Securing Laravel
  • Home
  • In Depth Articles
  • Security Tips
  • Archives
  • About
  • Sponsor
  • Laravel Security Audits & Pentests
  • Practical Laravel Security Course
Sign in Subscribe
Newsletter

Oops, broken link...

The teams discount link was broken

Stephen Rees-Carter

Stephen Rees-Carter

26 Nov 2021

This post is for subscribers only

Subscribe now

Already have an account? Sign in

Read more

Security Tip: Don't Generate Your Own Passwords!

Security Tip: Don't Generate Your Own Passwords!

[Tip #113] "Don't Roll Your Own Crypto" applies to password generators too! It's way too easy to unknowingly lower your entropy by trying to be clever... 😱

By Stephen Rees-Carter 03 Jun 2025
Security Tip: Don't Use phpinfo()!

Security Tip: Don't Use phpinfo()!

[Tip #112] It may seem like a harmless debugging tool, with a bunch of boring config values and version numbers, but phpinfo() is a goldmine of sensitive data - even when it's "protected" in an admin account! 😈

By Stephen Rees-Carter 26 May 2025
In Depth: A Deep Dive into Laravel's New Starter Kits! (pt 1)

In Depth: A Deep Dive into Laravel's New Starter Kits! (pt 1)

[In Depth #35] Let's take a dive into the security of Laravel's new Starter Kits to see how they handle authentication, what security features they include, and what areas could be improved! 🤓

lock-1 By Stephen Rees-Carter 18 May 2025
Security Tip: What Can We Learn from CommonMark's XSS?

Security Tip: What Can We Learn from CommonMark's XSS?

[Tip #111] The recently patched XSS in CommonMark's Attributes extension offers an interesting look at what happens when two different features conflict, one being a security feature, the other a knowingly vulnerable extension.

By Stephen Rees-Carter 10 May 2025
Securing Laravel
  • Subscribe
  • In Depth Articles
  • Security Tips
  • Archives
  • Sponsor
  • Stephen's Socials
Powered by Ghost

Securing Laravel

The essential security resource for Laravel developers.