Home Backend Development PHP Tutorial Working with PHP Attributes: Do's & Don'ts

Working with PHP Attributes: Do's & Don'ts

Nov 14, 2024 pm 06:22 PM

Working with PHP Attributes: Do’s & Don’ts

Attributes in PHP simplify code configuration by allowing you to annotate code elements with metadata directly, potentially reducing boilerplate in frameworks like Laravel. However, as with any feature, attributes can be overused or misapplied, leading to messy controllers and harder-to-maintain code.

In this post, we’ll explore best practices for using attributes in a way that enhances code clarity. I’ll also provide a table of “do’s and don’ts” with examples for each comparison, highlighting scenarios where attributes work well—and where they may not.

1. Understanding Attributes in PHP

Here’s a quick example of defining and using an attribute to provide some context:

1

2

3

4

5

6

7

8

9

10

#[Attribute]

class MyCustomAttribute {

    public function __construct(public string $description) {}

}

 

#[MyCustomAttribute("This is a test class")]

class MyClass {

    #[MyCustomAttribute("This is a test method")]

    public function myMethod() {}

}

Copy after login
Copy after login
Copy after login

2. Do’s and Don’ts: Quick Overview

Here’s a table to summarize best practices and common pitfalls:

Do’s Don’ts
Use attributes for standard, repetitive configurations (e.g., HTTP methods, caching). Don’t overload attributes with complex configurations or conditional logic.
Leverage attributes for metadata rather than core application logic. Avoid embedding business logic or intricate rules within attributes.
Apply attributes for simple, reusable annotations (e.g., #[Throttle], #[Cache]). Don’t try to replace Laravel’s route files entirely with attribute-based routing.
Cache attribute-based reflections when possible to improve performance. Don’t rely solely on attributes for configurations that need flexibility or change often.
Document your attributes, so team members understand their purpose and usage. Avoid using attributes for configurations where traditional methods work better (e.g., middleware settings).

3. Detailed Comparisons with Examples

Let’s dive into each comparison with specific examples.

1. Use Attributes for Standard, Repetitive Configurations (Do)

Attributes are ideal for standard configurations that don’t require complex logic. Here are three good examples:

  • Defining Routes: Use attributes to define straightforward routes with HTTP methods and paths.

1

2

3

4

5

6

7

8

9

10

#[Attribute]

class MyCustomAttribute {

    public function __construct(public string $description) {}

}

 

#[MyCustomAttribute("This is a test class")]

class MyClass {

    #[MyCustomAttribute("This is a test method")]

    public function myMethod() {}

}

Copy after login
Copy after login
Copy after login
  • Cache Control: Use an attribute to specify cache duration for methods.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Route {

    public function __construct(public string $method, public string $path) {}

}

 

class ProductController {

    #[Route('GET', '/products')]

    public function index() {}

}

Copy after login
Copy after login
  • Rate Limiting: A Throttle attribute could be used to limit the number of requests per user.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Cache {

    public function __construct(public int $duration) {}

}

 

class ProductController {

    #[Cache(3600)]

    public function show($id) {}

}

Copy after login
Copy after login

Don’t Overload Attributes with Complex Configurations (Don’t)

Avoid using attributes for configurations that require multiple parameters or conditions. Here’s what not to do:

  • Overloading with Multiple Configurations: Avoid adding multiple parameters to an attribute.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Throttle {

    public function __construct(public int $maxAttempts) {}

}

 

class UserController {

    #[Throttle(5)]

    public function store() {}

}

Copy after login
Copy after login
  • Conditional Logic in Attributes: Avoid conditional settings within attributes.

1

2

3

4

5

6

7

8

9

10

11

#[Attribute]

class Route {

    public function __construct(

        public string $method,

        public string $path,

        public ?string $middleware = null,

        public ?string $prefix = null

    ) {}

}

 

#[Route('POST', '/users', middleware: 'auth', prefix: '/admin')]

Copy after login
Copy after login
  • Chained Configurations in a Single Attribute: Avoid chaining multiple configuration behaviors in one attribute.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Condition {

    public function __construct(public string $condition) {}

}

 

class Controller {

    #[Condition("isAdmin() ? 'AdminRoute' : 'UserRoute'")]

    public function index() {}

}

Copy after login
Copy after login

2. Leverage Attributes for Metadata (Do)

Use attributes as markers or metadata, rather than embedding application logic within them. Here’s how:

  • Annotations for Validation: Mark a field as required with an attribute.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Combined {

    public function __construct(

        public int $cacheDuration,

        public int $rateLimit

    ) {}

}

 

#[Combined(cacheDuration: 300, rateLimit: 5)]

Copy after login
  • Specify HTTP Method as Metadata: Use attributes to mark the HTTP method type.

1

2

3

4

5

6

7

#[Attribute]

class Required {}

 

class User {

    #[Required]

    public string $name;

}

Copy after login
  • Indicate Access Levels: Use attributes to indicate access level requirements.

1

2

3

4

5

6

7

#[Attribute]

class Get {}

 

class BlogController {

    #[Get]

    public function list() {}

}

Copy after login

Don’t Embed Business Logic in Attributes (Don’t)

Avoid using attributes to determine application behavior directly. Here’s what not to do:

  • Avoid Direct Conditions in Attributes: Don’t place conditional checks in attributes.

1

2

3

4

5

6

7

#[Attribute]

class RequiresAdmin {}

 

class SettingsController {

    #[RequiresAdmin]

    public function update() {}

}

Copy after login
  • Avoid Method Calls in Attributes: Don’t place function calls or business logic in attributes.

1

2

3

4

5

6

#[Attribute]

class AccessControl {

    public function __construct(public string $role) {}

}

 

#[AccessControl(role: isAdmin() ? 'admin' : 'user')]

Copy after login
  • Avoid Calculated Values in Attributes: Attributes should be static metadata, not calculated values.

1

2

3

4

5

6

#[Attribute]

class ConditionalCache {

    public function __construct(public int $duration) {}

}

 

#[ConditionalCache(duration: userHasPremium() ? 3600 : 300)]

Copy after login

3. Apply Attributes for Simple, Reusable Annotations (Do)

Attributes work well for lightweight annotations that can be reused. Here are some reusable annotation examples:

  • Simple Throttle: A straightforward throttle attribute to limit request rates.

1

2

3

4

5

6

7

8

9

10

#[Attribute]

class MyCustomAttribute {

    public function __construct(public string $description) {}

}

 

#[MyCustomAttribute("This is a test class")]

class MyClass {

    #[MyCustomAttribute("This is a test method")]

    public function myMethod() {}

}

Copy after login
Copy after login
Copy after login
  • Cache Control: Add cache control attributes with a single duration parameter.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Route {

    public function __construct(public string $method, public string $path) {}

}

 

class ProductController {

    #[Route('GET', '/products')]

    public function index() {}

}

Copy after login
Copy after login
  • Deprecation Warning: Mark methods as deprecated to alert developers.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Cache {

    public function __construct(public int $duration) {}

}

 

class ProductController {

    #[Cache(3600)]

    public function show($id) {}

}

Copy after login
Copy after login

Don’t Overuse Attributes for Configurations That Are Easier in Other Formats (Don’t)

Some configurations are better managed outside of attributes. Here’s what not to do:

  • Middleware Configuration: Avoid configuring middleware directly in attributes.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Throttle {

    public function __construct(public int $maxAttempts) {}

}

 

class UserController {

    #[Throttle(5)]

    public function store() {}

}

Copy after login
Copy after login
  • Authorization Rules: Complex authorization configurations are better in policy files.

1

2

3

4

5

6

7

8

9

10

11

#[Attribute]

class Route {

    public function __construct(

        public string $method,

        public string $path,

        public ?string $middleware = null,

        public ?string $prefix = null

    ) {}

}

 

#[Route('POST', '/users', middleware: 'auth', prefix: '/admin')]

Copy after login
Copy after login
  • Complex Validation Rules: Keep validation logic out of attributes.

1

2

3

4

5

6

7

8

9

#[Attribute]

class Condition {

    public function __construct(public string $condition) {}

}

 

class Controller {

    #[Condition("isAdmin() ? 'AdminRoute' : 'UserRoute'")]

    public function index() {}

}

Copy after login
Copy after login

Conclusion

Attributes offer an elegant way to handle repetitive configurations, especially in PHP frameworks like Laravel.

However, they work best as simple metadata, and it’s essential to avoid overloading them with complex configurations or logic.

By following the best practices and using attributes as lightweight, reusable annotations, you can harness their full potential without adding unnecessary complexity to your codebase.


Sponsor

Support my open-source work by sponsoring me on GitHub Sponsors! Your sponsorship helps me keep creating useful Laravel packages, tools, and educational content that benefit the developer community. Thank you for helping make open-source better!


Photo by Milad Fakurian on Unsplash

The above is the detailed content of Working with PHP Attributes: Do's & Don'ts. For more information, please follow other related articles on the PHP Chinese website!

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

Hot Topics

Java Tutorial
1663
14
PHP Tutorial
1266
29
C# Tutorial
1239
24
Explain different error types in PHP (Notice, Warning, Fatal Error, Parse Error). Explain different error types in PHP (Notice, Warning, Fatal Error, Parse Error). Apr 08, 2025 am 12:03 AM

There are four main error types in PHP: 1.Notice: the slightest, will not interrupt the program, such as accessing undefined variables; 2. Warning: serious than Notice, will not terminate the program, such as containing no files; 3. FatalError: the most serious, will terminate the program, such as calling no function; 4. ParseError: syntax error, will prevent the program from being executed, such as forgetting to add the end tag.

PHP and Python: Comparing Two Popular Programming Languages PHP and Python: Comparing Two Popular Programming Languages Apr 14, 2025 am 12:13 AM

PHP and Python each have their own advantages, and choose according to project requirements. 1.PHP is suitable for web development, especially for rapid development and maintenance of websites. 2. Python is suitable for data science, machine learning and artificial intelligence, with concise syntax and suitable for beginners.

Explain secure password hashing in PHP (e.g., password_hash, password_verify). Why not use MD5 or SHA1? Explain secure password hashing in PHP (e.g., password_hash, password_verify). Why not use MD5 or SHA1? Apr 17, 2025 am 12:06 AM

In PHP, password_hash and password_verify functions should be used to implement secure password hashing, and MD5 or SHA1 should not be used. 1) password_hash generates a hash containing salt values ​​to enhance security. 2) Password_verify verify password and ensure security by comparing hash values. 3) MD5 and SHA1 are vulnerable and lack salt values, and are not suitable for modern password security.

PHP in Action: Real-World Examples and Applications PHP in Action: Real-World Examples and Applications Apr 14, 2025 am 12:19 AM

PHP is widely used in e-commerce, content management systems and API development. 1) E-commerce: used for shopping cart function and payment processing. 2) Content management system: used for dynamic content generation and user management. 3) API development: used for RESTful API development and API security. Through performance optimization and best practices, the efficiency and maintainability of PHP applications are improved.

What are HTTP request methods (GET, POST, PUT, DELETE, etc.) and when should each be used? What are HTTP request methods (GET, POST, PUT, DELETE, etc.) and when should each be used? Apr 09, 2025 am 12:09 AM

HTTP request methods include GET, POST, PUT and DELETE, which are used to obtain, submit, update and delete resources respectively. 1. The GET method is used to obtain resources and is suitable for read operations. 2. The POST method is used to submit data and is often used to create new resources. 3. The PUT method is used to update resources and is suitable for complete updates. 4. The DELETE method is used to delete resources and is suitable for deletion operations.

PHP: A Key Language for Web Development PHP: A Key Language for Web Development Apr 13, 2025 am 12:08 AM

PHP is a scripting language widely used on the server side, especially suitable for web development. 1.PHP can embed HTML, process HTTP requests and responses, and supports a variety of databases. 2.PHP is used to generate dynamic web content, process form data, access databases, etc., with strong community support and open source resources. 3. PHP is an interpreted language, and the execution process includes lexical analysis, grammatical analysis, compilation and execution. 4.PHP can be combined with MySQL for advanced applications such as user registration systems. 5. When debugging PHP, you can use functions such as error_reporting() and var_dump(). 6. Optimize PHP code to use caching mechanisms, optimize database queries and use built-in functions. 7

Explain the difference between self::, parent::, and static:: in PHP OOP. Explain the difference between self::, parent::, and static:: in PHP OOP. Apr 09, 2025 am 12:04 AM

In PHPOOP, self:: refers to the current class, parent:: refers to the parent class, static:: is used for late static binding. 1.self:: is used for static method and constant calls, but does not support late static binding. 2.parent:: is used for subclasses to call parent class methods, and private methods cannot be accessed. 3.static:: supports late static binding, suitable for inheritance and polymorphism, but may affect the readability of the code.

How does PHP handle file uploads securely? How does PHP handle file uploads securely? Apr 10, 2025 am 09:37 AM

PHP handles file uploads through the $\_FILES variable. The methods to ensure security include: 1. Check upload errors, 2. Verify file type and size, 3. Prevent file overwriting, 4. Move files to a permanent storage location.

See all articles