Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Why is it a "bad idea"? I'm genuinely curious.

It works great, it's fast and you don't have to learn a new templating language or dialect every 2-3 years. Or try to figure out how to do trivial things like loops in loops.

I don't quite get the use of templating engines in PHP because PHP is a templating engine itself.



Templating systems produce output based on a template and a set of data. PHP produces output based on imperative code that can do anything. While you can certainly adhere to your templates only consuming data (ie some kind of view model), it's actually awkward to do, as PHP files don't take parameters, so you need to use a convention of having your "template" files provide functions and call them, but functions are global so you now need to name them uniquely to avoid collisions. If templates are meant to be pluggable, this is much more difficult because you have two templates that are supposed to be interchangeable, with identifiers for calling them that are different[1]. There are a lot of properties of template systems that PHP does not actually have.

[1] It's so much worse than this... You can use some horrible hacks like undefining a well-known function that each template implements, but this would only work one level deep without also adding a mechanism for "calling" a template, and at that point you are making a template system on top of PHP.


> as PHP files don't take parameters

$_SERVER, $_POST, $_GET.

The rest is not the PHP3 I recognize to be honest, let alone the modern stuff. Remember include() literally just included the code right there, inline, so you could include in functions and gain the function's scope:

    function render($data) {
        switch ($data['foo']) {
            case 'bar': include('bar.inc'); break;
            case 'baz': include('baz.inc'); break;
        }
    }
That's your template router with all the template's data pre-loaded in the template's scope, be it ever so filthy.


All of those variables are global, there's no way to establish an interface between the caller and the callee without using functions. You could certainly have a shared understanding of what variables have been injected into a global, but this is awkward, and requires you to do cleanup after each template instantiation to avoid leaking values between templates, which can cause subtle bugs.

> Remember include() literally just included the code right there, inline, so you could include in functions and gain the function's scope:

I've talked about this approach elsewhere in thread, it is not nestable without building a way to "call" templates on top of require/include, and when you do that you'll need to undefined the render function to do it as well, which creates additional complexity. At that point, the original premise of just using raw PHP isn't very true, because you are now building a framework or templating system around it.

Also, you have to contend with the magic "render" function not being globally defined by something. It's messy.


> there's no way to establish an interface between the caller and the callee without using functions

Um. Can you give me an example to pad that out a bit?

> and requires you to do cleanup after each template instantiation to avoid leaking values between templates

In my render() example, isn't that "reaching the end of the function"? (Edit: Wait, you're only talking about the superglobals, right?)


> Um. Can you give me an example to pad that out a bit?

Your example of using a render() function is already an example of this. You can parameterize render() to provide data to the template from the caller without utilizing untyped globals, and without having to clean the globals up after the template has rendered.

> Wait, you're only talking about the superglobals, right?

Yes. Globals are globals. PHP's super global distinction isn't really relevant to whether you are tainting the execution environment when you pass data to a script.

The point is, as I elaborate elsewhere, PHP is very awkward to use as a proper templating system.


>functions are global so you now need to name them uniquely to avoid collisions

I hear this here, and elsewhere I hear that PHP has evolved into a decent language. Both can't be true.


The discussion thread here may underrepresent OOP PHP. Large software in PHP usually uses namespaces instead of declaring functions at the top-level scope. And most projects except for legacy ones lean towards objects and classes over plain functions.

Namespaces allow non-global functions without a wrapping class already, IIRC. Looking up though, there seem to be special cases (legacy behavior, making everything at the top level global) when using namespaced files with include() statemtents, if I read the docs correctly.

Dumping pure functions as static members into wrapper classes was not uncommon when I used PHP.

But primarily, a lot of code was heavy on dependency injection and inversion of control, Symfony being the leader of this coding style maybe.

TFA also seems to be about class-oriented programming, but not the heavy design-pattern style mentioned above.

The linked TUI CLI parser looks like a nice and lean PHP OOP example.


Function names are scoped to the current namespace. This means that for local closures it is usually better to define functions as variables

$closure = function(){};

instead of

function closure(){}


Its not true at all.


A few reasons:

1. It's a loaded foot gun. PHP was notorious for 1000 line files with HTML and SQL all mixed together. (I speak from personal experiences on this)

2. Templating languages are "portable" (In theory). Have a mixed env of PHP and Java... there were templating languages that would work for both teams, it took a step out of scalability.... XML and XSLT were the promise land on this one, but we fucked all that up. Portability is a big deal. We're still slinging CSV files for a good reason.


1. I've seen enough terrible things in my time, but you can make a mess in any language using any number of frameworks. And it's been a hot minute since I've seen one of those 1000+ line PHP+SQL+HTML+JS+CSS monstrosities in any serious environment.

Improper use of templating engines or trying to use templating engines that aren't up to the task can give you headaches just as well. Sadly no amount of frameworks or templating engines can stop a bad programmer from writing bad code, in the end we're craftsmen who need to learn how to use our tools.

2. This could be a valid use case, but a rather rare one. XML+XSLT is something that sounds fantastic on paper, but as anyone who actually worked with it knows it ranges from a big disappointment to an absolute nightmare.


> Sadly no amount of frameworks or templating engines can stop a bad programmer from writing bad code,

It's not a matter of whether the code is bad or not, but how bad.

The entire point of frameworks is to add guard rails to help you stay disciplined and avoid cutting corners on separation of concerns.

Using PHP as a template language tempts developers to violate SOC every day.


If you need guard rails to keep you from performing database manipulations in your views you have other problems to worry about. And if anything people are cutting corners on SOC in the M and C part of MVC, not the V part.

Also I don't see how using a loop or conditional in PHP is any different from using one in a templating engine, aside from the overhead of the engine and added annoyance of debugging another language in your project.


> If you need guard rails to keep you from performing database manipulations in your views you have other problems to worry about.

Those problems are called "junior developers", and I think we'd all like to avoid them, but that's not very sustainable.

Perhaps we can fix the education problem, but given that folks just do a boot camp and head into the market, prospects aren't looking good.

> Also I don't see how using a loop or conditional in PHP is any different from using one in a templating engine, aside from the overhead of the engine and added annoyance of debugging another language in your project.

The problem is convention, or lack thereof. Without convention, who's to say where that database call should live? Frameworks, which tend to use templating languages for this reason, tend to make that convention clear to all teammates.

I want to mention that this doesn't mean you can't use PHP as the programming language for your templates as long as the conventions are clear, but PHP is poorly suited to being a template language for reasons I've posted elsewhere in this thread.


>>> If you need guard rails to keep you from performing database manipulations in your views you have other problems to worry about.

Its a one off... Its just an internal tool... This is a prototype... It's a hot fix...

I know better, I have done it. It is only with dumb luck that they didn't end up as products. Some people dont know that they should not or that it isnt a place they should try to "get away" with it. These things grow and then turn into products and someone has to clean them up.

Source: I made a lot of money turning PHP "projects" into "software".

> Also I don't see how using a loop or conditional in PHP is any different from using one in a templating engine

One of these things is Turing complete. The other is not.

Templating languages have their own laments: see yaml configs used to create "workflows", "environments" and "servers" via templating.


I've seen Python that was almost as bad as PHP. At one company, a guy actually complained that he didn't want to use multiple files, third-party packages, or anything outside of the stdlib. He'd write everything inside of a single "main.py" that ran as an AWS Lambda, which he often edited live in the console. When I first saw this, I thought I had landed on another planet.

At another job, another guy built some massive abstract-factory-factory-layer in Python, a class hierarchy 4 or 5 layers deep. 5000+ lines in a single file. It was almost impossible to debug.

Both of these are better than some C++ code I once saw. 10,000+ lines in a single file. In that file, there was a function with a 3000+ line case statement, which was mostly copy-pasta'd from other parts of the code (not in that 10K line file.)

I have seen plenty of PHP code that smelled like a nuclear dumpster fire, but you can write trash in any language.


> I don't quite get the use of templating engines in PHP because PHP is a templating engine itself.

Do you write safe templates in PHP ?


Yep. Linters help. And are lighter than other templates engines (eg Blade, Twig) and give me static analysis.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: