Boilerplate that helps you write RESTful web services on top of Slim framework (

Installs: 43

Dependents: 2

Stars: 25

Watchers: 8

Forks: 11

Open Issues: 1

1.3.0 2014-04-30 22:48 UTC


Here you have yet another framework for writing RESTful web services in PHP, jay! What sets this framework apart from many of the others is that PHP-Rocker is a bundle of Slim and an awesome database facade. Not trying to write everything from scratch makes it possible for you to focus on what's important when writing your RESTful API and let other projects take care of things like routing and data storage.

  • User management
  • CRUD operations Use the base classes in PHP-Rocker to extend the API with your own objects and operations
  • EAV data model
  • Static file storage With support for image manipulation and storage on Amazon S3
  • Built in object cache With support for APC and file based caching
  • Interface based Easy to extend and to customize
  • Administer remote servers from the console
  • Automatically generated documentation Extracts all info from class files, meaning that you only have to write your documentation once
Read more Additional packages
  • Facebook login Integrate your PHP-Rocker server with Facebook
  • Google login Enable authenticated request with user credentials from Google

System requirements

  • PHP v >= 5.3.2
  • MySQL The database layer has support several different databases (oracle, mssql, postgresql...) but PHP-Rocker is so far only tested with MySQL
  • Web server (apache/nginx) If using nginx the .htaccess rewrite rules has to be moved to the rewrite configuration of the server


1) Add file composer.json to your application directory with the following json configuration (notice that you must allow dev packages):

    "minimum-stability": "dev",
    "require" : {
        "rocker/server": "1.2.6"

2) Run composer install in your application directory. This will install Slim and all other packages that PHP-Rocker is dependent on.

$ composer install

3) Run vendor/rocker/server/install.php in your application directory

$ php -f vendor/rocker/server/install.php

- You're done!

API reference

The API reference has moved to its own wiki page.

Extending the API with more operations

Here you can read more about how to create custom operations

Adding your own objects

Here you can read more about how to add your own objects

Manage remote servers via command line

First of move the console program to your bin directory so that you can access it from anywhere.

$ sudo ln -s /path/to/your/rocker/installation/console /bin/rocker

Having done that you add your server (you'll be prompted for server address and user credentials)

$ rocker server

Search for users

# Find users with nick containing John
$ rocker users -q 'nick=*John*'

# Find users coming from either France or Germany that is not admin
$ rocker users -q 'country=France|Germany&admin!=1'

# Find users that has a score greater than 80 and that has a description
# containing either "hockey" or "soccer"
$ rocker users -q 'score>=80&description=*hockey*|*soccer*'

Load user data

$ rocker users -l

You can also create, delete and update the users using the console program. Run rocker in the console to get more help.

A note on security

PHP-Rocker supports basic authentication and RC4 encrypted authentication out of the box. You should always run your web services on a SSL cert when handling business/user data, especially if you're using basic authentication. The RC4 encrypted authentication works basically the same as basic authentication except that the user credentials is encrypted on the client and decrypted on the server using a shared secret. If wanting to run RC4 encrypted requests you'll need to modify the parameter application.auth in config.php.

'application.auth' => array(
    'class' => '\\Rocker\\REST\\Authenticator',
    'mechanism' => 'RC4 realm=""',
    'secret' => 'what-ever-hard-to-guess-string-you-want'

The secret also has to be given to the client communicating with your Rocker server. Pseudo code:

String crypted = RC4.encrypt("the-hard-to-guess-secret", "");
request.addHeader("Authorization", "RC4 " + Base64.encode(crypted));
Other authentication packages
  • Facebook login Integrate your PHP-Rocker server with Facebook
  • Google login Enable authenticated request with user credentials from Google

Auto-generated documentation

The documentation is automatically generated from the operation classes defined in config.php. The class documentation, URI of the operation and the allowed request methods will be added to the generated documentation. Take a look at index.php to see how the documentation is added to Slim's routing-system, you can also change to a template of your own.

Auto-generated documentation


 * This text will extracted to the documentation, as well as @link declarations
 * @link http://...
class MyOperation extends \Rocker\REST\AbstractOperation {

Unit and acceptance testing

To run the unit tests of Rocker navigate to libs/Test and run phpunit. You can also run acceptance tests on your entire infrastructure using the dokimon tests


MIT license

Road map

  • Support file storage on Amazone S3
  • Write the authentication method as a Slim middleware
  • Make it possible to store blob data using PUT
  • Look into using another data model for stored objects (maybe support noSQL)
  • Add support for XML formatted responses
  • Rewrite the console program as a phar and move the source code to a separate project


1.3.0 (unreleased)

  • Auto-generated documentation
  • Client can now determine the content type of the server response by adding .json or .xml to the URI
  • General improvements and minor bug fixes
  • Simplified install procedure
  • Trying to update a user with an already registered e-mail address now results in http status
    409 instead of 400
  • Abstract object factories now implements InstallableInterface
  • Improved install script, all classes that should run install when app is installed is now declared in config.php
  • Added configuration options for user management and file storage
  • Access-Allow-Headers is now only sent when request method is OPTIONS
  • Improved database queries made when calling AbstractObjectFactory::metaSearch()
  • XML content type is now supported
  • Improved console method displaying available servers
  • General improvements in PHP-Rocker\Object\ObjectMetaFactory
  • Fixed bug that made the code to iterate over null variable
  • Replaced logic for image manipulation with Gregwar/Image
  • Fixed bug that sometimes made the console program to crash
  • Added support for file storage
  • Added functionality for image manipulation