Laravel and PHP writing

Production notes for code that has to survive real traffic.

A practical archive about Laravel systems, PHP architecture, databases, debugging, deployment, security, search visibility, and the engineering decisions that keep real applications maintainable.

Read latest posts RSS feed

Environment Configuration in PHP: .env Files, Secrets & Vault Integration

01April 25, 2026 · 16 min readSecurity

Featured production note

Environment Configuration in PHP: .env Files, Secrets

Best practices for managing config - dotenv libraries, secrets management with HashiCorp Vault, and runtime injection in containers.

PHP
Environment Configuration
Secrets
Vault
Security

Read Environment Configuration in PHP: .env Files, Secrets

Now viewing

Security production archive

This filtered archive keeps related Security posts together so the topic is easier to scan before opening a detailed article.

Reading lanes

Start with the problem.

Architecture decisionsBoundaries, interfaces, ownership, and long-term code shape.
Performance workQueries, workers, profiling, cache behavior, and production speed.
Debugging practiceTrace failures, isolate causes, and make bugs reproducible.
Security reviewsAuth, inputs, uploads, secrets, headers, and release risk.

Article archive

Security articles

17 articles filed under Security.

02April 8, 2026 · 20 min readSecurity

Securing Laravel APIs: Passport vs Sanctum vs JWT Deep

Evaluates three Laravel auth strategies for APIs - comparing token types, setup complexity, revocation, and mobile app scenarios.

Laravel
APIs
Security
Passport

Read: Securing Laravel APIs: Passport vs Sanctum vs JWT Deep

03October 15, 2024 · 16 min readSecurity

Secure PHP File Uploads: Validation, Storage & Malware

Complete upload security guide: MIME validation, file-name sanitization, virus scanning integration, and secure S3 storage patterns.

PHP
Security
File Uploads
S3

Read: Secure PHP File Uploads: Validation, Storage & Malware

04September 29, 2023 · 14 min readSecurity

Implementing OAuth 2.0 in PHP: Authorization Code Flow

Full implementation of OAuth 2.0 authorization code + PKCE flow in PHP, authorization endpoint, token exchange, and refresh logic.

PHP
OAuth 2.0
PKCE
Security

Read: Implementing OAuth 2.0 in PHP: Authorization Code Flow

05June 6, 2023 · 16 min readSecurity

Configuring Linux Audit System: auditd Rules, Reports

Sets up auditd with custom rules for file access, privilege escalation, and network-related syscalls, then generates aureport reports for compliance audits.

Linux
Security
auditd
auditctl

Read: Configuring Linux Audit System: auditd Rules, Reports

06June 2, 2023 · 13 min readSecurity

PHP Encryption Best Practices: AES-256, Libsodium & Secure

Shows proper symmetric and asymmetric encryption, key rotation, and envelope encryption using PHP's sodium extension.

PHP
Security
Encryption
Libsodium

Read: PHP Encryption Best Practices: AES-256, Libsodium & Secure

07December 29, 2022 · 14 min readSecurity

Hardening Linux SSH: 2FA With Google Authenticator

Implements SSH two-factor authentication with the Google Authenticator PAM module and OpenSSH certificate authority authentication for controlled server access.

Linux
SSH
OpenSSH
Security

Read: Hardening Linux SSH: 2FA With Google Authenticator

08May 31, 2022 · 15 min readSecurity

Linux Disk Encryption With LUKS: Full-Disk & Container

Encrypts partitions and loop devices with LUKS2, manages key slots, sets up auto-unlock with TPM2, and configures /etc/crypttab.

Linux
LUKS
cryptsetup
Security

Read: Linux Disk Encryption With LUKS: Full-Disk & Container

09April 19, 2022 · 15 min readSecurity

How to Configure SELinux: Policies, Contexts

Covers enforcing vs permissive modes, reading audit2allow output, writing custom type enforcement modules, and labeling files correctly.

Linux
SELinux
Security
RHEL

Read: How to Configure SELinux: Policies, Contexts

Archive overview

Security notes with production context.

Production contextArticles focus on live-application problems: slow queries, fragile releases, unclear ownership, failed jobs, admin workflow friction, and code paths that are hard to review.
Implementation detailThe archive favors concrete Laravel and PHP decisions: Eloquent, Blade, queues, Filament, testing, security, structured data, deployment checks, and operational cleanup.
Discovery surfaceEvery listing keeps a stable URL, excerpt, date, reading time, local responsive image, category, tags, RSS entry, sitemap entry, and local search-index data.