#"authorization"

3 articles tagged with ""authorization""

Laravel Gates & Policies: Stop Scattering Auth Logic Everywhere 🔐

You know that `if ($user->role === 'admin')` check you copied into 12 different controllers? Yeah, that's gotta go. Laravel Gates and Policies are here to save your sanity.

Mar 19, 2026

"cybersecurity""web-security""security"

11 min read

IDOR: How Changing ?user_id=1 to ?user_id=2 Exposes Everyone's Data 🔓

The simplest hack that still works in 2026: just change a number in the URL. Here's why your API is probably leaking user data right now and how to actually fix it.

Feb 12, 2026

"laravel""php""authorization"

8 min read

Laravel Policies & Gates: Authorization That Doesn't Suck 🔐

Stop putting authorization logic everywhere! Let's use Laravel Policies and Gates to keep your code clean and your users in their lane.

Feb 08, 2026