#"authorization"

3 articles tagged with ""authorization""

Laravel Gates & Policies: Stop Scattering Auth Logic Everywhere 🔐

You know that `if ($user->role === 'admin')` check you copied into 12 different controllers? Yeah, that's gotta go. Laravel Gates and Policies are here to save your sanity.

Mar 19, 2026

6 min read

"cybersecurity""web-security"

IDOR: How Changing ?user_id=1 to ?user_id=2 Exposes Everyone's Data 🔓

The simplest hack that still works in 2026: just change a number in the URL. Here's why your API is probably leaking user data right now and how to actually fix it.

Feb 12, 2026

11 min read

"laravel""php"

Laravel Policies & Gates: Authorization That Doesn't Suck 🔐

Stop putting authorization logic everywhere! Let's use Laravel Policies and Gates to keep your code clean and your users in their lane.

Feb 08, 2026

8 min read