Laravel Security: Top 7 Mistakes Developers Make

please make one about file upload exploit

love from pakistan

S

You are just awesome <3

First of all, big thanks, what about xml attack? And sql injections? Have any vulnerability for sql injections in laravel? If yes, how can it be safer?

Very informative

👋👋

Great video as always, would love to see more of these!

Why are you so good? 💚💚💚

is Java secured?
I am going to leave a general answer "If the developer is bad at coding and doesn't care about securing their application NO", but then again there is a job market for people that are paid to look at the code and yell at those developers that they should not hardcode security keys inside the client app (for example: 2 years ago I was listening to a podcast of a lady that said she found hardcoded security keys inside android banking applications, with comments in the code "stop putting security keys in the code")
So to sum it up, most of the time the problem is between the chair and the screen

Hello Povilas,
Great video! Just 1 question regarding the first example. What about the cases I have a WYSIWYG in my blog post and the user can enter a html? I am forced to escape it. what's the solution?

gr8 video ,which i listen till date..

Rate limit is a good option to negotiate delayed payments :P

i wonder if you can make the same video for developers who use laravel just for API as a backend and tell us about security concerns we may face

Thanks bro

I always enjoy your content ♥️.

thank you...

never played a full tutorial video without x2 speed outside work. very good video i subed

As someone that’s been using Laravel since v4.2, I love your content , straight to the point, no dithering , no BS - I hope you get your silver platter soon :)

you sexy m.f. Pov. Great job !

How to perform vulnerability assessment?

Thank you sir, i think your videos is very usefull. Thanks for your dedication.

I really appreciate your every single video. They are so helpful to me.

Is it a mistake to add data in a migration, or should migrations only change the database structure? For example, we keep our translations in a database table. If we need another word translated, should we add this in a migration? Or should we use a seeder? Or something else?

YOU WIll surely go beyond 200K subscribers Sir, you are really doing a great job. Thanks and God bless

Wow this is very insightful sir. Thanks for sharing

Thank you!

What's the best secured way to upload laravel project in shared hosting?

thank you

Thank you so much for your video. Please make a video on passing {id} value in route. We are using direct id which is the primary key for the Post, Put method and Laravel also use the same in resource controller. Please make a video with this topic and security issues.

Thanks Sir you helping so much .... i really appreciate it <3

7 Mistakes beginners devs make :)

Me who use REST API'S: 🤷

Great

pls I am used to csrf but with the invention of livewire, is it necessary again because I dint even bother to include it because you can submit form without even form elements using livewire.

Thank you!

Another: People using Raw DB queries and not binding parameters subsequently leading to an SQLi.

Last week analyzing my apache log I found some requests to /.env, so make sure that your .env file is not public, you never will be 100% safe, so do your best

Good stuff. Would you ever consider doing a course on security in Laravel, PHP, and Livewire, or even just more videos on it? It's a huge concern that I feel like doesn't get enough attention, and even as a mid-level developer and working with Laravel over 5 years, I'm not always sure how to be sure my code is 100% secure other than avoiding some of the obvious like you point out in this video. Like a good example of content you could cover is how supposedly we should be using UUIDs for our models, but it's not always clear the best way to do that or when to do that

Nice info sir, thanks!

Respect from Pakistan 🇵🇰
Rate Limiting is left from my side, all other stuff is my daily routine.

But I feel like request except is also a security loophole

I am using json in a crud app. Still a bit unsure about possible vulnerabilities. Do you have any information?

Hello! Maybe you recording video on laravel Policy? How block any action in another user when user is not the same Group. Or how user can get only our post when he post another id in request. I have problem with this and no were information how do this. I have two model Clients and Users, Clientis Group amd have more users. Now when i send GET REQUEST id another client i can get users another client.

Hello, Povilas I have a question. Lets say there is a blog post site and user can make a post that contains all those html tags like link, table and so on, how the content should be displayed if {!! $content !!} is a security issue? Should developer write a some code that checks if there are strings like <script> or <php or are there some other options?

Hi povilaz....can you make one video about laravel project hosting in shared server, it's very helpful to all
Thanks in advance.