6.0.0-beta13
4/17/26
Doc/Dev/ConversionH5 | Doc/Dev/CopyrightLicense
Doc/Dev/ConversionH6 26

Notes on converting apps from Horde 5 to Horde 6

These are by far not complete. Last updated: 2026-03-04

  • Conversion Status

||~ Package ||~ Strategy ||~ Unit Tests ||~ PHPStan ||~ PHP 8 ||~ Comments/Upgrade path ||
|| horde/alarm|| Legacy || 9.5 || Yes || Yes || Tests for unnamespaced modernized. Actual PSR-4 upgrade postponed, should use PSR-3 logger and modernized SQL when available ||
|| horde/argv|| Parallel || 9.5, 447 tests || Yes || Yes || Modern API complete with contextual option groups. See argv-contextual-option-groups-implementation-complete.md ||
|| horde/components || Wrapper || 9.4, Story tests broken || Yes || Yes || Lots of new features related to git, composer and workflows. Still maintains package.xml and requires it in some places. 219 src/, 5 lib/ ||
|| horde/horde-installer-plugin|| Modern || 9.5, very limited || Yes || Yes || Handles all the horde setup stuff, symlinks, workaround configs etc. 33 src/, 0 lib/ ||
|| horde/horde-deployment|| Modern || n/a || n/a || Yes || The base project for a horde installation with default dir tree - Branches reflect bundles ||
|| horde/hordectl || Modern || 9.5 || No || Yes || CLI management tool. 41 src/, 0 lib/ ||
|| horde/http_server || Modern || 9.5, only stub of a test framework || Yes || yes || Successor to horde/controller. 13 src/, 0 lib/ ||
|| horde/http || Parallel || 9.4 || No || yes || Major BC breaks. Implementation based on PSR-7, PSR-18. 28 src/, 17 lib/ ||
|| horde/injector || Wrapper || 9.5 || Yes || yes || Carefully added signatures, limited BC breaks for child injectors. Now PSR-11. 11 src/, 11 lib/ ||
|| horde/crypt_blowfish || Legacy || 9.5 || No || yes || works with openssl 3 ||
|| horde/controller || Keep || 9.4 || No || Yes || Only added namespaced wrapper code for interop with horde/http_server and PSR-7. 2 src/, 22 lib/ ||
|| horde/stream_wrapper || Parallel || 9.4 || No || yes || Class names have Wrapper appended to make sense when USEd. 8 src/, 7 lib/ ||
|| horde/util || Parallel || 9.5 || No || yes || Slightly renamed classes and typing upgrades. 9 src/, 7 lib/ ||
|| horde/text_diff || Parallel || 9.5 || No || yes, 8.2beta || Renamed classes, typing upgrades. 20 src/, 19 lib/ ||
|| horde/support|| Parallel || 9.4 || No || yes || Slightly renamed classes and typing upgrades. 10 src/, 15 lib/ ||
|| horde/compress_fast || Parallel || 9.4 || No || yes || Straight. 8 src/, 7 lib/ ||
|| horde/mongo || Parallel || 9.4 || No || yes || Removed support for the older extension - Still using the compat library. 7 src/, 6 lib/ ||
|| horde/cli || Parallel || 9.4 || No || yes || straight. 10 src/, 3 lib/ ||
|| horde/memcache || Parallel || 9.4, started minimal test suite || No || yes || straight. 15 src/, 22 lib/ ||
|| horde/cache || Parallel || 9.4, started minimal test suite || No || yes || Dropped some dead in-memory caches. 16 src/, 17 lib/ ||
|| horde/test || Parallel || 9.4, started minimal test suite || No || yes || straight. 14 src/, 8 lib/ ||
|| horde/routes || Parallel || 9.4 || No || yes || straight. 11 src/, 10 lib/ ||
|| horde/db || Parallel || 9.4 || No || yes || src/ Still a WIP mess. Dropped support for classic mysql extension. 42 src/, 41 lib/ ||
|| horde/log || Parallel || 9.4 || No || yes || Incompatible new design based on PSR-3, See ((Doc/Dev/HordeLog)). 17 src/, 8 lib/ ||
|| horde/thrift || Keep || n/a || n/a || yes || Only nominally released as a leaf dependency, may be deprecated ||
|| horde/scribe || Keep || n/a || n/a || yes || Only nominally released as a leaf dependency, may be deprecated ||
|| horde/translation || Parallel || 9.5, covers only lib/ || No || yes || Slightly renamed classes and typing upgrades. 6 src/, 5 lib/ ||
|| horde/exception || Parallel || 9.5 || No || yes || Slightly renamed classes and typing upgrades, better support for 3rd argument. 12 src/, 7 lib/ ||
|| horde/eventdispatcher || Modern || 9.5, Stub only || Yes || yes || PSR-14 replacement for PubSub, See ((Doc/Dev/HordeEventDispatcher)). 2 src/, 0 lib/ ||
|| horde/skeleton || Modern || 9.5, Stub Only || No || testing || Example app. 11 src/, 0 lib/ ||
|| horde/share || Legacy || 9.5, covers only /lib || No || yes, wip || Tests are not really run for the DB specific drivers yet but signatures check out. 0 src/, 44 lib/ ||
|| horde/kolab_format || Legacy || 9.5, covers only /lib || No || yes, wip || Little interest beyond making test suites for other libs work. 0 src/, 79 lib/ ||
|| horde/kolab_storage || Legacy || 9.5, covers only /lib || No || yes, wip || Little interest beyond making test suites for other libs work. 0 src/, 119 lib/ ||
|| horde/cli_modular || Parallel || 9.5, covers only /lib || No || yes, wip || Lib/ needs some minor fixes for PHP 8.1 compat. src/ is a major rewrite to account for modern autoloading, dependency injection, much more typing and lessons learned from cli_modular applications. 8 src/, 6 lib/ ||
|| horde/form || Parallel || 9.5 || Yes || Yes || Major modernization with typed code and PSR compliance. 61 src/, 14 lib/ ||
|| horde/constraint || Parallel || 9.5 || No || Yes || PSR-4 conversion complete. 14 src/, 11 lib/ ||
|| horde/secret || Modern || 9.5 || Yes || Yes || New implementation. 10 src/, 0 lib/ ||
|| horde/token || Modern || 9.5 || Yes || Yes || New implementation. 13 src/, 0 lib/ ||
|| horde/url || Parallel || 9.5 || No || Yes || PSR-4 conversion. 4 src/, 3 lib/ ||
|| horde/version || Modern || 9.5 || Yes || Yes || New semver implementation. 18 src/, 0 lib/ ||
|| horde/composer || Modern || 9.5 || Yes || Yes || Composer utilities. 13 src/, 0 lib/ ||
|| horde/githubapiclient || Modern || 9.5 || Yes || Yes || GitHub API v3 client. 68 src/, 0 lib/ ||
|| horde/hordeymlfile || Modern || 9.5 || Yes || Yes || .horde.yml parser. 8 src/, 0 lib/ ||

  • Apps Status

||~ App ||~ Strategy ||~ PHPUnit ||~ Status ||
|| horde/base || Parallel || Yes || 4 src/, 44 lib/ ||
|| horde/imp || Parallel || Yes || 1 src/, 318 lib/ - Major work needed ||
|| horde/ingo || Legacy || Yes || 0 src/, 118 lib/ ||
|| horde/kronolith || Parallel || Yes || 11 src/, 109 lib/ ||
|| horde/turba || Legacy || Yes || 0 src/, 52 lib/ ||
|| horde/nag || Parallel || Yes || 1 src/, 46 lib/ ||
|| horde/mnemo || Legacy || Yes || 0 src/, 26 lib/ ||
|| horde/ansel || Parallel || Yes || 1 src/, 93 lib/ ||
|| horde/whups || Parallel || No || 4 src/, 99 lib/ ||
|| horde/wicked || Parallel || Yes || 13 src/, 27 lib/ ||
|| horde/passwd || Parallel || Yes || 1 src/, 27 lib/ ||
|| horde/gollem || Parallel || No || 1 src/, 14 lib/ ||
|| horde/jonah || Parallel || Yes || 1 src/, 29 lib/ ||
|| horde/sesha || Legacy || Yes || 0 src/, 27 lib/ ||
|| horde/trean || Parallel || No || 1 src/, 21 lib/ ||

  • Library strategies

++ Parallel
Parallel strategy means double maint. burden but high freedom for due improvements and necessary BC breaks.

Example: horde/test, horde/cache, horde/cli

  • Keep unnamespaced PSR-0 code as-is or only make changes required by composer.
  • Add PSR-4 PHP 7.4+ code in src/ - it may contain BC breaks and structural changes.
  • develop new code quality measures only against the src/ version (phpstan, member/parameter/return type hinting, strict types)
  • Convert unit tests for phpunit 9.x+, use PSR-4 for unit tests, test against the namespaced version
  • src/ Code must be php 7.4 compatible and php 8 compatible.

Current Count: ~40 libraries using Parallel strategy

++ Wrapper
Wrapper strategy allows both old and new calling code to leverage the same slightly modernized code base. However, BC breaks must be prevented.

Example: horde/components, horde/injector

  • Move code to src/ and namespace it
  • Add wrappers or child classes to lib so consuming code still works
  • Be conservative about return type hinting, parameter type hinting and other potentially BC breaking measures
  • Convert unit tests for phpunit 9.x+, use PSR-4 for unit tests, test against the namespaced version - maybe keep some duplicate tests against the wrapper code to prove correctness.
  • All Code must be php 7.4 compatible and php 8 compatible.

Current Count: ~3 libraries using Wrapper strategy (components, injector, cli_application)

++ Modern

Newly developed code should only focus on the composer use case

Example: horde/horde-installer-plugin, horde/http_server, horde/hordectl, horde/skeleton

  • Follow PSR-4, PSR-12, PHP 7.4+, ignore PEARisms unless they belong to the problem domain.
  • PHPStan level 4 and higher.
  • member/parameter/return type hinting, strict types
  • Avoid mixed parameter and return type designs.
  • Avoid array constructors if it makes sense. (When switching to PHP 8, we will get named arguments)
  • src/ Code must be php 7.4 compatible and php 8 compatible.

Current Count: ~15 libraries using Modern strategy (new implementations)

++ Legacy / Keep

Libraries which are essentially deprecated but kept around for H6, or not yet converted

Example: horde/controller (Keep), horde/alarm (Legacy but functional)

  • Only necessary changes to avoid breaking in modern PHP
  • unit tests should be PHPUnit 9+ ready
  • May eventually be converted or deprecated

Current Count: ~90 libraries still in Legacy mode (0 src/ files)

  • General
  • Unnamespaced code mostly follows Horde 5 Coding standards and very little conversion requirements
  • With some necessary exceptions, Horde 6 should be able to cooperate with Horde 5-ish apps and libraries with very little modification for composer compat
  • Unconditional require/require_once/include to paths outside the library's own lib or src dir need to check for the require'd class first (likely breaks in H6 via composer).
    [Unnamespaced code still needs Horde_Autoloader's slightly different approach than composer's autoloader]
  • Consider: Horde 5 Framework lived out 2012-2021, Horde 6 to be intentionally shortlived, deprecating more stuff over time.
  • Allow a very smooth transition path, avoid big bang changes. [STILL TRUE]

++ Exceptions to the rule

  • Most of the upgrade requirements are only targeted at namespaced code

++ Mandatory

  • Horde:: is deprecated [NO REAL REPLACEMENT YET - Still in planning]

  • [rla thinks] we should adopt PSR-2, PSR-12 wholesale with an optional opt-out for protected/private underscoring [IMPLEMENTED in Modern libraries]

  • Composer based setup must work with all libraries we intend to keep [SOLVED - All H6 libs have composer.json]

  • [rla thinks] Deprecate Horde_Forms usage. Keep it where it is until we can refactor, but make it clear this is a legacy concept

    • Form library modernized with src/ implementation - see horde/form

  • Update Horde_Core to support both namespaced apps non-namespaced apps and mixed. [ONGOING - Core has 44 src/, 280 lib/]

  • Update Horde_Test to support namespaced unit tests (PHPUnit 9 spews warnings for unit test classnames different than file name, so there is little use in BC here) [DONE]

  • Unit Tests must support the current stable phpunit [DONE - Most libs using PHPUnit 9.x+]

  • Check all pear package dependencies if they are also available via packagist or a proper composer channel rather than pear [MOSTLY DONE]

  • Update skeleton to use

    • horde/http_server, [DONE - skeleton is Modern]
    • Namespacing, [DONE]
    • Type Hints where appropriate [DONE]
    • Model Interface and Rdo implementation rather than driver architecture [NOT YET DONE]

++ Optional / Best Practice

  • Try to drop usage of pear libraries if we only use little portions of their api
  • Consider if there is a more modern alternative available on packagist
  • Unbundle bundled code if you can, use composer dependencies [UNBUNDLED phpunit, sabredav]
  • Maintain a branch or fork of Skeleton to showcase Horde Ajax Framework and an SPA frontend
  • All URL generation should be moved to Horde_Routes_UrlWriter driven by config/routes.php [NOT DONE]
  • A more copy/paste ready boilerplate for ClassLevelDocBlock, FileLevelDocBlock, MethodLevelDocBlock
    • Consider: Maybe some custom rules for php-cs-fixer

++ Exceptions To The Rule

  • Empty/deprecated apps (bundle, dashboard, theme-material, etc) - No conversion needed
  • Namespaces and dir layout
    ++ Mandatory

  • The home namespace for a library is $Vendor$Name, e.g. Horde\View

  • The home namespace for a subtype library is $Vendor$Parent$Name e.g. Horde\Xml\Element rather than Horde\Xml_Element

  • The Home Namespace for an app in $Horde$Name, e.g. Horde\Turba

    • TODO: Should we allow third party apps to use their proper vendor if the composer package is type horde-app? We could have an optional registry key (B1 clause)

  • The Horde Base app is Horde\Base

    • DISCUSS: Any arguments for calling it Horde\Horde? Should we rename/alias the base app horde/base altogether?
      • Base is an even worse name than "horde". Between Base and Core, things are often mixed or simply on the wrong side.

  • If a library has an interface or base class Horde_$Name, promote it to either:

    • Horde$Name$Name
    • Horde$Name$NameInterface
    • Horde$Name\Base
    • Horde$Name\Constants
    • In case of base classes, re-think if we are not better off with an interface and some trait

  • Horde:: is Horde\Core\Horde:: though I think we should re-think using it at all

  • Un-namespaced controllers go to app\controllers\ dir, namespaced controllers just go anywhere under src/, i.e. src/Middleware, src/Handler, src/Controller with no magic attached.

  • Un-namespaced library code goes to lib/

  • New or converted namespaced library code goes to src/.

++ Optional

  • Prefer Use statements over prepending unnamespaced code with a backslash \ unless it is single-use and would require "use as" to avoid clashes.

++ Exceptions to the rule

  • Code which was already namespaced before Horde 6 may be left in lib/ if other unnamespaced code depends on it.
    • In this case, don't forget to tweak autoloading rules in .horde.yml and adjust any github actions workflows
  • PHPDoc / Type Hints / Type Declarations

Remember Liskov:

  • Interface/Base class parameters should be as specific as possible. Derived/Implementing classes can only accept the same or less specific definitions
  • Interface/Base class return type parameters should be as unspecific as makes sense. Derived/Implementing classes can announce to return the same or more specific definitions.

++ Mandatory

  • PHPDoc all parameters and return values, regardless if you have typehinted them.
  • Prefer A|B|null over "mixed"

++ Optional

  • Parameter Type hints for string, int, boolean SHOULD be added to the namespaced interfaces where possible
  • Parameter Type hints for classes SHOULD be added to be added to the namespaced interfaces where possible.
  • Use Nullable (?) for optional parameters
  • Prefer iterable over array if you can to allow later upgrades from arrays to container objects, generators, iterators etc
  • Where Type Hints cannot express exactly what a parameter accepts, typehint for "object" or leave typehint altogether. In any case, make the PHPDoc more specific and wordy

++ Exceptions to the rule

  • Wrapper strategy libraries may need to be conservative with type hints to maintain BC
  • GLOBALS usage

++ Whitelist

  • For $injector:

  • Horde\Core\Registry

  • For $_GET, $_POST, $_REQUEST

  • Horde\Controller\

  • Horde\Routes\

  • Horde\Core\

  • Horde\Rpc\

  • Horde\Base\

  • Horde\Cli\

  • for $config:

    • Horde\Base\
    • Horde\Core\Registry\
    • Horde\Core\Config\

  • for $page_output:

    • ?

  • for $__autoload

++ Mandatory

  • Namespaced Classes which are not in the whitelist must get the listed globals from constructor or method parameter

++ Optional

  • Factories SHOULD use constructor/setter parameters rather than globals if possible.

++ Exceptions to the rule

  • Legacy libraries may continue using globals as needed
  • DI / Injector and Constructors

As Horde has evolved over the years, we have different types of classes, sometimes even mixed.

  • Classes which implement create-on-the-fly objects with no/few dependencies or are mostly static, e.g. Horde_Url, Horde_Date, Horde_String
  • Classes which have one or few instances to cover most or all use cases, e.g. the DB Driver, the registry. They will typically be provided by the injector directly or via a factory without explicit parameters
  • Messy stuff which cannot decide if it is a factory or a base class or wants composition, e.g. Horde_Form, Horde_Rpc
  • Classes which are intended as Per-Entity objects

++ Mandatory

  • Constructors SHOULD depend on interfaces or base classes, not on the (single) implementation.

  • HordeBase or App configuration SHOULD be depended on as TODO object, not as array and explicitly not via global state

  • Apps must not care for configuration of other apps, only theirs or HordeBase

  • Namespaced app-internal objects which implement an interface should be registered with the injector using the class combined with ::class, e.g.

// Use a factory to get an implementation // In case the factory cannot be autowired itself, you need to register how to get it first. $injector->bindFactory(Horde\Kronolith\Calendar\Resource::class, Horde\Kronolith\Calendar\Factory::class, 'create') // In case you want a specific implementation and it can be autowired, just bind it. $injector->bindImplementation(Horde\Kronolith\Renderer::class, Horde\Kronolith\Renderer\Default::class);
  • Note there are no strings, this is the class itself - ::class returns the fully qualified strings
  • If you have imported the class with use, you can just use the imported name:
use Horde\Kronolith\Calendar\Resource; use Horde\Kronolith\Calendar\Factory as CalendarFactory; use Horde\Kronolith\Renderer; use Horde\Kronolith\Renderer\Default as RendererDefault; // Use a factory to get an implementation // In case the factory cannot be autowired itself, you need to register how to get it first. $injector->bindFactory(Resource::class, CalendarFactory::class, 'create') // In case you want a specific implementation and it can be autowired, just bind it. $injector->bindImplementation(Renderer::class, RendererDefault::class);
  • Registering an implementation by an arbitrary string is still legal, we even might need it for bc compat with some designs.

    $injector->bindImplementation('Forms', '\Horde_Forms_Base');

++ Optional

  • Constructors SHOULD better depend on interfaces rather than base classes but SHOULD NOT depend on the (single) implementation.
  • Try to refactor constructors to only require interfaces which can be provided by the injector (directly or via a factory)
  • If a class used to have a very flexible constructor allowing multiple calling convention, try to distill one calling convention and create either static creator methods or an external factory/builder class
  • Internal creation of objects from other packages should be left to trivial cases (e.g. Horde_Date). Otherwise it should happen by injecting some instance provider.
  • Use sub-injectors to ensure we do not spill application specific bindings into other apps.

++ Exceptions to the rule

  • Dependencies may be created internally with some hardcoded setup in case of convenience/fallback scenarios. We should not overuse this as it encourages relying on it.
  • reqire/require_once, Horde\Autoloader and Composer Autoloader

++ Required

  • include, require and require_once should only ever happen to setup autoloading or as part of the autoloader or related to non-php code (templates, data)

  • make all explicit require/require_once check if the required class is already available for loading.

  • At least for now, we should not drop Horde\Autoloader

  • Horde\Autoloader must always act AFTER the composer autoloader, not first

++ Optional

  • Detect composer autoloader and provide a backend which translates Horde\Autoloader runtime API to composer API

++ UNCLEAR

  • Do we still want to support git-tools setups?
  • I have implemented some basic git handling in components now.
  • git-tools package exists but has 0 src/, 27 lib/ and no PHPUnit tests
  • package specific notes

++ horde\imp

  • Find replacement for optional dependency File_ASN1 from phpseclib
  • Major app - needs significant conversion work (1 src/, 318 lib/)

++ Horde\Injector
++ Optional

  • Implement PSR-11 but do not deprecate getInstance(), setInstance() [DONE - PSR-11 implemented]

++ Horde\Date
++ Optional

  • Horde\Date use cases should generally be checked for timezone mismatches e.g. when converting UTC strings from database
  • There is some headache potential with Horde\Db implicitly using Horde\Date without timezone information when SELECTing datetime values.
  • This is especially annoying with Horde\Rdo
  • Horde\Date constructor should always require an explicit timezone and current time
  • Provide convenience static methods for "fromThisFormat()", "fromThatFormat()" to keep that complexity out of the value object

++ Horde\Core
Mandatory:

  • Provide an alternative for Horde_PageOutput which only returns strings rather than doing output (needed, otherwise controllers are littered with ob_start())
  • Provide a type to wrap horde config array for DI [DONE]
  • A lot of class names must be fixed for namespacing [IN PROGRESS - 44 src/, 280 lib/]

Optional:

  • Registry (probably rather 6.1) Provide a more robust inter-app API but don't break the current inter-app API for now
  • Allow passing objects as long as they implement sleep/wakeup so RPC usecases don't break
  • Allow implementing specific APIs and methods in Horde$App\Api$Api but still support $App_Api class for non-namespaced
  • Move vfs/webdav implementations to Horde$App\Api\Vfs

++ Horde\Rpc
Mandatory:

  • Fix the signature missmatch errors [NOT DONE]
    Optional:
  • Default to JsonRpc rather than XmlRpc
  • Refactor to controller framework
  • Library Upgrade strategy (pre release)

Apart from mandatory changes, we should not currently port all horde to the new standard quickly.

++ Mandatory

  • Existing close-to-core libraries should provide some backward compat either by keeping the code in lib/ mostly unchanged or by having lib/ be some wrapper for src/
  • Once H6 has been released, H6.x libraries need to keep whatever legacy support they had until H7

++ Optional

  • New libraries should only be implemented according to current best practices
  • Existing fringe libraries may be completely converted to namespaces, dropping unnamespaced versions altogether (pre H6 release)

++ Exception to the rule

  • Breaking apps which have not officially been released as Horde 5 is OK, we may fix them later. Still, it's nice to be nice if you can.
  • App Upgrade Strategy (pre release)

++ Required

  • Apps may change their internal composition in minor releases (middle digit)
  • Apps may mix and match src/ and lib/ but may only ever have ONE implementation of a class either src/ or lib/. (internal consistency)

++ Optional

  • Apps should move from unnamespaced library usage to namespaced library usage whenever feasible even if there is a compat layer.
  • Developer's wishlist
  • JSON version of the topbar
  • Have more control over the prefs menu (passwd app related prefs should merge with global/horde prefs related to passwords etc)
  • Have a version of PageOutput that returns a string or a stream
  • Make the Themes & JS output useful for custom view types without default prototype/jquery stuff (React UI or similar use cases)
  • Assist with user-customized translations
  • Default way to expose translations to js world
Home
Usage
Recent Changes
All Pages