PHP driver

PHP 8.1+ (requires ext-openssl). MIT. Package version 0.0.1. Driver package versions are independent of the engine version.

bash

composer require bzync/nextsql

The Composer package is bzync/nextsql, namespace NextSQL\. Source: `drivers/php` — you can also vendor it straight from the tree with its bundled autoload.php.

php

require 'vendor/autoload.php'; // or 'drivers/php/autoload.php' when vendored

$conn = NextSQL\Client::connect([
    'address' => '127.0.0.1:7210',
    'database' => 'default',
    'user' => 'app',
    'password' => getenv('NEXTSQL_DATABASE_PASS'),
    'insecureNoTLS' => true,
]);

$res = $conn->exec('SELECT name FROM items WHERE price < $1', [
    ['kind' => 'decimal', 'value' => '50.00'],
]);
$conn->close();

Remote TLS:

php

$conn = NextSQL\Client::connect([
    'address' => 'db.example.com:7210',
    'user' => 'app',
    'password' => getenv('NEXTSQL_DATABASE_PASS'),
    'tls' => ['cafile' => '/etc/nextsql/ca.pem', 'servername' => 'db.example.com'],
]);

For --require-client-key, pass 'key' => $clientRoot as a 32-byte string. Never put keys or passwords in a URL.

Follower-read routing uses NextSQL\Cluster::connect. See High availability. database may name the deployment database.

Client-encrypted fields#

Pass a FieldKeyProvider as fieldKeys. Use encryptField / decryptField for randomized NSCE1 columns. Explicit ENCRYPTED CLIENT DETERMINISTIC columns use encryptFieldDeterministic / decryptFieldDeterministic; bind the produced NSCE2 value only to equality/inequality predicates for that exact column. Deterministic mode leaks equality and frequency. FileFieldKeyring provides versioned durable rotation/revocation; general searchable encryption is not supported.