Developer Articles | TechForDev

Latest AI / ML JavaScript Python React Next.js Web Dev DevOps Cloud

True Randomness in Laravel with Lararand

Eduardo LázaroAug 31, 2026 • 4 min read

True Randomness in Laravel with Lararand

Here is a line of PHP that deals a card from a tarot deck. It is wrong. $card =...

#php#laravel#testing#opensource

3 1

The Life of a Permission Check: Following One Request Through 14 Layers of Authorization

Hossein HezamiSep 2, 2026 • 10 min read

The Life of a Permission Check: Following One Request Through 14 Layers of Authorization

TL;DR: What actually happens when a user clicks "Delete" in your Laravel app? Most developers think....

#laravel#authorization#rbac#php

2 0

Open Redirect Vulnerabilities in PHP and Laravel — When Your Own Domain Becomes the Attack

Nchiminyi — Founder, KriosaAug 28, 2026 • 9 min read

Open Redirect Vulnerabilities in PHP and Laravel — When Your Own Domain Becomes the Attack

The attacker does not need to trick users into visiting evil.com. They trick them into visiting...

#webdev#php#laravel#cybersecurity

2 0

Containerized Full-Stack Application using Docker, Nuxt 4, and Symfony 7.4

JohnDivamSep 1, 2026 • 2 min read

Containerized Full-Stack Application using Docker, Nuxt 4, and Symfony 7.4

To run a multi-container full-stack application, the best practice is to separate your frontend and....

#backend#devops#docker#php

5 0

This Week In PHP Internals | August 26, 2026

Len WoodwardAug 28, 2026 • 6 min read

This Week In PHP Internals | August 26, 2026

Hello world, it's Wednesday, August 26, 2026, and here's what happened This Week in PHP...

#php#laravel#news#webdev

1 1

When HTTP Retries Become Dangerous: Idempotency in Symfony Without the Fairy Tales

Alkin VeysalAug 30, 2026 • 9 min read

When HTTP Retries Become Dangerous: Idempotency in Symfony Without the Fairy Tales

Retries are one of those things that look harmless until the first time they duplicate a real...

#symfony#php#api#webdev

0 0

PHP Type Juggling — When 0 Equals "admin"

Nchiminyi — Founder, KriosaSep 1, 2026 • 9 min read

PHP Type Juggling — When 0 Equals "admin"

This is the eighteenth article in a series on PHP and Laravel application security. So far we have....

#webdev#programming#securuity#php

1 0

Postgres RLS in Symfony: with one tenant in the fixture, your isolation suite passes with no policy at all

Eric MollenthielAug 31, 2026 • 6 min read

Postgres RLS in Symfony: with one tenant in the fixture, your isolation suite passes with no policy at all

Ten days ago I wrote that the Postgres role which runs your migrations bypasses every row-level...

#symfony#php#postgres#testing

1 0

L'autocomplétion zsh avec Composer et Symfony console

Jérôme TAMARELLEAug 31, 2026 • 5 min read

L'autocomplétion zsh avec Composer et Symfony console

tl;dr Le script de completion est sur ce gist, et cette commande installe tout d'un coup...

#php#composer#symfony#zsh

3 0

Building a game bot with machine learning

Lawrence CookeSep 2, 2026 • 10 min read

Building a game bot with machine learning

One of the things I enjoy about agentic coding is being able to work on those projects that sat...

#machinelearning#gamedev#python#php

0 0

I Replaced a CMS With Two JSON Files and Nine Functions

JoshuaSep 3, 2026 • 4 min read

I Replaced a CMS With Two JSON Files and Nine Functions

The default answer to "I need a website I can update myself" is WordPress. Sometimes that's right......

#php#webdev#architecture#showdev

1 0

Catching Risky Doctrine Migrations Before Production

Alkin VeysalAug 28, 2026 • 4 min read

Catching Risky Doctrine Migrations Before Production

Database migrations are one of those things that often look harmless during code review. A migratio...

#symfony#php#devops#doctrine

2 0

Using WP-CLI aliases to switch between multiple WordPress environments safely

Susumu TakahashiAug 31, 2026 • 4 min read

Using WP-CLI aliases to switch between multiple WordPress environments safely

Anyone managing several WordPress environments — production, staging, or separate installs for...

#wordpress#php#tutorial

1 2

How the WordPress transient API works, and when `wp transient delete` actually helps

Susumu TakahashiSep 2, 2026 • 4 min read

How the WordPress transient API works, and when `wp transient delete` actually helps

WordPress ships with a built-in way to store data temporarily — save something for a fixed window of...

#wordpress#php#tutorial

2 0

Comparing pricing models across four WordPress maintenance tools — what the shape of a price reveals about cost structure

Susumu TakahashiAug 28, 2026 • 4 min read

Comparing pricing models across four WordPress maintenance tools — what the shape of a price reveals about cost structure

Background While surveying the major WordPress maintenance tools (ManageWP, MainWP, WP...

#wordpress#php#tutorial

2 0

`wp db check` / `wp db optimize` — the database health commands that get overlooked

Susumu TakahashiSep 1, 2026 • 3 min read

`wp db check` / `wp db optimize` — the database health commands that get overlooked

A WordPress database doesn't tidy itself up over time. Spam comments pile up, expired transients...

#wordpress#php#tutorial

2 0

SSH key types (RSA / ED25519 / ECDSA) — what actually differs, and which one to pick

Susumu TakahashiSep 3, 2026 • 4 min read

SSH key types (RSA / ED25519 / ECDSA) — what actually differs, and which one to pick

If you maintain WordPress sites over SSH — running wp-cli remotely, checking logs, transferring file...

#wordpress#php#tutorial

2 0

Converting a Lead Into a Customer in PHP Without Creating Duplicate Records

John LiterAug 27, 2026 • 6 min read

Converting a Lead Into a Customer in PHP Without Creating Duplicate Records

Converting a Lead Into a Customer in PHP Without Creating Duplicate Records A practical...

#php#mysql#webdev#database

0 0

Six Months Later, the Bundle Is Still Alive

David EvdoshchenkoSep 3, 2026 • 3 min read

Six Months Later, the Bundle Is Still Alive

So, it's been half a year since the first stable version of Symfony JSON Schema Validation Bundle wa...

#php#symfony#swoole#api

2 0

Open Source PIM im Jahr 2026: Was sich bei den Lizenzen geändert hat — und was das für Ihre Systemauswahl bedeutet

ADITYA PANDEYSep 2, 2026 • 6 min read

Open Source PIM im Jahr 2026: Was sich bei den Lizenzen geändert hat — und was das für Ihre Systemauswahl bedeutet

Wer heute ein Open-Source-PIM auswählt, arbeitet mit einer Liste, die vor zwei Jahren noch anders...

#opensource#php#laravel#pim

1 0

The Whale Metaphor: How OOP's Four Pillars Actually Work in WordPress

Anatoliy DovgunAug 29, 2026 • 6 min read

The Whale Metaphor: How OOP's Four Pillars Actually Work in WordPress

In the age of AI engineering and vibe coding, almost nobody mentions OOP anymore. But what if...

#architecture#php#programming#wordpress

0 0

My captcha never protected against spam, only against laziness

Odilon HUGONNOTSep 1, 2026 • 5 min read

My captcha never protected against spam, only against laziness

A second spam comment sailed straight past my captcha, honeypot and rate-limiting. Why those layers ...

#php#antispam#security#comments

0 0

I ran a PHP 8.4 compatibility scanner against the 20 most-installed WordPress plugins. It was wrong 6 times, and right about Jetpack.

Alban BajraktariAug 28, 2026 • 6 min read

I ran a PHP 8.4 compatibility scanner against the 20 most-installed WordPress plugins. It was wrong 6 times, and right about Jetpack.

I've been building a static analyzer that finds PHP 8.x incompatibilities in WordPress plugins and.....

#php#wordpress#testing#webdev

0 1

I built a zero-dependency forum in pure PHP

mlzogSep 2, 2026 • 3 min read

I built a zero-dependency forum in pure PHP

A few months ago I got tired of how complicated modern forum software has become. Want a simple...

#php#opensource#showdev#webdev

0 0

Tech Articles

True Randomness in Laravel with Lararand

The Life of a Permission Check: Following One Request Through 14 Layers of Authorization

Open Redirect Vulnerabilities in PHP and Laravel — When Your Own Domain Becomes the Attack

Containerized Full-Stack Application using Docker, Nuxt 4, and Symfony 7.4

This Week In PHP Internals | August 26, 2026

When HTTP Retries Become Dangerous: Idempotency in Symfony Without the Fairy Tales

PHP Type Juggling — When 0 Equals "admin"

Postgres RLS in Symfony: with one tenant in the fixture, your isolation suite passes with no policy at all

L'autocomplétion zsh avec Composer et Symfony console

Building a game bot with machine learning

I Replaced a CMS With Two JSON Files and Nine Functions

Catching Risky Doctrine Migrations Before Production

Using WP-CLI aliases to switch between multiple WordPress environments safely

How the WordPress transient API works, and when `wp transient delete` actually helps

Comparing pricing models across four WordPress maintenance tools — what the shape of a price reveals about cost structure

`wp db check` / `wp db optimize` — the database health commands that get overlooked

SSH key types (RSA / ED25519 / ECDSA) — what actually differs, and which one to pick

Converting a Lead Into a Customer in PHP Without Creating Duplicate Records

Six Months Later, the Bundle Is Still Alive

Open Source PIM im Jahr 2026: Was sich bei den Lizenzen geändert hat — und was das für Ihre Systemauswahl bedeutet

The Whale Metaphor: How OOP's Four Pillars Actually Work in WordPress

My captcha never protected against spam, only against laziness

I ran a PHP 8.4 compatibility scanner against the 20 most-installed WordPress plugins. It was wrong 6 times, and right about Jetpack.

I built a zero-dependency forum in pure PHP