valorin, to programming

Yesterday Laravel Security in Depth became Securing Laravel! 🎉 🎂

With 16 In Depth articles and 45 security tips, and lots more to come, I am immensely proud and excited for the future! 🥰

For all the details and a special offer: https://securinglaravel.com/p/laravel-security-in-depth-securing

valorin, to random

It's time to bite the bullet and shift LSID over to a custom domain on Substack, and change it's name in the process...

Laravel Security in Depth → Securing Laravel
https://larasec.substack.com -> https://securinglaravel.com

This calls for a live toot thread of the process... 👇 🤓

outofcontrol,
@outofcontrol@phpc.social avatar

@valorin Thank you, for keeping us updated on , as well as Twitter. I look forward to see more and users start to post on Mastodon.

outofcontrol, to php
@outofcontrol@phpc.social avatar

As @ramsey posted earlier, and something I didn't realize, you can get a virtual pass to , and follow along. As well, you will get access to all the recordings afterwards. Next talks are at 2PM CDT here https://phptek.tv

valorin, to php

Ok, & folks... What comes to mind when you hear the words: "Insecure Function"? 😱

freekmurze, to php
@freekmurze@phpc.social avatar

🔗 Explaining the code on the "Go with PHP" website
https://themsaid.com/code-on-go-with-php

Crell, to programming
@Crell@phpc.social avatar
kaiserkiwi, to programming
@kaiserkiwi@corteximplant.com avatar

Had the opportunity to play with the Mail Facade and today at work. Didn’t do any mail stuff via for many MANY years now. It’s just satisfying how easy and seemless everything works.

Every time I dig deeper into Laravel it gets better and better. I'm glad I decided to go Full Stack again. I loved my years as a main frontend dev, but I feel much more complete when I can do and control every step.

I still love to chat with the backend devs at work about backend stuff and I have so much more to learn. 😍

I'm really glad my workplace enables stuff like that. In other companies, my abilities were always rather limited from above.

davidbisset, to php
@davidbisset@phpc.social avatar
michael, to programming
@michael@thms.uk avatar

LOL, the distinction between laravel/laravel and laravel/framework still throws me off every single time.

Just went to https://github.com/laravel/laravel/blob/10.x/CHANGELOG.md to check out the latest changelog, and it took me way way way to long to figure out why that was 'stuck' at 10.2.0, when 10.10.0 was released yesterday 😂🤦‍♂️

valorin, to php

Security Tip: Replace simple dependencies with in-house versions!

The more dependencies your project has, the higher your risk of supply-chain attack is, and the less you're aware of what code is actually running…
https://larasec.substack.com/p/security-tip-replace-simple-dependencies

mobileatom, to Symfony
@mobileatom@me.dm avatar

Explore our article: Dream Universal, Develop Local: A look at PHP Local Development Tools. https://www.symfonystation.com/local-php-development-tools

symfonystation, to Symfony
@symfonystation@phpc.social avatar

Explore our article: Dream Universal, Develop Local: A look at PHP Local Development Tools. https://www.symfonystation.com/local-php-development-tools

dantleech, to random
@dantleech@fosstodon.org avatar

Going to try and make a CLI client for ClickUp using Go/Cobra - not sure I like Cobra's API/convention far, but will see how it goes...

danrot,
@danrot@mastodon.social avatar

@dantleech totally agree! That's also why I am so skeptical about , but I guess I should check it out once and at least try to be open-minded 🙈

outofcontrol, to php
@outofcontrol@phpc.social avatar

When programming in and doing Laravel specific things, Laravel Idea (https://laravel-idea.com) is a clear winner to me. CoPilot seemed a bit haphazard in its suggestions. I've not tried copilot for actually generating non-laravel specific code stuff. That is up next!

michael,
@michael@thms.uk avatar

@outofcontrol laravel idea is absolutely amazing! I’d get half the stuff done without it.

If you are a dev, I don’t think there’s a better investment.

dandb, to php
@dandb@mas.to avatar

Is there a built-in way to to partial resolution from the container in ?

I have a class that takes a model and then a few service classes. The model obviously isn't resolvable from the container, but the rest of the services are.

symfonystation, to Symfony
@symfonystation@phpc.social avatar

Explore the February 24, 2023 @symfonystation Communiqué of Symfony, Drupal, PHP, Fediverse, and Cybersecurity news. https://www.symfonystation.com/Symfony-Station-Communique-24-February-2023 :symfony: :elephpant_purple: :drupalicon: :wordpress: :mastodon: :fediverse: :php: :phpunit: :mariadb: :laravel: :apiplatform: :phpstan: 🇺🇦

valorin, to php

W00t! Final two modules in my CSRF section are out: CORS and SameSite Cookies! 😎🥳
Next up will be the SQL Injection attack module, which means includes more challenges to test your hacking skills. 🥷
https://practicallaravelsecurity.com

outofcontrol, to php
@outofcontrol@phpc.social avatar

I still follow @PovilasKorop on the bird sight, along with 3 others that I can't find on Mastodon... yet. Today he stated it was repetitive and boring to constantly have to manually enter the fillable fields in PHPStorm. Idea has the solution, with cmd-n to auto fill $fillable. So cool!

mikestreety, to php
@mikestreety@hachyderm.io avatar

I still don't get testing.

I've read many posts and understand the basics, but I struggle to relate that to a real-world app.

I'm developing something in which is 100% database powered, but I can't work out how I would test anything in CI, without a database seeded.

symfonystation, to Symfony
@symfonystation@phpc.social avatar

Explore our article: Frontend Madness: SPAs, MPAs, PWAs, Decoupled, Hybrid, Monolithic, Libraries, Frameworks! WTF for your PHP backend? https://symfonystation.com/Frontend-Madness-JS-PHP-Backend

freekmurze, to php
@freekmurze@phpc.social avatar

🌟 Laravel Worldwide Meetup: Introducing Laravel Splade - Quick Wins in Laravel
https://freek.dev/2491-laravel-worldwide-meetup-introducing-laravel-splade-quick-wins-in-laravel

freekmurze, to php
@freekmurze@phpc.social avatar
ctietze, to php
@ctietze@mastodon.social avatar

Things considered harmful https://stitcher.io/blog/things-considered-harmful

Apparently, partsmof the Reddit community is considering " to be harmful".

This post is making a great point: calling X "harmful" doesn't start a good discussion.

Also, the discussion that is being had seems weird. The Facts: you can make a living with it, maintain projects for years and years, and have useful conventions. The Opinions: it's not working well. (Although it is working, which is worth a lot!)

valorin, to php

I go on about using HtmlString to avoid XSS constantly - it's one of my favourite Laravel features - but I surprisingly didn't have a Security Tip dedicated to it... until now! 😎🔥
https://larasec.substack.com/p/security-tip-avoiding-xss-with-htmlstring

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • GTA5RPClips
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • osvaldo12
  • Youngstown
  • ngwrru68w68
  • slotface
  • everett
  • rosin
  • thenastyranch
  • kavyap
  • tacticalgear
  • megavids
  • tester
  • modclub
  • cubers
  • ethstaker
  • mdbf
  • khanakhh
  • Durango
  • normalnudes
  • Leos
  • cisconetworking
  • anitta
  • provamag3
  • lostlight
  • All magazines