Product docs and API reference are now on Akamai TechDocs.
Search product docs.
Search for “” in product docs.
Search API reference.
Search for “” in API reference.
Search Results
 results matching 
 results
No Results
Filters
Install and Use PHP Composer
Traducciones al EspañolEstamos traduciendo nuestros guías y tutoriales al Español. Es posible que usted esté viendo una traducción generada automáticamente. Estamos trabajando con traductores profesionales para verificar las traducciones de nuestro sitio web. Este proyecto es un trabajo en curso.
PHP is one of the most popular programming languages for web and internet-based applications. Due to the increasing complexity of these applications, third-party PHP packages have become increasingly popular. However, it can become difficult to manage the minimum version and dependencies for each package. Composer , which is a free open source package and dependency manager for PHP, can help oversee this situation. This guide explains how to install and update Composer and how to use it to install and update packages.
An Introduction to PHP Composer
Composer is inspired by programs such as npm
, which is used to manage different versions of Node. Users declare the PHP libraries they are using and Composer either installs or updates them as needed. While doing so, it determines what other systems or PHP packages are required.
Composer manages packages and libraries on a per-project basis, so it is more accurately termed a dependency manager. All libraries are installed in a designated directory inside the project directory. Composer does not install any packages globally. However, it does support a “global” project for individuals or small groups who are only working on a single project.
Users declare the libraries they want using the require
command that adds a corresponding entry to the composer.json
file. Composer determines the package version that should be installed. It then installs the relevant version of the package into the project directory. Some of these packages might depend on other packages. Composer manages all of these secondary dependencies so all packages and libraries are upgraded at once. This helps avoid instability and compatibility issues.
Composer works in conjunction with Packagist . Packagist offers a large number of free, ready-to-use PHP packages. Users typically extend these packages or join multiple packages together to form the backbone of their PHP project. However, it is also possible to build packages from scratch from original PHP files and functions. Packagist provides a mechanism for users to publish their packages for others to use.
Composer only works on PHP version 5.3.2 or above, although PHP 5.3.4 or higher is recommended. As of writing this guide, the latest version of Composer is 2.1.6.
Before You Begin
If you have not already done so, create a Linode account and Compute Instance. See our Getting Started with Linode and Creating a Compute Instance guides.
Follow our Setting Up and Securing a Compute Instance guide to update your system. You may also wish to set the timezone, configure your hostname, create a limited user account, and harden SSH access. Do not follow the Configure a Firewall section yet. This guide includes firewall rules specifically for an OpenVPN server.
Ensure PHP is already installed on the Linode. PHP 5.3.4 or above is required, but the latest version is recommended. Use the command
php -v
to determine the version of PHP that is installed.
sudo
. If you’re not familiar with the sudo
command, see the Linux Users and Groups
guide.How to Install and Update PHP Composer
The most common way of installing Composer is by using the installation program. However, it can also be installed from the source using Git or a similar system. The steps in this section explain how to download and install the latest version of Composer. The following instructions are geared towards Ubuntu users but are generally applicable towards most Linux distributions.
How to Install PHP Composer
To download and install the latest version of Composer, follow the steps below:
If the
php-cli
component is not already installed, install it usingapt
.sudo apt install php-cli
Navigate to the directory where you want to install Composer. If necessary, create a new directory for this purpose.
Download the Composer installation program from their website using PHP.
php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
Verify the installation file against the SHA-384 checksum to ensure it was downloaded correctly. The checksum for the current version can be found at the Composer Public Key Site . Substitute
installer-checksum
in the command below with the SHA-384 checksum. Ensure the checksum is enclosed in single quotes.php -r "if (hash_file('sha384', 'composer-setup.php') === 'installer-checksum') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;"
You should see a similar output:
Installer verified
Run the installation program. The program verifies some settings and downloads the main composer program to the current directory.
Note A directory for the program can be specified using the--install-dir
option. The filename of the Composer program can be set using the--filename
option.php composer-setup.php
All settings correct for using Composer Downloading... Composer (version 2.1.6) successfully installed to: /home/jeffn/phpcomposer/composer.phar Use it: php composer.phar
Remove the installation program.
php -r "unlink('composer-setup.php');"
To allow Composer to be called globally, move the executable to a directory in
/usr/local/bin
. This is an optional but a recommended setting.sudo mv composer.phar /usr/local/bin/composer
Verify Composer has been installed correctly. If Composer is installed in a local directory, use the
php
command and the name of the executable.php composer.phar
If Composer is installed globally, run the
composer
command without any other parameters.composer
Note The instructions in the remaining sections are valid for a global installation. For a local directory installation, substitutephp composer.phar
in place ofcomposer
for the remainder of the guide.______ / ____/___ _______ _____________________ / / /__ \/ __`__ \/ __\/__ \/ ___/ _ \/ ___/ / /___/ /_/ / / / / / / /_/ / /_/ (__ ) __/ / \____/\____/_/ /_/ /_/ .___/\____/____/\___/_/ /_/ Composer version 2.1.6 2021-08-19 17:11:08
How to Update PHP Composer
Verify the version of Composer that is running.
composer -V
Composer version 2.1.6 2021-08-19 17:11:08
Update Composer to the latest version using
composer self-update
. If you are still running Composer version 1 and want to upgrade to version 2, add the--2
flag to the end of the command.composer self-update
You are already using the latest available Composer version 2.1.6 (stable channel).
How to Install and Update Packages with PHP Composer
To use Composer with PHP, it is first necessary to define the required packages using the require
command. This command also installs the package. The composer relies on the composer.json
files to orchestrate the dependencies. This file describes the required version for each package and lists all of the dependencies. The require
command automatically creates and updates composer.json
, although it is possible to manually create and edit it.
The steps in the following section illustrate how to create a small PHP project that generates a random number using a package chosen from Packagist. It also explains how to search Packagist for an appropriate package and how to add it to the project using Composer.
composer.json
file and add some information. For information on how to publish a PHP package through Packagist, see the “Publishing Packages” section of the Packagist official documentation
.How to Install Packages
Create a new directory for the project and change to that directory.
mkdir random_num cd random_num
Using a web browser, visit the Packagist site to identify a suitable package for inclusion in the project. In the address bar of the browser, enter the following URL:
https://packagist.org/
Enter an appropriate search term for the utility in the search bar on the top of the page and review the results. Each package is identified by the name of the vendor, with the package name taking the format
vendor/package
. Clicking on the package name provides additional information about the package along with API documentation. It is best to select a package that has a high star rating and is well documented. Take note of the full name of the package.In the project name, add the package to the project using
composer require
. Composer retrieves information about the package and adds it to thecomposer.lock
file. The lock file tracks the currently installed versions of the various packages. Ifcomposer.json
does not already exist, Composer creates it. Otherwise, it appends the new package information to this file. Composer also creates avendor
sub-directory. If a version control system (VCS) is used for the project, ensure bothcomposer.lock
andcomposer.json
are added to the VCS.Note Many PHP packages require other system-level packages. When adding a new package, Composer ensures all prerequisite packages are already installed. If any are missing, it displays an error and provides details about the outstanding packages. Locate these packages usingapt search
and install them usingapt install
. Then run thecomposer require
command again.composer require ircmaxell/random-lib
Using version ^1.2 for ircmaxell/random-lib ./composer.json has been created Running composer update ircmaxell/random-lib Loading composer repositories with package information Updating dependencies Lock file operations: 2 installs, 0 updates, 0 removals - Locking ircmaxell/random-lib (v1.2.0) - Locking ircmaxell/security-lib (v1.1.0) Writing lock file Installing dependencies from lock file (including require-dev) Package operations: 2 installs, 0 updates, 0 removals - Downloading ircmaxell/security-lib (v1.1.0) - Downloading ircmaxell/random-lib (v1.2.0) - Installing ircmaxell/security-lib (v1.1.0): Extracting archive - Installing ircmaxell/random-lib (v1.2.0): Extracting archive Generating autoload files
Review the
composer.json
file to ensure it is correct. In certain circumstances, you might have to edit this information.Note The^
symbol in front of the version number for the package tells Composer what versions are allowed. It means version1.2
is the minimum version but any1.x
version is allowed. This setting provides maximum flexibility. Other symbols might tighten or loosen the allowable range. If no symbol is present, only version1.2
is allowed, with no further updates permitted. For more information on versioning, see the Composer Version Documentation .cat composer.json
{ "require": { "ircmaxell/random-lib": "^1.2" } }
To integrate the new classes into a project, use the
autoload.php
script that Composer automatically generated. It can be included in any PHP file using the instructionrequire __DIR__ . '/vendor/autoload.php';
. Below is a samplerandom.php
file that uses the auto-loader and the new package.- File: random_num/random.php
1 2 3 4 5 6 7 8 9 10
<?php require __DIR__ . '/vendor/autoload.php'; $factory = new RandomLib\Factory; $generator = $factory->getLowStrengthGenerator(); print $generator->generateString(32); print "\n ";
To verify that the new
random.php
program is working correctly, run it from the command line. This program uses thegetLowStrengthGenerator
function to generate a 32-character string. This is suitable for a one-time token but is not strong enough for a cryptographic key.php random.php
1bhf1Icu4IhHq4Xzto98PfC2tYCjaVcV
Note If acomposer.json
file is already present, but the packages have not yet been installed, runcomposer install
instead ofrequire
. If you are intending to publish the package on Packagist, create a detailedcomposer.json
file before installing any packages. To generate this template, runcomposer init
. For more information about the structure of thecomposer.json
file, see the Schema Documentation . Complete documentation can be found on the Composer Website .
How to Update a Single Package
The composer update
command can be used to update one or more packages to a more recent version. Composer determines if a new version exists and if it meets the constraints defined in the composer.json
file. It then performs all necessary upgrades and updates the information in the composer.lock
file.
To update a specific package, run the composer update package
command. Substitute the name of the specific vendor and package you want to upgrade.
composer update ircmaxell/random-lib
Loading composer repositories with package information
Updating dependencies
Nothing to modify in lock file
Installing dependencies from lock file (including require-dev)
Nothing to install, update or remove
Generating autoload files
How to Update All Packages
Composer also makes it easy to update all packages at the same time. For a project-wide update, run the following command:
composer update
More Information
You may wish to consult the following resources for additional information on this topic. While these are provided in the hope that they will be useful, please note that we cannot vouch for the accuracy or timeliness of externally hosted materials.
This page was originally published on