Long, practical guides on Laravel, Filament and Livewire, written from the products I build. 19 so far.
Latest · October 26, 2026
An honest answer from a Laravel developer. Why PHP2Shell is not a reason to switch languages, what Laravel protects you from and what it cannot, and the checklist that actually keeps a PHP app safe.
Read it
An honest answer from a Laravel developer. Why PHP2Shell is not a reason to switch languages, what Laravel protects you from and what it cannot, and the checklist that actually keeps a PHP app safe.
A full roundup of the vulnerabilities disclosed between October 20 and 26, 2026, beyond PHP2Shell. What each bug is, who runs the affected software, whether it is exploited, and what to patch first.
Two critical PHP core bugs give attackers code execution before your app runs. What they are, which versions are exposed, how many sites sit on branches with no fix, and the exact steps to patch a Laravel server.
Taylor Otwell is teasing Omega, a Laravel-flavored framework written in Rust. I went through the posts, the replies and the one public repo, inertia-omega, to separate what is confirmed from what is guesswork.
How to build a page-builder style live preview in Livewire using an iframe, postMessage and morphdom, and how to survive the three things that break it, Livewire roots, Alpine's MutationObserver, and injected script tags.
The changes that matter when you move a real Filament 3 app to Filament 4, schemas and the unified actions namespace, nested resources, the default behaviour changes that break things quietly, and the new theme setup.
How Filament 4's built-in panel tenancy works (HasTenants, canAccessTenant, ownership relationships, tenant middleware) and the places it stops protecting you, queries outside the panel, queued jobs, unique validation and models without a resource.
How to scope tenant data with an Eloquent global scope in Laravel 12, and the places it does not reach, queued jobs, console commands, withoutGlobalScopes, validation rules, raw queries and pivot tables.
Tenancy, billing, dashboards and testing for a SaaS on the TALL stack with Filament 4, based on what I ran into building FilamentCraft and the Dukanos shop platform.
A practical tour of the Inertia 2 data-loading features that change how Laravel pages feel, with a worked dashboard example, the history encryption detail most posts get wrong, and a note on Inertia 3.
The queue settings that decide whether jobs run once, twice or never, in Laravel 12 with Horizon. Timeouts versus retry_after, backoff, unique jobs, batches, failure handling, and a Horizon supervisor layout that keeps slow jobs from starving fast ones.
How property hooks and private(set) change DTOs and value objects in Laravel apps, the rules that catch people out, and why you should not try to use them on Eloquent model attributes.