#laravel — Public Fediverse posts

CVE-2026-53932: OS command injection in laravel-backup-restore via crafted backup archives. CVSS 8. Unpatched before v1.9.4. If you restore Spatie backups, update now. Details: https://www.valtersit.com/cve/CVE-2026-53932/ #CVE #infosec #Laravel

Found that @gonedark created a better Mockery replacement for PHP.

https://github.com/jasonmccreary/double

My problem with this library is not that it's not stable, is the stance behind it. «I just have it 0.x until it gains adoption»

What fucking logic is behind that? It's like saying I should drive a car once I can complete 24 Heures du Mans. LOL.

#Programming #SoftwareDevelopment #WebDevelopment #WebDev #Coding #Code #PHP #Laravel #Symfony #Testing #LaravelShift

Found that @gonedark created a better Mockery replacement for PHP.

https://github.com/jasonmccreary/double

My problem with this library is not that it's not stable, is the stance behind it. «I just have it 0.x until it gains adoption»

What fucking logic is behind that? It's like saying I should drive a car once I can complete 24 Heures du Mans. LOL.

#Programming #SoftwareDevelopment #WebDevelopment #WebDev #Coding #Code #PHP #Laravel #Symfony #Testing #LaravelShift

Found that @gonedark created a better Mockery replacement for PHP.

https://github.com/jasonmccreary/double

My problem with this library is not that it's not stable, is the stance behind it. «I just have it 0.x until it gains adoption»

What fucking logic is behind that? It's like saying I should drive a car once I can complete 24 Heures du Mans. LOL.

#Programming #SoftwareDevelopment #WebDevelopment #WebDev #Coding #Code #PHP #Laravel #Symfony #Testing #LaravelShift

Found that @gonedark created a better Mockery replacement for PHP.

https://github.com/jasonmccreary/double

My problem with this library is not that it's not stable, is the stance behind it. «I just have it 0.x until it gains adoption»

What fucking logic is behind that? It's like saying I should drive a car once I can complete 24 Heures du Mans. LOL.

#Programming #SoftwareDevelopment #WebDevelopment #WebDev #Coding #Code #PHP #Laravel #Symfony #Testing #LaravelShift

Found that @gonedark created a better Mockery replacement for PHP.

https://github.com/jasonmccreary/double

My problem with this library is not that it's not stable, is the stance behind it. «I just have it 0.x until it gains adoption»

What fucking logic is behind that? It's like saying I should drive a car once I can complete 24 Heures du Mans. LOL.

#Programming #SoftwareDevelopment #WebDevelopment #WebDev #Coding #Code #PHP #Laravel #Symfony #Testing #LaravelShift

Queue totalSize() and JobInterrupted Event in Laravel 13.31 https://laravel-news.com/laravel-13-31-0

#Laravel #PHP

Queue totalSize() and JobInterrupted Event in Laravel 13.31 https://laravel-news.com/laravel-13-31-0

#Laravel #PHP

Queue totalSize() and JobInterrupted Event in Laravel 13.31 https://laravel-news.com/laravel-13-31-0

#Laravel #PHP

Queue totalSize() and JobInterrupted Event in Laravel 13.31 https://laravel-news.com/laravel-13-31-0

#Laravel #PHP

Queue totalSize() and JobInterrupted Event in Laravel 13.31 https://laravel-news.com/laravel-13-31-0

#Laravel #PHP

When another site loads your built JS assets, Laravel never sees the request, so its CORS config can't help. Here's how to add the headers in Nginx for just those files, without slowing down everything else. #php #laravel https://masteringlaravel.io/daily/2026-09-09-republished-how-to-set-cors-headers-for-built-assets

When another site loads your built JS assets, Laravel never sees the request, so its CORS config can't help. Here's how to add the headers in Nginx for just those files, without slowing down everything else. #php #laravel https://masteringlaravel.io/daily/2026-09-09-republished-how-to-set-cors-headers-for-built-assets

When another site loads your built JS assets, Laravel never sees the request, so its CORS config can't help. Here's how to add the headers in Nginx for just those files, without slowing down everything else. #php #laravel https://masteringlaravel.io/daily/2026-09-09-republished-how-to-set-cors-headers-for-built-assets

When another site loads your built JS assets, Laravel never sees the request, so its CORS config can't help. Here's how to add the headers in Nginx for just those files, without slowing down everything else. #php #laravel https://masteringlaravel.io/daily/2026-09-09-republished-how-to-set-cors-headers-for-built-assets

When another site loads your built JS assets, Laravel never sees the request, so its CORS config can't help. Here's how to add the headers in Nginx for just those files, without slowing down everything else. #php #laravel https://masteringlaravel.io/daily/2026-09-09-republished-how-to-set-cors-headers-for-built-assets

#TypeScript community (especially #Laravel-affine):

I want to create a class, resembling Laravel factories in TypeScript

class Factory<T> {
protected model: Partial<T>

constructor(model: Partial<T>) {
this.model = { ...this.defaults, ...model }
}

// state setters

make(): T { // <!-- How do I get this to be T instead of Partial<T> without `as? ?
return this.model
}
}

#amCoding #amProgramming #webDev #webDevelopment #dataTypes #FollowerPower #computerScience #typeTheory

Migrated my website from Ghost to a custom Laravel build this week.

Same content, full control over everything. Also switched from GitHub to Forgejo + CrowsCI. GitHub was getting expensive with multiple deploys a day for danielpetrica.com and laraplugins. In the age of AI coding, frequent deploys are the norm, not the exception.

Verified SEO status with seo.danielpetrica.com before and after to make sure nothing broke.

#Laravel #PHP #SelfHosted #DevOps #OpenSource

#Laravel ma sporo narzędzi i "uprzyjemniaczy" dla developerów. O jednym z nich i konfiguracji tegoż można przeczytać w tym artykule.

#PHP

https://laravel-news.com/artisan-dev-command

Find Unexpected Test Inputs with Fuzz for Pest https://laravel-news.com/pest-fuzz

#Laravel #PHP

Когда Laravel Validator становится узким местом при импорте 50 000 строк

PHP 7.4 / Laravel 8 / PostgreSQL 13 Проблема : импорт 50 тысяч строк занимал около 45 секунд. Первое подозрение: база данных, INSERT, UPSERT, индексы, размер batch и количество запросов. Реальность: бОльшая часть времени уходит на валидацию. Мы начали разбираться, почему проверка нескольких десятков обычных полей на большом массиве данных оказалась значительно дороже самой записи в PostgreSQL. В итоге удалось сократить время валидации с 42,5 секунды до 0,65 секунды , а длительность всего job — примерно с 45 до 4 секунд . В статье покажу, что именно оказалось узким местом, почему стандартный Laravel Validator оказался не самым подходящим инструментом для этого конкретного сценария и почему мы не стали от него отказываться.

https://habr.com/ru/articles/1079878/

#laravel #php #validator

I joined a project where the Vue front end was built into the Docker image with no bind mount, so every change meant a manual rebuild. One addition to the compose file turned that back into a normal dev loop. #php #laravel https://masteringlaravel.io/daily/2026-09-08-stop-rebuilding-your-docker-image-after-every-front-end-change

Need to process millions of rows?

#Laravel gives you 3 options:

`get()` → 1 query, but loads everything into memory 💥

`chunk(500)` → multiple queries, 500 records per batch 📦

`cursor()` → streams records one-by-one with very low memory usage 🚶

If you're simply processing each record independently, `cursor()` is often the cleanest choice:

Need to process millions of rows?

#Laravel gives you 3 options:

`get()` → 1 query, but loads everything into memory 💥

`chunk(500)` → multiple queries, 500 records per batch 📦

`cursor()` → streams records one-by-one with very low memory usage 🚶

If you're simply processing each record independently, `cursor()` is often the cleanest choice:

Two weeks ago, I launched events for Laramap. Some people liked it, which made me happy, but usage is low.

I spent two days building it between client projects, so I'd be lying if I said I wasn't a little disappointed. Did it not spread, or do people just not care?

#laravel

Laravel vs Symfony: A Comprehensive Comparison of #PHP #Frameworks

This article provides a guide concerning #Laravel vs Symfony: a comprehensive comparison of PHP frameworks.
Laravel vs Symfony: A Comprehensive Comparison of PHP Frameworks
Laravel and #Symfony are two of the most popular PHP frameworks, widely used for building modern web applications. Both have strong communities, rich ecosystems, and are frequently chosen by ...
Continued 👉 https://blog.radwebhosting.com/laravel-vs-symfony-a-comprehensive-comparison-of-php-frameworks/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #websitedevelopment

Laravel vs Symfony: A Comprehensive Comparison of #PHP #Frameworks

This article provides a guide concerning #Laravel vs Symfony: a comprehensive comparison of PHP frameworks.
Laravel vs Symfony: A Comprehensive Comparison of PHP Frameworks
Laravel and #Symfony are two of the most popular PHP frameworks, widely used for building modern web applications. Both have strong communities, rich ecosystems, and are frequently chosen by ...
Continued 👉 https://blog.radwebhosting.com/laravel-vs-symfony-a-comprehensive-comparison-of-php-frameworks/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #websitedevelopment

Laravel vs Symfony: A Comprehensive Comparison of #PHP #Frameworks

This article provides a guide concerning #Laravel vs Symfony: a comprehensive comparison of PHP frameworks.
Laravel vs Symfony: A Comprehensive Comparison of PHP Frameworks
Laravel and #Symfony are two of the most popular PHP frameworks, widely used for building modern web applications. Both have strong communities, rich ecosystems, and are frequently chosen by ...
Continued 👉 https://blog.radwebhosting.com/laravel-vs-symfony-a-comprehensive-comparison-of-php-frameworks/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #websitedevelopment

During a recent pentest, I suddenly got hit with 403s on every request. It wasn't a WAF - it was a clever little trap one of my clients built to catch anyone poking at Livewire. Let me show you how it works. 🤓

https://securinglaravel.com/security-tip-the-trap-that-caught-me/ #Laravel

RE: https://phpc.social/@srwiez/117231070825533006

#laravel 👀

Laravel Rulebook: Business Rules That Change by Date https://laravel-news.com/laravel-rulebook

#Laravel #PHP

🔗 Using AI as a deterministic translation tool in Laravel
https://koomai.net/posts/using-ai-as-a-deterministic-translation-tool-in-laravel/
#php #laravel #ai

🔗 Using AI as a deterministic translation tool in Laravel
https://koomai.net/posts/using-ai-as-a-deterministic-translation-tool-in-laravel/
#php #laravel #ai

🔗 Using AI as a deterministic translation tool in Laravel
https://koomai.net/posts/using-ai-as-a-deterministic-translation-tool-in-laravel/
#php #laravel #ai

🔗 Using AI as a deterministic translation tool in Laravel
https://koomai.net/posts/using-ai-as-a-deterministic-translation-tool-in-laravel/
#php #laravel #ai

🔗 Using AI as a deterministic translation tool in Laravel
https://koomai.net/posts/using-ai-as-a-deterministic-translation-tool-in-laravel/
#php #laravel #ai

Ever handed off a feature request with barely any detail and expected the developer to just figure it out? In this week's podcast, Aaron and I make the case for writing requirements before development starts, and why letting AI write them for you is a trap. #php #laravel https://masteringlaravel.io/daily/2026-09-07-laravel-podcast-write-better-requirements-or-pay-for-it-later

Need to send a #Laravel notification to someone who doesn't have a user account in your database?

Skip the model entirely. 🎯

Use Notification::route() to send it directly to their email:

🔗 The stack behind There There
https://there-there.app/blog/the-stack-behind-there-there
#php #laravel #react #typescript #inertia

#Laravel-lang: Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer #Malware

Attackers injected a credential stealer into 200+ Laravel-lang package versions by pushing tags tied to attacker-controlled forks:

#SoftwareSupplyChain
👇
https://www.aikido.dev/blog/supply-chain-attack-targets-laravel-lang-packages-with-credential-stealer

#Laravel-lang: Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer #Malware

Attackers injected a credential stealer into 200+ Laravel-lang package versions by pushing tags tied to attacker-controlled forks:

#SoftwareSupplyChain
👇
https://www.aikido.dev/blog/supply-chain-attack-targets-laravel-lang-packages-with-credential-stealer

#Laravel-lang: Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer #Malware

Attackers injected a credential stealer into 200+ Laravel-lang package versions by pushing tags tied to attacker-controlled forks:

#SoftwareSupplyChain
👇
https://www.aikido.dev/blog/supply-chain-attack-targets-laravel-lang-packages-with-credential-stealer