🚨 CRITICAL vuln in plank/laravel-mediable <=6.4.0 (CVE-2026-4809): attackers can upload malicious PHP files by spoofing MIME types. No patch yet. Disable client MIME trust & enforce server-side checks! Details: https://radar.offseq.com/threat/cve-2026-4809-cwe-434-unrestricted-upload-of-file--9d4d9e8e #OffSeq #CVE20264809 #Laravel #RCE

UseCase или как описывать бизнес-процессы в коде

UseCase - как организовать своё приложение с точки зрения бизнес-процессов, чтобы не погрязнуть в хаосе сервисов, контроллеров и разрозненной логики. Узнать как это

https://habr.com/ru/articles/1012988/

#usecase #application #domain #arhitectura #бизнеспроцессы #бизнеспроцесс #архитектура #бэкенд #php #laravel

UseCase или как описывать бизнес-процессы в коде

Введение Когда меня впервые познакомили с UseCase, я их отрицал. Но после того как разобрался глубже, я больше не представляю своё приложение без этого подхода. И теперь хочу поделиться им с вами....

Хабр
This guide to building a "chat with your documents" LLM chatbot using RAG and #Laravel is really helpful and well done. https://tighten.com/insights/chat-with-your-documents-a-practical-guide-to-rag-using-the-new-laravel-ai-sdk/
Chat with Your Documents: A Practical Guide to RAG Using the New Laravel AI SDK

Have you ever wished you could just ask your documents a question and get an answer? That's exactly what RAG (Retrieval-Augmented Generation) lets you do. It's the technique behind those AI chatbots...

Tighten

I released version 4.8.0 for Laravel Mail Catchall

This version adds support for Laravel 13

This package helps you to forward all the mail from your Laravel application to a specified address and have the information about the original receivers added.

https://gitlab.com/tjvb/laravel-mail-catchall

#PHP #release #Laravel #Laravel13 #package

tjvb / Laravel Mail Catchall · GitLab

Catch all the mail in Laravel and redirect it Mirrored to https://github.com/TJVB/laravel-mail-catchall

GitLab
When composer audit flags a CVE that doesn't apply to your app, don't just make the warning go away. The way you handle it communicates a lot to your future self and your team. #php #laravel https://masteringlaravel.io/daily/2026-03-26-dont-just-silence-composer-security-warnings
Don't just silence composer security warnings | Mastering Laravel

A documented reason turns a warning into a decision

Mastering Laravel
Speed up your Livewire tests

I'd been having very slow Livewire tests in my application but hadn't put much stock into it until I started work on the app again and was running the suite oft...

@peach Seemed a bit unnecessary to me too at first. Two things: chaining operations and UTF-8 support.
https://github.com/laravel/framework/pull/57581
#php #laravel
[12.x] Add ucwords to Str and Stringable by braxey · Pull Request #57581 · laravel/framework

When transforming a name in a request, I'm currently doing the following: $name = ucwords($this->string('name')->trim()->squish()->value()); After this change, we'll be ...

GitHub

Can someone in #laravel land answer me this?

why are there "helpers" for things like `Str::ucwords()` when you can literally use the php builtin?

This seems completely dumb to me.

The March meetup is in the books.

Great turnout at Xelon in Zug — lots of new faces. Storm-related train delays meant we ended up with one speaker on the night, but the conversations made up for it.

Thanks to everyone who came out, and to Xelon for hosting.

#Laravel #PHP