Six Questions to Ask About Your Laravel Application's Security
You don't need to read the code to know whether your Laravel application is looked after. Six questions, and what a good answer to each one sounds like.
Emyrix Blog
E-Commerce Engineering Notes
Practical writing on Magento, Adobe Commerce, and Laravel — the performance, security, and upgrade work that keeps stores and applications earning.
Upgrading Laravel 9 to 13, One Version at a Time
Four hops, four sets of breaking changes. What actually breaks at each step from Laravel 9 to 13, and why the official time estimates describe the framework, not your app.
The Cache Headers Your Framework Won't Set for You
Laravel sets the right Cache-Control on HTML and nothing on your assets. Here's the nginx map we use, and the admin panel refetching a megabyte on every page.
PHP2Shell: October's Emergency PHP Release Fixes Two Remote Code Execution Bugs
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619, two unauthenticated RCE bugs in PHP itself. What's affected and how to update.
Which Laravel Version Are You On, and Is It Still Getting Fixes?
Laravel 11 stopped getting security fixes in March 2026 and Laravel 12 stopped getting bug fixes in August. How to check where you stand and what it means.
APSB26-153: October's Magento Patch Closes a Way Around the StyleSmuggler Fix
Adobe's October 2026 Magento patch fixes CVE-2026-103849, a 10.0 template injection Sansec says gets past September's StyleSmuggler hotfix. You need both.
Moving Our Laravel App from SQLite to MariaDB
We moved a production Laravel app from SQLite to MariaDB 11.8. What had to change in the code, how we proved the copy, and the two things that stopped us.
Your Admin Panel Renders What Strangers Typed: An XSS We Shipped, and the Fence Around It Now
A contact form field became a clickable link in our admin. Escaping didn't cover it, because an href is not text. What we shipped, and how it's fenced now.
Why Laravel Is a Good Fit for Your Next Web Application
The honest case for building on Laravel: what you get for free, why hiring is easier, what it costs to run, and the projects where it is the wrong answer.
Prerendering React on a Laravel Site Instead of Running an SSR Server
Our React pages painted nothing until the JavaScript ran. We prerender them at build time now instead of running an SSR service. Here's what that moved.
Implementing a Content Security Policy on a Laravel Site
A step-by-step CSP rollout for a Laravel application: where to set the header, the policy to start from, collecting violation reports, and how to enforce safely.
A Strict Content Security Policy on a Laravel Site, and the Two Things It Caught
Two days of Report-Only reports on our Laravel site found a third-party request nobody chose and a framework requirement we had to grant. What both cost.
PHP 8.6: What's New, and What Upgrading From 7.x or Early 8.x Actually Gets You
What PHP 8.6 adds, what it deprecates, and what we measured moving the same code from PHP 7.4 through every 8.x release to 8.6 — with and without the JIT.
APSB26-138: September's Magento Patch Doesn't Contain the Zero-Day Fix
Adobe shipped two Magento security patches a day apart in September 2026, and the monthly one doesn't include the emergency fix for CVE-2026-75650. You need both, in order.
StyleSmuggler: The Magento Zero-Day That Ran for Three Days Unpatched
Sansec disclosed StyleSmuggler on September 5: unauthenticated remote code execution on fully patched Magento and Adobe Commerce stores, used to plant backdoors before Adobe fixed it on September 7 as CVE-2026-75650.
How to Tell If Your Magento Store Is Actually Slow
Four numbers that settle the argument about whether a Magento store is slow, where to get them, which pages to measure, and what each one tells you about where the problem is.
Magento Indexers: Stuck, Invalid, or Silently Wrong
Products missing from a category, prices that don't match the admin, a reindex that never finishes. What Magento's indexers actually do, how they fail, and how to tell which failure you have.
The Performance Work Mage-OS Ships and Magento Doesn't
Compiled plugins, PHP 8.4 lazy objects and bfcache all ship in the Mage-OS distribution. One of them was proposed to Magento years ago and never merged. What each does, and what to verify.
Mage-OS 3: What's In It, and What It Breaks
Mage-OS 3 ships an interactive installer, a 98-package minimal install, returns and an admin audit log. It also drops PHP 8.2 and removes setup:backup. What to check before you take it.
What Mage-OS Gives You That Magento and Adobe Commerce Don't
Two of the benefits are features Adobe sells only with a Commerce license. Several more are modules that exist in neither Magento nor Adobe Commerce, and one is a replacement admin theme.
Leaving Adobe Commerce: What Mage-OS Doesn't Replace
The honest counterweight to the Mage-OS case. If you're on Adobe Commerce, here's what has no equivalent on the other side — the features, the services, the infrastructure, and the contract.
We Recommend Sansec to Every Magento Merchant. Here's Why.
We don't sell Sansec and get nothing if you buy it. We do run it — daily malware scans, and Shield on stores that kept getting reinfected. Here's what it's for and what it won't fix.
APSB26-92: A Magento Account Takeover That Needs No Login
Adobe's August 2026 patch fixes seven Adobe Commerce and Magento vulnerabilities. The worst lets someone take over a customer account without logging in, and attacks started within a day.
Magento 1 to Shopware 6: The One Migration Where the Platform Choice Is Open
Magento 1 has no upgrade path to anywhere, so nothing carries over to Magento 2 either. What a move to Shopware 6 involves, and when it is the right call.
Upgrading Magento 2.2 to 2.4: The Problem Is 2.3, Not 2.4
Magento 2.2 lost support in December 2019. You cannot jump straight to 2.4, and the release that rewrites your database on the way is 2.3, not the destination.
Magento 1 to Magento 2: A Migration, Not an Upgrade
Magento 1 lost support in June 2020. Moving to Magento 2 is a rebuild with a data migration attached — what the Data Migration Tool covers, what it doesn't, and how to scope the rest.
Upgrading Magento 2.3 to 2.4: The Jump Nobody Warned You About
Magento 2.3 lost support in September 2022. Moving to a current 2.4 release crosses a PHP major version, two framework migrations, and a mandatory search engine — here's the staged path.
OpenMage LTS: Magento 1 on PHP 8, Installed with Composer
Magento 1 lost vendor support in 2020, but OpenMage LTS keeps the codebase alive on PHP 8.1–8.5 with Composer installs and ongoing security backports. What it fixes, and what it doesn't.
How to Choose a Magento Development Partner
What to look for in a Magento development agency or partner — engineering seniority, upgrade discipline, communication, and the red flags that predict a painful project.
Magento 2 Redis and OpenSearch Optimization
How to configure Redis (or Valkey) and OpenSearch for a fast, stable Magento 2 store — cache vs session separation, eviction policy, heap sizing, and the defaults that hurt under load.
Magento 2 Upgrade Guide: Planning a Safe Version Upgrade
How to plan and execute a safe Magento 2 upgrade — compatibility audits, staged rollout, regression testing, and zero-downtime deployment without breaking a live store.
Magento vs Shopify Plus: An Engineer's Comparison
A practical Magento (Adobe Commerce) vs Shopify Plus comparison for growing merchants — control, B2B, total cost of ownership, and the trade-offs that actually decide it.
Checkout Options for a Magento 2 Hyvä Store: What Actually Works
An opinionated comparison of checkout options for Magento 2 stores on Hyvä — official Hyvä Checkout, Luma via theme fallback, the React checkout, third-party one-step checkouts, and custom Magewire builds.
Magento 2 Performance Optimization Checklist
A prioritized, runnable Magento 2 performance checklist — baseline, backend, config, search, and frontend — with the commands to verify each item. Fix the ceiling first.
Luma to Hyvä: What You Actually Gain, and What It Costs
Hyvä swaps Luma's RequireJS and Knockout frontend for Tailwind and Alpine. The speed gains are real — so is the license, the extension audit, and the fact that this is a rebuild, not a reskin.
Is Magento the Right Fit for Your Business?
Magento is excellent for some businesses and expensive overkill for others. An honest fit test — what justifies the cost, what doesn't, and which platform to look at instead.
Magento 2.4.6 Support Ends August 11. Here's What That Actually Means for You.
Magento 2.4.6 reaches end of support on August 11, 2026 — but the deadline means very different things for Adobe Commerce and Magento Open Source. What to do with the time left.
Magento 2.4.9 Security Patches: Newest Doesn't Mean Safest
Adobe's July 2026 bulletin listed Magento 2.4.9 among the affected versions. Why the newest release line needs the most patch discipline, not the least.
MedusaJS to Magento: When a Custom Build Outgrows the Team That Built It
Moving from a headless Medusa build to Magento or Adobe Commerce is usually about ownership, not technology. The honest reasons, the data work, and what you give up.
Why Keep Your E-Commerce in Magento?
Most reasons for leaving Magento — it's slow, it's insecure, upgrades hurt — describe a maintenance problem, not a platform problem. What staying well actually looks like.
Magento 2.4.8 Security Patches: The Comfortable Version Is Where Discipline Slips
Magento 2.4.8 is supported to 2028, which makes it easy to defer patching. Adobe's cadence changed in 2026 — here's the patch process that keeps up with it.
Magento 2.4.7 Security Patches: Supported Is Not the Same as Patched
Magento 2.4.7 is still supported until 2027 — but Adobe's July 2026 bulletin lists 2.4.7-p10 and earlier as vulnerable. Why patch level matters more than version number.
Magento to MedusaJS: You're Not Migrating, You're Rebuilding
Medusa gives you commerce primitives in TypeScript, not a store in a box. What that trade actually costs, what your team needs to look like, and when it pays off.
Shopware 6 to Magento: The Migration Nobody Built a Tool For
There's no official Shopware to Magento migration path, so this one is custom ETL from day one. When the move is justified, and how to run it without losing your catalog structure.
Magento to Shopware 6: What the Migration Assistant Does and Doesn't Do
Shopware's Migration Assistant moves your data. It doesn't move your store. A realistic guide to a Magento to Shopware 6 replatform, including the SEO work that decides whether it succeeds.
Mage-OS Back to Magento or Adobe Commerce: When and How
Moving from Mage-OS to Magento Open Source is a Composer change. Moving to Adobe Commerce is a purchase and a project. What actually drives the decision either way.
Magento to Mage-OS: A Distribution Switch, Not a Replatform
Moving from Magento Open Source to Mage-OS is mostly a Composer repository change. Moving from Adobe Commerce is a real migration. Here's the difference and how to plan each.
Magento 2 Checkout Performance: Fixing the Slowest Page You Own
Why Magento 2 checkout is slow — Knockout boot time, shipping rate calls, quote table bloat, and payment scripts — and what to do about each.
Magento 2 Product Page Optimization: Speed Where It Converts
How to make Magento 2 PDPs fast — gallery LCP, configurable product JSON, swatches, private content, and the third-party scripts eating your INP score.
Why Your Magento 2 Category Pages Are Slow (And How to Fix Them)
Magento 2 PLP optimization — layered navigation queries, product collection bloat, image grids, and the cache misses that make category pages your slowest templates.
Magento 2 Performance Optimization: What Actually Moves the Needle
A site-wide Magento 2 performance guide for 2026 — TTFB, full-page cache, Redis, OpenSearch, PHP 8.4, and the outdated advice that's still slowing stores down.
Upgrading Magento 2.4.6 to 2.4.9: The Realistic Version
A practical guide to upgrading Magento 2.4.6 to 2.4.9 — the two-step path, infrastructure prerequisites, the three framework changes that break extensions, and how to audit your codebase before you start.
Coming From an EOL Magento Version: Should You Target 2.4.8 or 2.4.9?
A decision framework for stores on an unsupported Magento version. When 2.4.8 is the right target, when to go straight to 2.4.9, and the timing detail that changes the answer.
Working through one of these?
Talk to us.
Upgrades, performance work, and emergency support for Magento, Adobe Commerce, Shopware, and custom Laravel builds.