The latest articles on Forem by yd-shomer (@moshe_260). https://forem.com/moshe_260 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3674942%2F7fb5e157-12f9-4917-927c-7acd66b346cc.png https://forem.com/moshe_260 en yd-shomer Tue, 23 Dec 2025 10:22:03 +0000 https://forem.com/moshe_260/introducing-yd-shomer-y-shvmr-runtime-sql-guardian-for-php-1fce https://forem.com/moshe_260/introducing-yd-shomer-y-shvmr-runtime-sql-guardian-for-php-1fce <h1> 🛡️ Introducing YD Shomer - The Guardian's Hand for PHP </h1> <p>I just released <strong>YD Shomer</strong>, a runtime SQL validator that catches security issues during development and teaches developers secure coding practices.</p> <h2> 🔤 The Name </h2> <ul> <li> <strong>YD (י)</strong> - Yod, the Hebrew letter symbolizing divine protection</li> <li> <strong>Shomer (שומר)</strong> - Guardian in Hebrew</li> <li> <strong>The Guardian's Hand</strong> - Protection through vigilance</li> </ul> <h2> ⚡ Quick Example </h2> <div class="highlight js-code-highlight"> <pre class="highlight php"><code><span class="kn">use</span> <span class="nc">Shomer\QueryValidator</span><span class="p">;</span> <span class="nb">define</span><span class="p">(</span><span class="s1">'SHOMER_ENABLED'</span><span class="p">,</span> <span class="kc">true</span><span class="p">);</span> <span class="c1">// This will trigger a warning</span> <span class="nv">$report</span> <span class="o">=</span> <span class="nc">QueryValidator</span><span class="o">::</span><span class="nf">validate</span><span class="p">([</span> <span class="s1">'sql'</span> <span class="o">=&gt;</span> <span class="s2">"DELETE FROM users"</span><span class="p">,</span> <span class="c1">// Missing WHERE!</span> <span class="s1">'params'</span> <span class="o">=&gt;</span> <span class="p">[]</span> <span class="p">],</span> <span class="nv">$verbose</span> <span class="o">=</span> <span class="kc">true</span><span class="p">);</span> <span class="c1">// Shomer provides:</span> <span class="c1">// ❌ Error detected</span> <span class="c1">// 📍 Exact location: file.php line 42</span> <span class="c1">// 💡 Suggested fix: "DELETE FROM users WHERE id = ?"</span> <span class="c1">// 📧 Email alert sent</span> </code></pre> </div> <h2> ✨ Key Features </h2> <p><strong>Security First:</strong></p> <ul> <li>Detects SQL injection vulnerabilities</li> <li>Validates prepared statements</li> <li>Checks parameter counts and types</li> </ul> <p><strong>Developer Experience:</strong></p> <ul> <li>Auto-captures execution context (file, line, URL)</li> <li>Provides secure query suggestions</li> <li>Educational approach</li> </ul> <p><strong>Production Ready:</strong></p> <ul> <li>Zero overhead when disabled</li> <li>Instant bypass</li> <li>No performance impact</li> </ul> <h2> 🎯 Perfect For </h2> <ul> <li>Learning secure SQL practices</li> <li>Code reviews</li> <li>Onboarding junior developers</li> <li>Refactoring legacy code</li> <li>Development environments</li> </ul> <h2> 📦 Installation </h2> <div class="highlight js-code-highlight"> <pre class="highlight shell"><code>composer require yd-shomer/php-shomer </code></pre> </div> <h2> 🔗 Links </h2> <ul> <li> <strong>GitHub:</strong> <a href="https://github.com/yd-shomer/php-shomer" rel="noopener noreferrer">yd-shomer/php-shomer</a> </li> <li> <strong>Packagist:</strong> <a href="https://packagist.org/packages/yd-shomer/php-shomer" rel="noopener noreferrer">yd-shomer/php-shomer</a> </li> <li> <strong>Website:</strong> yd-shomer.com</li> </ul> <h2> 💬 Feedback Welcome! </h2> <p>This is my first open-source project. I'd love to hear your thoughts, suggestions, and contributions!</p> <p><strong>Protected by the Guardian's Hand</strong> 🛡️</p> <div class="highlight js-code-highlight"> <pre class="highlight plaintext"><code> </code></pre> </div> php security opensource webdev