MMuhammad Ali Mughal41m ago · 10 min readCookie Security Flags: Auditing Secure, HttpOnly, SameSiteMost session hijacking bugs I find in audits are not exotic. They are a session cookie missing one attribute: HttpOnly left off so an XSS payload can read it, Secure missing so it rides over a plain Hresume-ai.hashnode.dev
TTaha Rafi10h ago · 7 min readReverse-Engineering Hardware Protocols in PHP 8: Inside ZKTeco Sockets and Direct Memory InjectionHardware protocols are often viewed as the exclusive domain of C, C++, or Go systems programmers. Most web developers assume PHP cannot interact with low-level binary protocols on physical devices wittaharafi.hashnode.dev
AAdil Soukaini | Full-Stack Developer17h ago · 7 min readLaravel vs Node.js for a startup backend: how to chooseOriginally published on shipfastdev.com. For most startup backends, both Laravel and Node.js will do the job; the better choice depends on your product and your team. Laravel gets a typical SaaS or ma2Kadilsoukaini.hashnode.dev
KKamran Khan1d ago · 2 min readLogout should never get stuck on a failed request: clear the session locally no matter whatI have been logged into apps where logout spun, failed, and left me staring at a dashboard I had just tried to leave. Usually on bad hotel wifi. The server never got the request, the frontend treated kamrankhandev.hashnode.dev
KKamran Khan1d ago · 3 min readAfter you save or delete a user, stay on the same page: the refetch argument I always passHere is a small annoyance that drives admins quietly mad: you are on page 4 of the users table, you edit someone, you save, and the table dumps you back on page 1. Nothing broke. The data is fine. Butkamrankhandev.hashnode.dev
FFady Mondy1d ago · 4 min read20 free Filament 5 plugins for a SaaS admin panel (2026)A SaaS admin panel always needs the same boring parts before it needs your product: users, settings, languages, files, billing, notifications. Filament makes the panel fast. Plugins make those parts f3x1.hashnode.dev
KKamran Khan1d ago · 3 min readRead my api.php top to bottom and you already know the permission model: three route tiers, no surprisesOpen routes/api.php in a new project and you can usually tell within a minute whether the author thought about permissions or just bolted them on later. The giveaway is scattering: an auth middleware kamrankhandev.hashnode.dev
AAnish Ansari1d ago · 7 min readSystem Design Drill Day 11: The Transactional Outbox PatternAlmost every Laravel checkout controller has the same two lines: save the order, then dispatch a job. It works nearly every time. If Redis hiccups between those two lines, the order is paid and the emblog.anishansari.com.np
VVortex Web Innovate1d ago · 1 min readHow to Build a Modern Laravel Blog with FilamentBuilding a blog today means building a fast, clean system that can grow with your content. This step-by-step tutorial uses Laravel and Filament for the schema, resources, rich text, slugs, SEO, roles vortexwebinnovatehq.hashnode.dev
AAnish Ansari2d ago · 7 min readSystem Design Drill Day 10: Circuit Breakers, Timeouts and DegradationThe payment gateway starts timing out. The HTTP client retries, the queue retries, and workers pile up waiting on calls that won't come back. Soon pages that have nothing to do with payments are slow 2Dblog.anishansari.com.np
