Securing Laravel

Want to keep yourself up to date with the latest news from Securing Laravel?

Subscribe using the "Follow" button below and we provide you with customized updates, via topic or tag, that get delivered to your email address, your smartphone or on your dedicated news page on follow.it.

You can unsubscribe at any time painlessly.

Title of Securing Laravel: "Securing Laravel"

Is this your feed? Claim it!

Publisher: Unclaimed!

Message frequency: 0.11 / day

Message History

In Depth: Email Verification Isn't as Simple as You Think7 hrs

A friend of mine sent through the following:

I was examining an app we've been maintaining for a bajillion years, and noticing that our process for allowing someone to update their email address was perhaps lacking, securitywise. Yes, we were reissuing a verification email and resetting their verification status, but it occurred to me, what if they typed their email addre...

Read full story

Security Tip: Consider All Routes, Not Just Web!1 week

A common pattern I see all the time is an is_active flag on a User record, with matching EnsureUserIsActive middleware on the web route or auth route group inside routes/web.php.

As you'd expect, this is used to prevent a User who has been deactivated from accessing the application. It's simple to implement, with minimal overhead in the code, and typically just works.<...

Read full story

Security Tip: Update your packages! (Yes, this again!)3 weeks

Let's talk about known vulnerabilities, and why it's so important you keep on top of package updates in the apps that we maintain. (And yes, I know, I talk about this all the time! And yet...)

In July 2025, a critical severity vulnerability was disclosed in

Read full story