HHimaniinhimanitayal.hashnode.dev·4h ago · 4 min readPython for PHP Developers, Part 3: JWT AuthenticationThis is Part 3 of a series. Catch up on Part 1: A Practical Crash Course and Part 2: FastAPI with a Real Database. In Part 2, we built a FastAPI app backed by a real database. Right now, anyone can hi00
PAParsa Aftabiinparsaaftabi.hashnode.dev·1h ago · 6 min readLaravel Octane in Production: What the Docs Don't Tell YouLaravel Octane promises something that sounds too good: your Laravel app, running at speeds that make PHP-FPM look like it's wading through mud. Thousands of requests per second. Response times in sin00
KKKamran Khaninkamrankhandev.hashnode.dev·3h ago · 3 min readRole-based access with one reusable middleware (and a frontend guard to match)Role checks have a way of rotting. It starts innocently — an if ($user->role !== 'admin') in one controller. Then it's in five controllers, then someone adds a moderator role and you're grepping the c00
VVeloCMSinvelocms.hashnode.dev·22h ago · 21 min readWhy is WordPress such a mess?WordPress feels like a mess because it is a PHP codebase more than twenty years old that promises not to break your site, it powers roughly 40% of the web, and almost everything useful in it comes fro00
KKKamran Khaninkamrankhandev.hashnode.dev·1d ago · 3 min read10 feature tests that keep my auth flow honestAuth is the one part of a SaaS where "it works on my machine" is never good enough. A broken dashboard widget is embarrassing. A broken permission check is a data breach. So my starter kit ships with 00
KKKamran Khaninkamrankhandev.hashnode.dev·1d ago · 3 min readYour SaaS demo should boot in five minutes: the zero-config setup I ship with every kitEvery time I've evaluated a starter kit, the decision happened in the first ten minutes. Not after reading the docs, not after studying the architecture — during the install. If composer install explo00
EREdris Ranjbarinedrisranjbar.hashnode.dev·3d ago · 6 min readBuilding a self-hosted life OS that my AI assistant can actually useMy days used to live in five places: a to-do app, a habit tracker, a budgeting spreadsheet, a Pomodoro timer and a notes app. Each one was fine on its own. None of them knew about the others, so the q00
YPYogeshwar Peelainexploitnotes.hashnode.dev·4d ago · 15 min readTryHackMe - SeaSurfer writeupExecutive Summary The engagement began with a single disclosed virtual host name leaking out of an HTTP response header on the target web server. That one leak unraveled the entire box: it led to a Wo00
SHSarwar Hosseininwebequipe.hashnode.dev·4d ago · 5 min readDesigning Private, Searchable Content Without Exposing It PubliclyHow Private PDF Search keeps a document fully indexed for the people meant to see it, while staying invisible to everyone else. On this page The Naive Fix: Exclude It Entirely What We Actually Neede00
PPPrajapati Pareshinsmarttechdevs.hashnode.dev·6d ago · 4 min readBackend Architecture: State Machines in Laravel P2P MarketplacesThe Boolean Flag Trap One of the most powerful features of KhedutBandhu is the Direct Farmer Marketplace (ખેડૂત બજાર). This peer-to-peer module allows farmers to buy and sell used tractors, agricultur00