#php

The Content-Length Mismatch That Hangs Your PHP Response

BOM adds 3 bytes. mb_strlen counts characters not bytes. Middleware mutates bodies. Three ways PHP breaks Content-Length.

The Sliding Log Rate Limiter — Accurate, Expensive, and When It’s Worth It

Fintech needed exact “10 auths per 60 seconds” — token bucket wasn’t enough. The sliding log algorithm + Redis Lua atomic version.

I knew one language. Claude Code gave me the rest.

For the longest time, PHP was my whole world.

NativePHP v4 Release: Your NativePHP App Is Now 100% Native, No Web View Required: Meet SuperNative

If you have been building mobile apps with NativePHP, there is one thing you probably never had to think twice about: your app was running…

Why I Built an Application-Level Quota Manager for Laravel

Laravel provides excellent tools for request throttling through its built-in RateLimiter. But while building applications, I kept running…

Harnessing the Power of Laravel Queues for Performance Boost

Why Queues Are the Unsung Heroes of Performance Optimization

Parameterized Queries The Only Real Fix for SQL Injection

In my previous articles, I explored how to detect SQL injection attempts in PHP logs, why URL encoding can bypass pattern matching, and why…

Manticore Speaks MySQL — So I Made It a Laravel Database Driver Instead of a Scout Engine

The problem

Why move_uploaded_file() Doesn't Validate Anything You Think It Does

$_FILES[‘type’] is the HTTP header the attacker sent. finfo can be fooled by polyglots. Why your PHP upload handler is broken.

Laravel Observers Explained: Keep Your Models Clean and Organized

As your Laravel application grows, you’ll often need to perform actions automatically whenever a model is created, updated, or deleted.

Stop Forcing Your Users to Log In Again: Session Continuity During Laravel Migrations

You’ve decided to migrate your legacy PHP application to Laravel. You’ve read the Strangler Fig pattern articles. You’ve got a plan. You…

Http::query() in Laravel 13.19.0: The HTTP Client Now Supports the QUERY Method (RFC 10008)

Ever needed to send a search request with a huge list of filters — say, 20 categories, a date range, several statuses, plus sorting — and…

How Can PHP Development Help You Launch Faster and Scale Smarter?

PHP has been declared dead approximately once a year since 2010. It’s still powering around 77% of the web.

Proxy vs Reverse Proxy: Why Your Laravel Octane App Needs Nginx in Front of It

Picture this: you just finished setting up Laravel Octane because you were tired of waiting on API responses that dragged every time the…

Why URL Encoding Can Break PHP Security Checks — and What Actually Works

One overlooked detail in request inspection can leave your security checks blind to real attacks.

How PHP Interns Strings — And Why Identical Strings Aren’t Always Identical

$literal === $computed returns TRUE. They’re “equal” in every PHP sense. Internally they’re separate allocations. The 4.6× cost.

Web Development Skills for Beginners in 2026: Roadmap, Tools & Projects

What Web Development Skills Should Beginners Learn First?

Enhancing Laravel Code Quality with Larastan

“First, solve the problem. Then, write the code.” — John Johnson

IOP vs PHP for Mental Health Recovery: Key Differences

Architects of the Web: Engineering High-Performance Server Environments with Apache and PHP

A deep-dive architectural brief on engineering, securing, and tuning Linux web infrastructure from bare metal up.

My Journey to Open Source: Drupal Association | Day 1

I recently discovered Google Summer of Code (GSoC), a prestigious and globally recognised program that provides students with the…

Laravel’de “Fluent” Kavramı ve Geliştirici Deneyimi

Laravel ile geliştirme yaparken hepimizin hayran kaldığı o pürüzsüz akış, sadece tesadüflerden ibaret değildir. Kod yazarken, veritabanı…

One Login, All Apps Unlocked: Getting to Know SSO and How to Build It in Laravel

Think back to the last time you opened a new app and saw a “Login with Google” or “Continue with GitHub” button. What did you feel? Relief…

How PHP is Bridging the Gap Between AI and Big Data in Enterprises

Unleashing the Power of PHP to Seamlessly Integrate AI and Big Data

The Laravel Feature Most Developers Don’t Know Exists (and Should) (3)

You’ve been writing the same chained if-statements for years. Laravel has had a cleaner solution since forever — and almost nobody uses it.

What is PHP & How Does it Work?

PHP has been a key player in web development for decades, and it still powers a huge portion of the internet today. Whether you’re building…

Day 20 of DevOps Challenge

Today’s task was to configure Nginx + PHP-FPM using Unix Sock.

Building PlayStation Heaven: A Web-Based Rental Management System Using PHP Native and MySQL

A student project focused on managing PlayStation rentals, transactions, product stock, and income reports through a simple web…

Sie suchen einen Programmierer?

Ideal, wenn Sie Unternehmer ansprechen wollen, die von Agenturen oder ewigen Meetings frustriert sind.

How to Prevent Malicious Code Execution Through Uploaded Images in Laravel

You added a profile picture upload feature to your Laravel app. It feels straightforward — user picks an image, clicks upload, done. But…

Laravel Vapor vs Laravel Cloud vs Laravel Forge: I’ve Deployed on All Three — Here’s the Honest…

Same app. Three platforms. Completely different bills, cold start penalties, scaling behaviours, and developer experience. If your team is…

npm audit fix for composer

In recent weeks we had a lot of packages to update. Updates are necessary, but dangerous. Every single update can be hit by a Supply Chain…

MAMP Won’t Start on macOS? How to Fix Stuck PID Files

If you use MAMP for local development on macOS, you may occasionally run into a situation where Apache or MySQL refuses to start.

MAMP non si avvia su macOS? Come risolvere il problema dei file PID bloccati

Se utilizzi MAMP per lo sviluppo locale su macOS, può capitare che Apache o MySQL smettano improvvisamente di avviarsi correttamente.

Horizon vs Laravel Queue Defaults — When the Dashboard Is Worth It

Horizon requires Redis. That alone eliminates it for many apps. For the rest: when the dashboard actually pays for itself, honestly.

Swoole's TypePHP, Tens to Hundreds of Times Faster than Native PHP, Will Be Open Sourced in the…

The `Swoole AOT` compiler project has now been officially renamed to TypePHP, and the beta version will be released in the second half of…

I Replaced JSON With a Custom Binary Format. In PHP.

We need to store rich text used for web, apps, UIs and editable in editor.

Mastering Symfony Security, Passports and Custom Authenticators #1

Security is the cornerstone of any modern web application, but historically, implementing robust authentication and authorization…

PHoPol: COBOL Working-Storage Semantics in PHP

Preliminary

Stop Digging Through Terminals: View Your Laravel System Info in a Beautiful Dashboard

Introducing `jeelcodes/laravel-system-info` — a lightweight, zero-dependency package to monitor your Laravel environment and Composer…

A working Laravel shop in five minutes with Aimeos

Most “add ecommerce to Laravel” projects stall on glue code. Aimeos ships the cart, the admin, the APIs and the data model as a package —…

My Laravel 4.2 package hit 250 thousand downloads

Yes you read that correctly. My Laravel 4.2 package hit 250 thousand downloads (253,916 at the time of writing this article).

Stop Writing Fat Controllers: The Ultimate Guide to Laravel Events & Listeners

If you’ve been building Laravel applications for a while, you’ve probably experienced the “God Controller” problem. You start with a simple…

A strange animal: a park without any parks

Common Laravel Mistakes That Make Your Application Slow

Every Laravel developer should understand these common performance mistakes

10 PHP Bugs That Break Real Projects — And How to Fix Them (Part 2)

Every PHP developer has lived this nightmare. The code runs perfectly on localhost. You deploy to production. Something silently breaks —…

Stop Writing Laravel API Endpoints the Old Way — Here’s the Pattern Senior Devs Actually Use…

“Congratulations — you just wrote a controller that does everything except make chai.” That was the comment my senior left on my pull…

How to Find IDOR Vulnerabilities in a Laravel App

A free Claude Code skill that checks the authorization on every Laravel route and flags broken object-level access (IDOR / BOLA).

How to Update Composer Dependencies in Laravel Safely

A free Claude Code skill that turns composer outdated into a clear plan, and finds replacements for dead packages.

The “Performance Bible” — The #1 Laravel Mistake That Kills Production Apps: The env() Trap

Volume III: Config Caching