Claude Code for PHP Developers

"Write an Eloquent query that fetches orders with their user, line items, and product names. Filter by user ID and date range, paginate at 20 per page, use eager loading to avoid N+1, and return a typed collection. Include a scope for active orders only."

"Generate a full CRUD API for a Product model: FormRequest classes with validation rules, JsonResource with conditional relationship loading, RESTful controller using invokable actions, route group with Sanctum auth, and PHPUnit feature tests covering 422 validation errors and 200 happy paths."

"Create a dispatchable Job that sends a welcome email, retries up to 3 times with exponential backoff, handles failures by logging to a dead-letter table, and can be dispatched after a delay. Add a unit test that asserts the job is dispatched with the right arguments."

"Add authorization for this Post model: a Policy class with view, create, update, delete, and restore methods. Include a before hook for admin users. Register the policy in AuthServiceProvider and add ability checks to the controller. Write a test that confirms non-owners cannot update."

"Generate a migration that adds a status column (enum: pending, active, suspended) to the users table with a default of active, a foreign key to a new user_settings table, and a composite index on (status, created_at). Make the migration reversible."

"Set up a domain event system: an OrderPlaced event, a SendOrderConfirmation listener that emails the customer, a UpdateInventory listener that queues stock reduction, and a Notification for the admin dashboard. Use event discovery and test the full flow."

"Create an Artisan command php artisan reports:generate that accepts a --from and --to date option, generates a CSV report of orders grouped by status, stores it in storage/app/reports/, and sends it via email using a Mailable. Add a progress bar for long-running reports."

"Write a middleware that rate-limits API requests per user using Redis (60 req/min), returns a 429 with Retry-After header when exceeded, exempts admin users, and logs suspicious burst patterns. Register it as a named middleware in bootstrap/app.php."

"Create a Blade component for a paginated data table: accepts a $rows collection and $columns config array, renders a sortable header with query string persistence, shows an empty state slot, and includes a Livewire-compatible wire:click hook for row selection."

"Extract this controller method into a Service class: accept a DTO as input, validate business rules (throw domain exceptions), persist via the repository, dispatch events, and return a response DTO. Write unit tests for each validation branch."

"Create a Doctrine entity for Invoice with a composite primary key, a ManyToMany relationship to Tag, and a OneToMany to InvoiceLine. Add DQL query in a repository that fetches invoices with totals computed in SQL, filtering by date and status. Use QueryBuilder for pagination."

"Implement CQRS with Symfony Messenger: a CreateOrderCommand with handler, an OrderCreatedEvent that triggers two async handlers (SendConfirmation and UpdateStats). Configure a separate transport for each handler, add retry with backoff, and write an integration test."

"Configure an API Platform resource for Product: custom operations with validation groups, a state provider that uses a repository, a state processor for create/update logic, DTO input/output classes, and JWT authentication via LexikJWTAuthenticationBundle. Include OpenAPI documentation."

"Set up Symfony Security with a custom authenticator: JWT token extraction from Authorization header, user provider that loads from Doctrine, roles-based access control with IS_GRANTED in controllers, a voter for resource ownership, and tests for each access scenario."

"Write a Symfony Console command that processes a CSV file in batches of 500 rows, shows a ProgressBar, validates each row against a Validator constraint, persists valid rows via Doctrine (bulk insert with clear() every batch to avoid memory leaks), and outputs a summary table."

"Create a WordPress plugin following the Plugin Boilerplate pattern: custom post type 'testimonial' with meta fields, a shortcode to display them, a settings page in wp-admin with sanitized options, and REST API endpoints secured with a custom permission callback."

"Register a Gutenberg block using block.json and register_block_type_from_metadata. The block should have InspectorControls for color/layout settings, a dynamic render_callback in PHP, and save.js that returns null (server-side rendered). Include block.json attributes schema."

"Add a WooCommerce extension that: adds a custom checkout field, validates it on woocommerce_checkout_process, saves it to order meta via woocommerce_checkout_update_order_meta, displays it in the admin order view, and includes it in order confirmation emails."

"Audit this WordPress plugin code for security issues: check for SQL injection ($wpdb->prepare usage), XSS (esc_html, esc_attr, esc_url), CSRF (wp_nonce_field + wp_verify_nonce), capability checks (current_user_can), and direct file access prevention. Fix every issue found."

"Create a WordPress cron job using wp_schedule_event that runs hourly, fetches data from an external API with error handling and a transient cache (set for 50 minutes to avoid thundering herd), and updates custom post meta. Add a manual trigger via admin_action_ hook."

"Refactor these string constants into a PHP 8.1 backed enum: add a label() method, implement a fromLabel() static factory, add an interface for billable statuses, and ensure Doctrine/Eloquent can serialize/deserialize the enum. Keep all existing comparisons working."

"Refactor these DTO classes to use PHP 8.2 readonly classes: constructor promotion for all properties, a static fromArray() factory, a with() method that returns a modified clone, and JSON serialization via JsonSerializable. Write tests to confirm immutability."

"Show me how to use PHP 8.1 Fibers to implement a simple cooperative task scheduler that processes multiple I/O-bound operations without threads. Demonstrate with three concurrent HTTP requests using Fiber::suspend() and a main loop that drives each fiber."

"Replace all switch statements in this file with match expressions. Add exhaustiveness — if not all cases are covered, throw an UnhandledMatchError. Where the matched value is a class hierarchy, use match(true) with instanceof checks. Document where you had to add a default arm and why."

"Refactor this service to use intersection types for parameters that must implement both Countable and Iterator. Add union types to return values that can be null on failure. Enable strict_types=1 and fix any type errors that emerge. Run PHPStan at level 8 and fix remaining issues."

"Set up a PHP package skeleton: composer.json with autoloading (PSR-4), dev dependencies for PHPUnit + PHPStan + PHP-CS-Fixer, a Makefile with test/analyse/fix targets, GitHub Actions CI that runs on PHP 8.1, 8.2, 8.3 matrix, and a .gitattributes to exclude dev files from the dist."

"Run PHPStan at level 8 on this codebase and fix all errors. Prioritize: missing return types, mixed type violations, dead code, and null safety issues. Where the true type is unknowable (e.g., dynamic array shapes), add @phpstan-type docblocks with a comment explaining why. Do not use @suppress without justification."

"Convert this PHPUnit test file to Pest PHP: use it() / describe() / test() conventions, expect() assertions instead of $this->assert*, dataset() for data providers, and beforeEach() for setup. Keep all existing test coverage but make the tests read like specifications."

"Create a Docker Compose setup for this Laravel app: PHP 8.3-fpm image with required extensions (pdo_mysql, redis, gd, intl), Nginx, MySQL 8, Redis, and a Mailhog container for email testing. Include a Dockerfile with multi-stage build, .dockerignore, and health checks for all services."

"Profile this Eloquent code with Laravel Debugbar and fix every N+1 query. Use with() for eager loading, withCount() for aggregates, and load() for conditional loading. Show the before/after query count and explain each fix."

"Add Redis caching to this service: cache the result of expensive database queries using Cache::remember(), tag the cache entries so they can be invalidated by model (Cache::tags()), and add cache warming via an Artisan command. Document the TTL reasoning."

"This script loads 100K records into memory and crashes. Rewrite it using Eloquent's chunk() or lazy() cursor to process in batches of 1000, add a memory_get_peak_usage() progress log every 10 batches, and make it resumable via a checkpoint in Redis."

"Audit this PHP deployment for OPcache configuration: verify opcache.validate_timestamps=0 in production, opcache.memory_consumption is sized correctly for the codebase, and preloading is configured via opcache.preload. Generate an optimized php.ini snippet with comments."

"Audit this entire codebase for SQL injection vulnerabilities: find raw string interpolation in queries, ensure all $wpdb calls use prepare(), verify PDO uses named parameters everywhere. Generate a report with file:line references and a fixed version of each vulnerable snippet."

"Review every echo and print statement in this PHP application. Add esc_html() / htmlspecialchars() to all user-controlled output. For URLs, use esc_url(). For JavaScript contexts, use wp_json_encode() or json_encode with JSON_HEX_TAG. List every change made."

"Add CSRF protection to all state-changing POST endpoints in this application. For Laravel, verify VerifyCsrfToken middleware is active and forms include @csrf. For vanilla PHP, implement a token stored in the session and verified on submit. Write tests that confirm requests without tokens are rejected."