Case study · 2026

Hardening a live Laravel site

7findings (1 critical, 1 high, 2 medium)

2worst fixed on the live site the same day

8.1 → 8.3PHP, in the Laravel 12 rebuild

A code review and fix of a production site, this one: debug mode left on, a public symlink route, a broken contact form, and credentials in a web-served folder. It covers what I found, how I fixed it, and how I checked the fixes.