Security habits I repeat on every new repository
Complete post with author details, sharing, and comments.
Security habits I repeat on every new repository
A checklist mindset for Laravel apps: env hygiene, headers, and review habits.
Secrets and configuration
No secrets in git. Rotate keys when people leave projects. Use environment-specific values and separate read/write credentials when databases allow it.
- Enable MFA on Git and hosting
- Lock down debug modes in production
- Validate and sanitize every upload path
Dependencies are attack surface
Scheduled composer/npm audits and prompt patch windows beat emergency weekends.
Security is a habit loop, not a one-time ticket.
Favorite posts
Why I structure Laravel apps in layers from day one
2026-05-06
Dockerfiles that keep local and staging honest
2026-05-09
Scope, buffers, and async updates that protect your calendar
2026-05-11
Queues in Laravel: when I reach for them first
2026-05-07
No comments yet.