What’s New in Yii 3? A Deep Dive into Its Modern Backend Architecture

Yii 3 Released

After years of intensive development, Yii 3 is officially released, continuing Yii’s core principles of high performance, flexibility with sensible defaults, practicality, simplicity, clarity, and consistency.

Motivation

Yii 3 addresses several shortcomings of Yii 1.1 and Yii 2.0, including a closed ecosystem that made configuring generic PHP packages difficult, magic and implicit behaviors, limited PHP‑standard compatibility due to backward‑compatibility constraints, and anti‑patterns such as built‑in service locators that hinder testability and maintainability.

Independent Packages

Unlike the monolithic Yii 1.1/2.0, Yii 3 consists of more than 130 official packages that can be used individually in any PHP code or together as a full framework, with application templates easing the setup.

Application Templates

Three out‑of‑the‑box templates are provided: Web for classic server‑rendered applications, API for API services, and Console for CLI tools and background workers. The templates start with minimal routing, configuration, DI container, and environment wiring; additional features such as database connections must be added explicitly, keeping the stack lean.

Package Compatibility

Yii 3 can work with any Packagist package—whether PSR‑compatible, Symfony components, or generic PHP libraries—thanks to a flexible DI container that can configure any of them.

First‑Class DI Container

The framework’s core is a powerful dependency‑injection container that automatically resolves dependencies, supports configuration arrays, factory closures, and can be debugged with XDebug because the configuration is executed at runtime.

[
    // Interface to class mapping
    EngineInterface::class => EngineMarkOne::class,
    // Detailed configuration
    MyServiceInterface::class => [
        'class' => MyService::class,
        '__construct()' => [
            42,
        ],
        'setDiscount()' => [
            10,
        ],
    ],
    // Factory closure
    'api' => static fn(ApiConfig $config) => new ApiClient($config),
];

// Dependency‑based injection via type‑hinting
final readonly class MyController {
    public function __construct(private CacheInterface $cache) {}
}

Configuration

Configuration follows the familiar Yii 2 style but is far more powerful, supporting multiple environments, overrides, and both DI mappings and plain parameters.

'yiisoft/view' => [
    'basePath' => null,
    'parameters' => [
        'assetManager' => Reference::to(AssetManager::class),
        'applicationParams' => Reference::to(ApplicationParams::class),
        'aliases' => Reference::to(Aliases::class),
        'urlGenerator' => Reference::to(UrlGeneratorInterface::class),
        'currentRoute' => Reference::to(CurrentRoute::class),
    ],
],
'yiisoft/yii-view-renderer' => [
    'viewPath' => null,
    'layout' => '@src/Web/Shared/Layout/Main/layout.php',
    'injections' => [
        Reference::to(CsrfViewInjection::class),
    ],
],

Security

Security receives the same attention as in Yii 1.1/2.0. Packages include access‑control abstraction, RBAC implementation, JWT authentication, user abstraction, middleware for proxy chains and headers, third‑party authentication clients, and helpers such as CSRF protection. A dedicated security guide details recommended response flows.

Database Layer

The database abstraction has been extracted to yiisoft/db, offering a query builder, schema management, and an improved Active Record implementation. Developers may replace it with Cycle ORM or Doctrine, or use raw PDO or native drivers; Yii 3 does not enforce a single implementation.

$posts = $connection
    ->select(['id', 'title', 'created_at'])
    ->from('{{%posts}}')
    ->where(['status' => 'published'])
    ->andWhere(['>', 'views', 1000])
    ->orderBy(['created_at' => SORT_DESC])
    ->limit(10)
    ->all();

Data Abstraction

The yiisoft/data package provides a powerful, framework‑agnostic data abstraction layer, including formatting, pagination, sorting, and UI components such as grid view, suitable for building generic admin panels.

Cache

Cache in Yii 3 is more advanced: it includes built‑in avalanche protection and PSR‑16‑compatible drivers. Supported back‑ends are APCu, DB, Files, Memcached, and Redis.

Standard‑First Architecture

Most components implement PSR interfaces, allowing you to keep Yii’s logger or replace it with Monolog, swap middleware (e.g., CORS handling), replace the request‑response abstraction, or even replace the DI container with another PSR‑compatible implementation.

Work Mode

Yii 3 can run in long‑running “work mode” with RoadRunner, Swoole, or FrankenPHP. The framework initializes once and serves many request‑response cycles, dramatically reducing response time. Developers must avoid persisting mutable state between requests and watch for potential memory leaks; all packages are designed to reset state at the start of each request.

Classic Web Features

All classic server‑rendered web features are available: widgets, view engines (Twig, etc.), forms, asset management, HTML helpers, and ready‑made Bootstrap 5 and Bulma widgets.

API Toolkit

Yii 3 provides tools for building APIs, including data response handling and built‑in Swagger support. The current set is sufficient for robust API development, with more features planned.

HTTP Layer

The HTTP layer follows PSR interfaces and adds convenient abstractions such as HTTP helpers (status codes), cookie handling, and a download response factory for sending files. Additional utilities help with IP protocol handling.

Input & Validation

Validators are attribute‑driven and can populate forms from HTTP input. Example validator class:

<?php
declare(strict_types=1);

namespace App\Web\Echo;

use Yiisoft\FormModel\FormModel;
use Yiisoft\Validator\Label;
use Yiisoft\Validator\Rule\Length;

final class Form extends FormModel
{
    #[Label('The message to be echoed')]
    #[Length(min: 2)]
    public string $message = '';
}

Helpers, Internationalization, Testing, and Error Handling

Various helpers simplify common programming tasks. Internationalization uses ICU‑based message formatting, view‑layer support, and router integration. Testing is easy thanks to proper dependency inversion, PSR‑based request/response, and the yiisoft/test-support package providing PSR implementations. Error handling features friendly exceptions with detailed pages, stack‑trace highlighting, and optional Sentry integration.