Laravel and PHP writing

Production notes for code that has to survive real traffic.

A practical archive about Laravel systems, PHP architecture, databases, debugging, deployment, security, search visibility, and the engineering decisions that keep real applications maintainable.

Read latest posts RSS feed

How to Secure PHP Applications: HTTPS, CSP Headers & Input Validation

01March 15, 2022 · 13 min readSecurity

Featured production note

How to Secure PHP Applications: HTTPS, CSP Headers & Input

Practical implementation guide covering TLS enforcement, Content Security Policy headers, and robust server-side input sanitization.

PHP
Security
HTTPS
CSP
Input Validation

Read How to Secure PHP Applications: HTTPS, CSP Headers & Input

Now viewing

Security production archive

This filtered archive keeps related Security posts together so the topic is easier to scan before opening a detailed article.

Reading lanes

Start with the problem.

Architecture decisionsBoundaries, interfaces, ownership, and long-term code shape.
Performance workQueries, workers, profiling, cache behavior, and production speed.
Debugging practiceTrace failures, isolate causes, and make bugs reproducible.
Security reviewsAuth, inputs, uploads, secrets, headers, and release risk.

Article archive

Security articles

17 articles filed under Security.

11December 21, 2021 · 14 min readSecurity

Configuring AppArmor on Ubuntu: Profiles, Modes & Custom

Covers AppArmor enforce vs complain modes, reading audit logs, generating profiles with aa-genprof, and writing custom policy rules.

Linux
AppArmor
Ubuntu
Security

Read: Configuring AppArmor on Ubuntu: Profiles, Modes & Custom

12June 22, 2021 · 14 min readSecurity

Linux User Management: Groups, sudo Policies & PAM

Covers useradd, usermod, groupadd, /etc/sudoers syntax, sudo logging, password policies with PAM, and account expiration management.

Linux
Users
Groups
sudo

Read: Linux User Management: Groups, sudo Policies & PAM

13April 18, 2021 · 14 min readSecurity

How to Implement JWT Authentication in Pure PHP Step

Builds a JWT auth flow from scratch without libraries, covering header/payload/signature generation, verification, and refresh tokens.

PHP
JWT
Security
Authentication

Read: How to Implement JWT Authentication in Pure PHP Step

14September 9, 2020 · 13 min readSecurity

Setting Up a Linux Firewall With UFW: Rules, Logging

Practical UFW configuration covering allow/deny rules, application profiles, rate limiting, IPv6 support, and persistent rule management.

Linux
Security
UFW
Firewall

Read: Setting Up a Linux Firewall With UFW: Rules, Logging

15May 20, 2020 · 13 min readSecurity

PHP Security Checklist 2020: Protect Your App From XSS

A complete, actionable security checklist covering the OWASP Top 10 vulnerabilities with PHP-specific remediation code snippets.

PHP
Security
XSS
CSRF

Read: PHP Security Checklist 2020: Protect Your App From XSS

16April 12, 2020 · 15 min readSecurity

How to Configure SSH on Linux: Keys, Port Change

Step-by-step guide to generating SSH key pairs, disabling password authentication, changing the default port, and blocking brute-force attempts with Fail2Ban.

Linux
SSH
OpenSSH
Fail2Ban

Read: How to Configure SSH on Linux: Keys, Port Change

17March 5, 2020 · 16 min readSecurity

Linux Server Initial Setup: Complete Security

Covers first-login hardening steps: creating sudo users, disabling root SSH, configuring UFW firewall, and enabling automatic security updates.

Linux
Server Security
SSH
UFW

Read: Linux Server Initial Setup: Complete Security

Archive overview

Security notes with production context.

Production contextArticles focus on live-application problems: slow queries, fragile releases, unclear ownership, failed jobs, admin workflow friction, and code paths that are hard to review.
Implementation detailThe archive favors concrete Laravel and PHP decisions: Eloquent, Blade, queues, Filament, testing, security, structured data, deployment checks, and operational cleanup.
Discovery surfaceEvery listing keeps a stable URL, excerpt, date, reading time, local responsive image, category, tags, RSS entry, sitemap entry, and local search-index data.