Blog

Web Security

I write about securing web apps in practice: Content Security Policy with Helmet in Express, JWT authentication, and verifying Shopify webhook signatures. For developers who want concrete, correct implementations of common security controls.

All AI and Backend Integration AI for Developers AI Prompt Engineering Database Optimization Debugging and Troubleshooting Developer Productivity DevOps and Deployment Full-Stack Development Git and Version Control Laravel and PHP Development Node.js and Backend Development Performance Optimization React and Frontend Development REST APIs Server Configuration Shopify Development Trending AI Prompts and Tools Web Security WordPress and WooCommerce

Web Security Node.js and Backend Development

Node2Shell: Node.js Brotli RCE and the Fix

Node2Shell (CVE-2026-111497) is a Node.js Brotli RCE flaw. See which Express paths are exposed and the fixed versions.

October 27, 2026 63

Web Security WordPress and WooCommerce

How to Check Your PHP Version After PHP2Shell

How to check your PHP version and confirm it's patched against PHP2Shell on WordPress, cPanel, Linux and Docker.

October 23, 2026 111

Web Security Server Configuration

PHP2Shell: Critical PHP RCE Flaws and the Fix

PHP2Shell explained: two critical PHP flaws allow remote code execution. Fixed versions, developer steps and an owner checklist.

October 22, 2026 140

Laravel and PHP Development Web Security

Fix Laravel 419 CSRF Token Mismatch Error

A real fix for the Laravel 419 CSRF token mismatch error — session cookie settings, SPA/Axios setup, and when to actually use the except array.

October 8, 2026 118

Web Security

Content Security Policy in Express With Helmet

Learn how to set up a Content Security Policy in Express with Helmet: nonces, report-only rollout, and the mistakes that weaken your XSS defense.

September 20, 2026 158