if autoloading is used. Inside a
single file only non-cyclic type references are possible, because all
classes need to be available before they are referenced.
<?php
/**
* These classes satisfy the LSP requirements, because C is a subtype of A.
* However, at the time class B is declared, class C is not yet available
*/
class A
{
public function method(): A {}
}
class B extends A
{
// Fatal error: Could not check compatibility between B::method():C and
// A::method(): A, because class C is not available
public function method(): C {}
}
class C extends B {}
?>
Null coalescing assignment operator
<?php
$array['key'] ??= computeDefault();
// is roughly equivalent to
if (!isset($array['key'])) {
$array['key'] = computeDefault();
}
?>
Weak references allow the programmer to retain a reference to an object
that does not prevent the object from being destroyed.
Allow exceptions from __toString()
Throwing exceptions from __toString()
is now permitted. Previously this resulted in a fatal error. Existing
recoverable fatal errors in string conversions have been converted to
Error exceptions.
CURL
CURLFile now supports stream wrappers in addition
to plain file names, if the extension has been built against libcurl >= 7.56.0.
FFI is a new extension, which provides a simple way to call
native functions, access native variables, and create/access
data structures defined in C libraries.
GD
Added the IMG_FILTER_SCATTER image filter
to apply a scatter filter to images.
Hash
Added crc32c hash using Castagnoli's polynomial.
This CRC32 variant is used by storage systems, such as
iSCSI, SCTP, Btrfs and ext4.
Multibyte String
Added the mb_str_split() function, which provides
the same functionality as str_split(), but operating
on code points rather than bytes.
The username and password can now be specified as part of the PDO DSN for
the mysql, mssql, sybase, dblib, firebird and oci drivers. Previously this
was only supported by the pgsql driver. If a username/password is specified
both in the constructor and the DSN, the constructor takes precedence.
It is now possible to escape question marks in SQL queries to avoid them
being interpreted as parameter placeholders. Writing ??
allows sending a single question mark to the database and e.g. use the
PostgreSQL JSON key exists (?) operator.
PDOStatement::getAttribute(PDO::SQLITE_ATTR_READONLY_STATEMENT)
allows checking whether the statement is read-only, i.e. if it doesn't modify
the database.
Added SQLite3::enableExtendedResultCodes($enable = true),
which will make SQLite3::lastErrorCode()
return extended result codes.
Standard
strip_tags() with array of tag names
strip_tags() now also accepts an array of allowed tags:
instead of strip_tags($str, '<a><p>')
you can now write strip_tags($str, ['a', 'p']).
Custom object serialization
A new mechanism for custom object serialization has been added, which
uses two new magic methods: __serialize
and __unserialize.
<?php
// Returns array containing all the necessary state of the object.
public function __serialize(): array
{
}
// Restores the object state from the given data array.
public function __unserialize(array $data): void
{
}
?>
The new serialization mechanism supersedes the
Serializable interface,
which will be deprecated in the future.
Array merge functions without arguments
array_merge() and array_merge_recursive()
may now be called without any arguments, in which case they will return an empty array.
This is useful in conjunction with the spread operator, e.g. array_merge(...$arrays).
proc_open() now accepts an array instead of a
string for the command. In this case the process will be opened
directly (without going through a shell) and PHP will take care of
any necessary argument escaping.
proc_open() now supports
redirect and null descriptors.
<?php
// Like 2>&1 on the shell
proc_open($cmd, [1 => ['pipe', 'w'], 2 => ['redirect', 1]], $pipes);
// Like 2>/dev/null or 2>nul on the shell
proc_open($cmd, [1 => ['pipe', 'w'], 2 => ['null']], $pipes);
?>
argon2i(d) without libargon
password_hash() now has the argon2i and argon2id implementations
from the sodium extension when PHP is built without libargon.