AI assistants write fluent Laravel code that hides the security mistakes the framework prevents. How AI code generation changes the risk picture, a review workflow for what the assistant hands you, and how it connects to the book You Are the Quality Control.
A walk through the OWASP Top 10 mapped to concrete Laravel practice: where the framework protects you by default, and where one line of code opens the door again.
Authentication tells you who a user is; authorization decides what they may do. A practical guide to Sanctum, passwords, throttling, and using Gates and Policies to close broken access control.
The pre-deployment security checklist I work through before signing off on a Laravel application: environment, HTTPS, auth, database, validation, uploads, dependencies and logging.
A walkthrough of seven built-in Laravel security features and how to use them well to harden a web application.
