Download the PHP package alexius-byte/rider-php without Composer

Rider X Framework

PHP 8.1+ mini framework. Zero external dependencies.

Dotenv

Existing $_ENV keys are never overwritten.

Router

Apache — .htaccess

Nginx

Basic routes

Route parameters arrive as $params['id'] inside the handler.

Groups

Middleware

Returning false from run() stops the chain — the route handler is not executed.
AbstractMiddleware provides json(array, status) and redirect(url, status) helpers.

Route classes

Groups and middleware are available inside AbstractRoute via $this->group(), $this->middleware(), $this->resetGroup(), $this->resetMiddleware().

Tracker

Auto-registers all public methods of a controller as routes.

Magic methods and inherited methods are ignored.

ORM

Model setup

timestamps adds created_at / updated_at automatically on create() and update().
fillable is a whitelist — columns outside it are discarded on create() and update().

Read

Sort

In-memory sort by a key extracted from each item. The callback receives one item and returns any comparable value — lower values come first.

Each key is computed once (O(n)), not once per comparison.

Write

upsert() uses INSERT ... ON DUPLICATE KEY UPDATE. The primary key must be present in the array. On conflict, all fields are updated except the primary key and created_at. Requires a PRIMARY KEY or UNIQUE constraint on the target column.

Raw

Transaction

Rolls back automatically on any exception.

Export

Truncate multiple tables

Paginator

Simple mode

Loads all rows into PHP memory, then slices. Suitable for small tables only.

Efficient mode

Two queries — COUNT(*) first, then SELECT … LIMIT ? OFFSET ?. Use this for any table that can grow.

Page object

Requesting a page beyond lastPage returns data: [], from: 0, to: 0, hasNext: false, hasPrev: false.
perPage is silently capped at 1 000.

Migrations

Migration

Migration files live in database/migrations/ and are named with a timestamp prefix (2025_01_01_120000_create_users_table.php) for ordering. The migrations table is created automatically on first run.

Each php migrate.php call groups all pending migrations into a batch. rollback undoes the entire last batch at once.

Seeder

Seeder files live in database/seeders/. insert() uses prepared statements — all rows in a single query.

Upload

Custom size limit (default 5 MB):

Allowed types

MIME is detected via finfo — $_FILES['type'] is never trusted. The stored filename is a random 32-char hex string; the original name is discarded. The storage directory must be outside public/.

CORS

Call before any output or routing logic — OPTIONS preflight requests are answered with 204 and execution stops immediately.

credentials: true is silently ignored when origins is '*' — browsers block that combination regardless.

Parameters

When origins is an array, the request Origin is matched against the list. If no match is found, no CORS headers are emitted. A Vary: Origin header is added automatically for specific-origin responses so proxies cache them correctly.

Container

Binding

Resolving

Auto-wiring

Classes with typed constructor parameters are resolved automatically — no registration needed.

Constructor parameters are resolved recursively. Unresolvable built-in types without a default value throw ContainerException.

Exceptions

SSL

Symmetric encryption (AES-256-GCM)

$key is hashed with SHA-256 internally — any string length is accepted. Output is base64-encoded and carries the IV and authentication tag.
decode() throws SslException if the data is tampered or the key is wrong.

RSA key pair generation

The private key is saved with 0600 permissions. The directory must exist before calling.

Cache

Drivers

Both implement CacheInterface (PSR-16 compatible) and are interchangeable.

Basic operations

Multiple keys

getMultiple and setMultiple return/accept generators — no intermediate array allocation.

TTL

FileCache stores entries as SHA-256-named files; expired entries are evicted lazily on read.

Validation

Custom messages

message() only applies to the rule immediately before it. If that rule passed, message() is a no-op.

Rules

The first error per field wins — subsequent failing rules on the same field are silently ignored.

Schema

Declarative shorthand validator. All fields are required by default. Returns only the declared fields. Throws SchemaException on failure.

Rules are pipe-separated (|); parameters use a colon (min:6, in:a,b,c).
The first failing rule per field wins.
Fields not declared in the schema are discarded from the return value.

Schema rules