Six Questions to Ask About Your Laravel Application's Security
You don't need to read the code to know whether your Laravel application is looked after. Six questions, and what a good answer to each one sounds like.
Emyrix Blog
#laravel
Every post tagged laravel, newest first.
Upgrading Laravel 9 to 13, One Version at a Time
Four hops, four sets of breaking changes. What actually breaks at each step from Laravel 9 to 13, and why the official time estimates describe the framework, not your app.
The Cache Headers Your Framework Won't Set for You
Laravel sets the right Cache-Control on HTML and nothing on your assets. Here's the nginx map we use, and the admin panel refetching a megabyte on every page.
PHP2Shell: October's Emergency PHP Release Fixes Two Remote Code Execution Bugs
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619, two unauthenticated RCE bugs in PHP itself. What's affected and how to update.
Which Laravel Version Are You On, and Is It Still Getting Fixes?
Laravel 11 stopped getting security fixes in March 2026 and Laravel 12 stopped getting bug fixes in August. How to check where you stand and what it means.
Moving Our Laravel App from SQLite to MariaDB
We moved a production Laravel app from SQLite to MariaDB 11.8. What had to change in the code, how we proved the copy, and the two things that stopped us.
Your Admin Panel Renders What Strangers Typed: An XSS We Shipped, and the Fence Around It Now
A contact form field became a clickable link in our admin. Escaping didn't cover it, because an href is not text. What we shipped, and how it's fenced now.
Why Laravel Is a Good Fit for Your Next Web Application
The honest case for building on Laravel: what you get for free, why hiring is easier, what it costs to run, and the projects where it is the wrong answer.
Prerendering React on a Laravel Site Instead of Running an SSR Server
Our React pages painted nothing until the JavaScript ran. We prerender them at build time now instead of running an SSR service. Here's what that moved.
Implementing a Content Security Policy on a Laravel Site
A step-by-step CSP rollout for a Laravel application: where to set the header, the policy to start from, collecting violation reports, and how to enforce safely.
A Strict Content Security Policy on a Laravel Site, and the Two Things It Caught
Two days of Report-Only reports on our Laravel site found a third-party request nobody chose and a framework requirement we had to grant. What both cost.
PHP 8.6: What's New, and What Upgrading From 7.x or Early 8.x Actually Gets You
What PHP 8.6 adds, what it deprecates, and what we measured moving the same code from PHP 7.4 through every 8.x release to 8.6 — with and without the JIT.
Working through one of these?
Talk to us.
Upgrades, performance work, and emergency support for Magento, Adobe Commerce, Shopware, and custom Laravel builds.