Web attacks & defenses: XSS, CSRF, SQLi, SSRF, IDOR, uploads
The most common real-world threats: injections, XSS/CSRF, access control, file uploads, SSRF, and configuration pitfalls. Practical mitigations and checklists.
Architecture
Guides on resilient data and service shapes—focused on what actually breaks in production.
-
-
High-load event streams: buffers, Redis Streams, Kafka, and splitting OLTP from OLAP
Clicks, bets, and spins at scale: where to land traffic first, how to protect the primary database, and where dashboards should read from.
-
Queues & brokers: Redis, RabbitMQ, Kafka, and the wider market
Choosing async backends for Laravel and other stacks—what fits tasks versus event logs, overkill scenarios, and operational gotchas.
-
Databases under load: query tuning, indexes, MySQL vs Postgres, and scaling trade-offs
EXPLAIN-driven optimization, index types, why heavy logic in the DB hurts velocity, replication and sharding costs, and how Postgres and MySQL differ in practice.
-
PHP apps and the database connection bottleneck: poolers, proxies, and what actually helps
Why FPM and workers multiply DB sessions, how PgBouncer, ProxySQL, and RDS-style proxies sit in the middle, and Laravel-ready notes on transaction pooling and prepared statements.
-
Observability: logs, metrics, and health for Laravel monoliths and microservices
What to collect per environment, how correlation IDs and traces behave across services, and a practical tour from syslog and Nagios-era tools to Prometheus, Loki, OpenTelemetry, and SaaS APM.