php-cloud-wasm

Embedded PHP 8.0–8.5 for Cloudflare Workers, with statically linked Vrzno, ordinary ZIP/deflate, zlib and PDO-CFD1 with native parameters and atomic batches. This package is independent of the browser/Node php-wasm package.

Vrzno requires WeakRef and FinalizationRegistry. Use compatibility date 2025-05-05 or newer, or add compatibility_flags = ["enable_weak_ref"] to your Wrangler configuration when retaining an older date.

Use a version-specific entry inside a Worker module:

import { PhpCloudflare } from 'php-cloud-wasm/php8.5-cloudflare.mjs';

export default {
  async fetch(request, env) {
    const php = new PhpCloudflare({ cfd1: { mainDb: env.DB } });
    const version = await php.exec('return PHP_VERSION;');
    return new Response(String(version));
  }
};

The generated entry statically imports its matched Wasm module. Upload the uncompressed manifest-owned modules as Worker modules; do not fetch and compile Wasm at request time. Use an explicit module inventory if a bundler rejects the unused dynamic-import helper in the generated factory. No eval permissions are required. JavaScript eval, dynamic extensions and persistent filesystems are not supported; PHP eval and request-local PHP execution are supported.

The generic php-cloud-wasm/PhpCloudflare adapter additionally requires a matched runtime, precompiled wasmModule, and version. Version-bound entries supply these automatically. There is no implicit latest-version root entry.

The filesystem is local to each instance. await php.readdir(path) returns names; await php.readdir(path, {withFileTypes: true}) returns serializable {name, isFolder} entries. Both include . and ..; types follow links and metadata errors reject the operation. This does not enable persistent storage.

PDO-CFD1 is compiled into PHP. Supply a request-local binding map and use new PDO('cfd1:mainDb', null, null, [PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION]) with positional or named parameters supplied through execute([...]), or explicit bindings when needed. The driver also supports exec(), quote(), lastInsertId(), BLOB strings/streams, buffered scroll cursors, and observed column metadata. $pdo->cfd1Batch([$insert, $select]) atomically executes distinct, already bound statements from the same connection. Ordinary execution does not require explicit binding. Open PDO transactions remain unsupported; see the PDO-CFD1 contract for details and backend limits. Never expose arbitrary PHP/SQL execution or arbitrary D1-binding names to untrusted HTTP clients.

Wasm memory is initially 64 MiB, with a 96 MiB maximum, per instance. Workers' 128 MB isolate budget is shared by concurrent requests and JavaScript overhead; local runtime tests do not establish production capacity. Bound concurrency and application memory use. ZIP AES/encrypted archives are not part of this profile.

Each PHP version has a php<version>-cloudflare.manifest.json owning its matched runtime, Wasm, helpers, declarations and package metadata. Nightly downloads may also include HTTP Brotli/gzip sidecars, which are not Worker modules. See the repository's Cloudflare guide for build, artifact-only tests and deployment details.