Magic Links - Securing Laravel

Security Tips

Security Tip: The Signed URL Trap

[Tip #129] I love Signed URLs, but there is one very subtle trap you can accidentally fall into...

In Depth

In Depth: Email Verification Isn't as Simple as You Think

[In Depth #38] You can't trust an email address you haven't verified, so why are you storing them in your database?

In Depth

In Depth: What Actually Is MFA?

[In Depth #34] MFA, 2FA, 2SV, DFA... Something you know/have/are... Let's figure out this MFA thing and why it's so important.

In Depth

In Depth: Pentesting Laravel part 2 - Configs, Dependencies, and Routes

[In Depth #28] Continuing our Laravel Security Audit and Penetration Test, we're looking into configs and dependences, and following threads to discover 4 CRITICAL vulnerabilities!

Security Tip: The Signed URL Trap

In Depth: Email Verification Isn't as Simple as You Think

In Depth: What Actually Is MFA?

In Depth: Pentesting Laravel part 2 - Configs, Dependencies, and Routes

In Depth: Magic Emails