Recent posts tagged laravel

If you are looking up how to protect a Laravel app with a WAF, split the job before you change DNS. Laravel already owns validation, CSRF, authentication middleware, and authorization. A WAF owns the HTTP path in front of that code. The SafeLine docu...

A Laravel app does not become protected just because a firewall product exists. The useful question is where the control sits, what traffic it can see, and how you prove the origin still works after the cutover. This guide is a decision checklist for...

PHP's two critical flaws, CVE-2026-109618 and CVE-2026-109619 PHP2Shell, were patched in 8.5.12, 8.4.27, 8.3.36 and 8.2.35. The advice everywhere was to update. I want to write about something less covered: how much you can honestly claim afterwards....

If you take payments with Stripe, the money moving is only half the story. The other half arrives later as Stripe webhooks: messages that tell your app a payment succeeded, failed, was refunded or disputed. Handle them badly and you get customers who...

If your mobile app decides which step comes next, your backend is trusting the client. That's where we were at Zeney Pay1. Sign-in, KYC and transfers were multi-step flows, and half of each flow's logic lived in the app. The backend couldn't tell wh...

A file hash only means something if you trust the moment it was recorded. That sounds obvious, but it is the part of integrity checking that people most often skip. Here are the design decisions behind the baseline feature in Laravel Scalpelhttps://g...

JSON is the right default for most Laravel APIs. It is readable, supported everywhere, easy to debug, and familiar to every client. MessagePack is worth considering when payload size, bandwidth, or a controlled client ecosystem matters. It is a comp...

I built a rental listing platform with Laravel 13, PHP 8.4, PostgreSQL, Redis, and Sanctum. One problem quickly became obvious: > Agents could post the same property multiple times. In Nigeria, property listings often don't have precise street add...

Forge and Vapor keep the stack alive. Front-end Core Web Vitals need a separate URL list, schedule, and alert path across every client app. Laravel agencies often run a clean ops story and a messy front-end story at the same time. Forge or Vapor sho...

If you’ve tried deploying a Laravel application on Dokploy the self-hosted Heroku alternative built on Docker and immediately ran into a wall of Database connection refused or SQLSTATEHY000 2002 errors, you are not alone. It works perfectly on your...

Stop Slow Laravel: Your Next Architectural Leap Is Here! Introduction It’s 2026, and the landscape of web development has evolved dramatically. If your Laravel applications are still relying on traditional PHP-FPM for request handling, you might be...

Your Laravel Isn’t Slow, Your Architecture Is: Mastering Scale with Advanced Octane & Reactive Caching Introduction If your Laravel API is struggling under heavy load, the instinct is often to dive deep into optimizing Eloquent queries or micro...

TL;DR: Step-by-step guide to building a multi-department approval workflow in Laravel with database-driven routing, Events, and role-based access. Code included. Introduction One of the most common problems I saw while building VMMS was this: docume...

The Problem I'm a BS Information Technology student in the Philippines. During my time observing how offices work, I noticed something that kept bothering me. Voucher processing is still done manually almost everywhere. Someone fills out a paper...

When you deploy a custom analytics package or any traffic-monitoring tool, your expectations are usually modest: a few hits from friends, maybe your mom, or an occasional lost translator bot. But after the server runs for a couple of days, the realit...

Laravel AI SDK now supports MCP Model Context Protocol servers through a dedicated MCP client in the laravel/mcp package. Developers can connect Laravel AI agents to any MCP server — local via STDIO or remote via HTTP — and use its tools alongside cu...

Over the past year, developing laravel-visit-analytics has evolved from a simple experiment into a significant engineering challenge. When standard analytics tools failed to meet my requirements for GDPR/DSGVO compliance and data accuracy, I realized...

Why Not Google Analytics? Or why I love reinventing the wheel To be honest, this wasn't an easy call. I’ve been in development for quite a while and had grown accustomed to GA. What could be simpler: you slap a script with your ID onto the site, an...

Google Sheets is often where business workflows begin. For Laravel apps, that usually means imports, exports, internal dashboards, user-managed spreadsheets, and the occasional "can we sync this automatically?" request. olamilekan/laravel-google-sh...

A few days ago, I decided to go beyond tutorials and build something that reflects how real businesses actually operate. That’s how Shop-Control was born — a full-stack Point of Sale POS and inventory management system built with Laravel. This proj...