Blog

Where an AI agent went wrong in my Laravel SaaS and what caught it: a written architecture, a package over home-made code, deny rules, hooks and a rule that never ran.

Real estate offices as tenants: office_id on every row, spatie/laravel-permission teams, PostgreSQL RLS as a second lock, and the places where tenant context goes missing.

The English version of my old post about PHP test tasks, now with my one-hour interview format, the questions I ask and notes from the candidate side.

A side project that started with one question: why does HR software charge per employee? Flat vs per-user pricing in a table, the stack, and what's still hard.

My 2015 PHPMailer DKIM guide, rewritten for 2026: no more patching PHPMailer, a 2048-bit key, DMARC on top, and the rules Gmail, Yahoo and Outlook enforce now.

What the generic WHMCS license error hides, how to get the raw log of the license check without the Admin Area, and the usual causes behind it.

The security.yaml I use to put a single webhook endpoint behind HTTP Basic auth, checked on Symfony 8.1 and 7.4 LTS, plus the .env quoting trap with bcrypt hashes.

The service provider side of Domain Connect in four steps, re-checked against live GoDaddy and Cloudflare DNS in 2026, with a PHP script you can copy.