PHP Developers Wanted a Patch. Hackers Wanted a PoC. Nobody SleptTwo critical PHP vulnerabilities, one sleepless night, and AI agents making the race a lot more interesting. October 20, 2026. Imagine being a PHP developer or a sysadmin running production applicatio1AOct 22 · 5 min readblog.arshadakl.in
Same Business. Same AI. Why Could the Kerala Version Cost More to Run?Imagine two businesses running almost the same AI workflow. Same use case. Same number of customers. Same AI model. One mainly serves customers in English. The other mainly serves customers in MalayalSep 21 · 4 min readblog.arshadakl.in
Can a 100K-User Startup Really Run for $0 on Cloudflare?When developers hear “100K users”, our brain usually starts building infrastructure before the product even exists. A backend server. A database. Cloud storage for images, PDFs and uploads. CDN. MonitSep 8 · 6 min readblog.arshadakl.in
How a Profile Update Feature Could Drain a Company's Bank AccountI was looking at one of the most normal features you can find in almost any application: Update Profile. Nothing exciting. A user changes their name, profile picture, maybe email, and the backend updaSep 5 · 6 min readblog.arshadakl.in
OTP Bypass : When Client-Side Validation Becomes a JokeOTP flows make developers feel safe. They look secure. They feel secure. They even demo well. But here’s the uncomfortable part: sometimes an OTP flow can become almost useless if the actual security Sep 3 · 8 min readblog.arshadakl.in
