What Is Yii?
FrameworkYii is a PHP framework for web applications and admin back ends. Detection relies on the assets and CSRF field its default setup publishes. A Yii site is also reported as PHP.
Detect Yii on any website:
Why Yii Matters
Framework choice shapes hiring, tooling, deploy targets, and long-term maintenance. If you've inherited a Yii codebase, are comparing it against alternatives, or are trying to recreate a site that uses it, knowing how Yii leaves fingerprints in production HTML is the fastest way to ground-truth the stack without opening the repo. Our detector is scanning the web for Yii signals continuously — real examples appear below as they're discovered.
Does Yii Mean a Site Was Built With AI?
Yii alone is not an AI signal.
A PHP framework is standard web tooling used by hand-coding developers and AI tools alike. It becomes weak supporting context only in combination with other evidence — for example a shadcn/ui + Supabase + Vite bundle that matches a known AI-builder export — and never counts as proof on its own.
How this feeds the score: builder fingerprints, bundle artifacts and AI-tool traces are weighed separately from stack context like frameworks, libraries and hosting. The full breakdown is on How scores work.
How Websites Using Yii Work
- yii.js and yii.activeForm.js under /assets/<hash>/
- CSRF field `YII_CSRF_TOKEN`, `_csrf-frontend` or `_csrf-backend`
- Matching cookies
- Not detectable when no Yii front-end assets are loaded
Best Practices When Working With Yii
Based on patterns in our scan dataset and the detection evidence tiers.
- →Start by running a Yii detection scan on any URL you're evaluating — the 80+ signal engine returns a confidence score plus the exact markers it matched, which beats reading view-source by hand.
- →Cross-check the result against the full detection evidence in /how-scores-work — confidence tiers tell you whether a match is strong (headers + scripts) or circumstantial (a single HTML pattern).
- →Use Yii detection results alongside the hosting + CDN signals on the same scan report — the framework only tells half the deployment story.
How we detect Yii — see our methodology: AI Influence Score calculation, evidence tiers, and fingerprint signal types.
How Our Detector Identifies Yii
Our scanner analyzes multiple layers of a website's technical fingerprint to detect Yii usage.
- Script URLs or inline script content matching "/assets/[0-9a-f]{6,}/yii(.[a-z]+)?.js", "yii.(activeForm|validation).js" (high-confidence tier)
- HTML structure patterns such as "name=["'](YII_CSRF_TOKEN|_csrf-(frontend|backend))["']" (medium-confidence tier)
- Cookies named like "YII_CSRF_TOKEN", "_csrf-(frontend|backend)" (medium-confidence tier)
- Signal weights for Yii: 85 points per high-tier match, 55 per medium, 25 per low — a site needs 60+ points before Yii is reported.
Websites Built With Yii
Real sites detected by our scanner
No examples detected yet — scan any Yii website to add it.
Frequently Asked Questions About Yii
What is Yii?+
Yii is a PHP framework for web applications and admin back ends. Detection relies on the assets and CSRF field its default setup publishes. A Yii site is also reported as PHP.
Does Yii mean a website was built with AI?+
Yii alone is not an AI signal. A PHP framework is standard web tooling used by hand-coding developers and AI tools alike. It becomes weak supporting context only in combination with other evidence — for example a shadcn/ui + Supabase + Vite bundle that matches a known AI-builder export — and never counts as proof on its own.
Why does Yii matter?+
Framework choice shapes hiring, tooling, deploy targets, and long-term maintenance. If you've inherited a Yii codebase, are comparing it against alternatives, or are trying to recreate a site that uses it, knowing how Yii leaves fingerprints in production HTML is the fastest way to ground-truth the stack without opening the repo. Our detector is scanning the web for Yii signals continuously — real examples appear below as they're discovered.
How do we detect Yii?+
Our scanner checks for these signals: Script URLs or inline script content matching "/assets/[0-9a-f]{6,}/yii(.[a-z]+)?.js", "yii.(activeForm|validation).js" (high-confidence tier); HTML structure patterns such as "name=["'](YII_CSRF_TOKEN|_csrf-(frontend|backend))["']" (medium-confidence tier); Cookies named like "YII_CSRF_TOKEN", "_csrf-(frontend|backend)" (medium-confidence tier); Signal weights for Yii: 85 points per high-tier match, 55 per medium, 25 per low — a site needs 60+ points before Yii is reported.. Each match contributes to a confidence score, and the full evidence tiers are documented at /how-scores-work.
How many websites using Yii are in the database?+
We're still collecting live examples of Yii — scan any URL you suspect uses it to add it to the dataset.
What are the typical characteristics of a Yii website?+
yii.js and yii.activeForm.js under /assets/<hash>/. CSRF field `YII_CSRF_TOKEN`, `_csrf-frontend` or `_csrf-backend`. Matching cookies. Not detectable when no Yii front-end assets are loaded
Related Tools & Technologies
Other frameworks we detect
Ready to put Yii detection to work?
You now know what Yii is, why it matters, how to spot it, and where the detection signals come from. The next step is using that knowledge on a real URL — yours, a competitor's, or a prospect's.