#Php

5 posts tagged with #Php

laravel · Nov 14 · 16 min

A Laravel Signed Link Can Outlive Its Expiry Under Two Conditions: One Version Check, One Grep

Two Laravel advisories from Nov 11 say a temporary signed URL can be accepted after it expired, but only under two specific conditions. How to check your version, find the calls, and fix them.

developer-tools · Nov 6 · 14 min

A Package Cooldown Also Delays Your Security Fix

Composer's new cooldown policy holds back fresh releases so malware gets caught first. It holds back the patch for a real vulnerability too. Here is how to set the wait, who on the team may skip it, and how to leave a record when they do.

developer-tools · Sep 7 · 11 min

A Deferred Group Name Is Not a Helper

A deferred Inertia group named auth is a request batch, not a PHP function. A red loadDeferredProps test is not a missing Vue prop. Name who owns the group strings.

backend-infrastructure · Jul 30 · 13 min

PHP 8.5.9 is a runtime patch contract, not an app deploy

PHP 8.5.9 fixes CVE-2026-17543 in pgsql and other security issues. A green Laravel deploy does not prove the hosts, CI images, workers, and base containers actually run the patched binary.

laravel · Jul 16 · 15 min

Laravel Image Processing Is an Adoption Contract, Not an Upload Feature

A Laravel image workflow should preserve originals, produce deterministic variants, isolate processing behind a seam, and remain operable after the demo is gone.

Also see: #Coding-Agents #Change-Control #Laravel #Claude-Code #Vue