February 24-26, 2027
Montreal, Canada

PHP Conference

The list of presentations is subject to change without notice.
PHP PHP properties are having a golden age. Since PHP 7.4, they've become steadily more powerful, and recent features like interface properties, hooks, and asymmetric visibility open up vast new potential.

So now that we have all this power, what shall we do with it? It allows us to fully rethink what it means to model data.

In this session, we'll look at PHP properties, and OOP in general, with fresh eyes to see all that they can do for us.
PHP Hopefully by now, you know that testing is important, and you've integrated PHPUnit into your workflow. So now what?

In this "testing 202" course, we'll explore some features of PHPUnit you may not be using (but should), some techniques you may not have thought of, and answer the question "so what are traits actually good for?"
PHP How much code do you still truly read? Do you check what green tests actually prove? Everything passed review without a problem, but the outage it caused is still yours. I will teach you my hard-won principles for getting this process back under control: verifying without asking, checking assumptions before building on them, ranking changes by irreversibility, actually enforcing rules. You wanted to make things predictable. Let's reclaim that.
PHP In today's fast-paced digital world, no one likes to wait. Yet, PHP scripts often find themselves waiting on databases, email servers, HTTP servers, file systems, and even RAM. The result? Your customers are left waiting too.
In this talk, we'll dive into the power of RabbitMQ and ReactPHP to significantly reduce waiting times and optimise performance. Get ready for live coding, real-world examples, and expert insights!
PHP You asked for an ID before you opened the door. Who checks which rooms they open next? Authentication alone gets you almost nothing. Once a request is trusted, whole classes of failures open up: unauthorised reads, privilege grants, wrong balances, forgotten endpoints still answering, control panels wide open. I will walk you through the vulnerability and teach you the defence. Let's look at both halves and get authorisation right.
PHP Time- and IO-bound tests are a common reason PHPUnit suites get slow: every test that sleeps, waits on a database, or calls an external service runs sequentially. This talk introduces Counit, an open-source library that runs those tests concurrently in one PHP process using Swoole coroutines. We'll show a suite drop from over 9 minutes to 19 seconds, and cover the tradeoffs: benefits, risks, and how to adopt it incrementally.
PHP The purpose of this talk would be to introduce a number of PHP extension designed to speed up applications by moving logic from PHP to C extensions that can be used from PHP. More specifically the talk will cover fast UUID generation, Markdown parsing, Excel reading/writing, JSON parsing and data Serialization.
PHP We have more observability tools than ever, yet every incident leaves the same question unanswered: Why? Noisy logs, SaaS tools that only react to exceptions, and sampling that drops the one request that mattered.

The problem isn't tooling, it's treating observability as logging and error reporting. This talk shows how separating data collection from relevance decisions preserves the context to also answer questions you couldn't anticipate.
PHP Mago réunit static analysis, linting et formatting dans un seul binaire Rust, nettement plus rapide que l'outillage actuel. Au programme : configuration, compatibilité avec les annotations PHPStan et Psalm, generics et conditional types, intégration pre-commit, CI et éditeur, le tout démontré sur une vraie base de code. De quoi préparer une migration progressive et accélérer vos CI.
PHP When inheriting an unmaintained legacy Symfony application, the real question is not “how to migrate”, but rather “where to start without breaking everything”.

In this talk, I share an honest retrospective of a Symfony migration carried out in production, on an aging application with limited documentation, few tests, and dependencies on components that are now obsolete.
PHP Join PHP core developer and veteran release manager Daniel Scherzer for a deep dive into the new features, syntax updates, deprecations, and surprises coming in PHP 8.6. Whether you're maintaining legacy apps or building bleeding-edge libraries, this talk will help you upgrade to the newest version of PHP 8.5 with confidence. Features include improvements to the URL handling extension, partial function application, a new Duration class, and more.
PHP In this talk we are going to dive deep into PHP's inner workings.

We will start by looking at how the language parser and scanner work, which convert scripts into an Abstract Syntax Tree. When then look at how PHP internal byte code is generated from this AST, and how the engine runs byte code.
PHP Every generation of PHP gets a compiler. HipHop gave Facebook 6x throughput, then died within three years. Hack forked the syntax onto its own runtime, and adoption never came. In August 2026, Swoole shipped TypePHP, an AOT compiler that lowers PHP to C++17 and compiles itself, with opt-in types still valid PHP. This is an early adopter's evaluation: every claim checked against what killed earlier attempts, with real output and benchmarks.
PHP In October 2026, a pair of critical vulnerabilities in PHP, termed "PHP2Shell," were disclosed. As a PHP 8.5 Release Manager, Daniel Scherzer had a front-row seat to the announcement of the PHP2Shell vulnerabilities and the distribution of their fixes. Join him for an in-depth account of what PHP2Shell is, the discovery and remediation process, how the fixes were built and disseminated, and much much more.
PHP Chromium, Firefox and WebKit driven from PHP through a synchronous, typed API: locators by role and label, assertions that retry until the expected state appears, replayable traces holding DOM, network and console. On the menu: PHPUnit integration, a Symfony bundle that routes requests through the test kernel, migrating Mink or Behat tests, installing browsers in CI. You will write your end-to-end tests in pure PHP!
PHP Rector is best known for upgrades, but it goes much further. And no, AI coding agents haven't made it redundant.

Ask an agent to change 500 files and it might miss a few. Ask it to write a Rector rule and the change is made the same way everywhere, every time.

We'll look at automating repetitive tasks, enforcing standards and creating custom rules, by hand or with AI. You get the flexibility of AI with results you can trust.
PHP Security reviews of PHP applications still depend on code review, static analysis, dependency audits, and expert judgment. AI can speed up that work. You can use it to scan large codebases, explain suspicious code, draft patches, and surface issues traditional tools may miss, while keeping the tools you already trust.
PHP AI enables us to generate code faster than ever – but delivery pipelines often struggle to keep up. LLMs can produce brilliant solutions as much as spectacular noise, flooding teams with more changes than they can reasonably absorb. The result: CI pipelines become the bottleneck, wasting cycles on redundant and often pointless work, returning feedback long after it’s useful.
This talk explores how to reshape CI/CD for AI-accelerated development.
PHP Learn how our applications can charge AI agents via an HTTP request using the Machine Payments Protocol (MPP). We'll explain 402 payment challenges, compare payment rails, and in a live demo, turn a Laravel API route into a paid endpoint, with just one line of middleware.

We'll cover charging credit cards and stablecoins, avoiding double charges, and explore how production-ready this protocol is today in different parts of the world.
PHP Achieving optimal performance and reliability requires more than monitoring, it demands observability. Discover how metrics, logging, tracing, and continuous profiling empower you to understand, debug, and optimize your application. We'll explore each pillar and demonstrate how to instrument your PHP application for actionable insights. Examples will leave you equipped to make your PHP applications observable, resilient, and performant.
PHP In this presentation we will look at how to deal with time zones. This will particularly be relevant due to the changes in Canada with Daylight Saving Time.

We will see how it is hard to make assumptions on how they work, and explain how they came into existence. We'll focus mostly on how to handle them from within PHP, as well as how we (should) store them in databases. We'll also have a quick look at date manipulation when querying data.

Explore all 185 sessions

Montreal 2027 sponsored by

Become a sponsor