Skip to content

Essays

Writing

Laravel and WordPress in production, LLM work that had to pay for itself, and what broke on the way.
RSS

Topics

3 of 43 essays

All Laravel 20 PHP 17 AI / LLMs 15 Performance 15 Architecture 12 WordPress 11 Anthropic 8 DevOps 7 RAG 7 pgvector 6 Career 5 PostgreSQL 4 TypeScript 4 Deployment 3 MySQL 3 Open Source 3 Security 3 React 2 Testing 2 WooCommerce 2 Caddy 1 Cloudflare 1 Docker 1 Dokan 1 Gutenberg 1 Pest 1 Redis 1 SQLite 1 Tailwind CSS 1 Vite 1

2025

Sep 8
· 10 min read

WordPress Plugin Security: Lessons from Two Disclosures

The exact security checklist I run every plugin through before release — capability checks, escaping, nonces, and the disclosed bugs that taught me each lesson.

PHP WordPress Open Source Security
Jun 18
· 8 min read

Caddy + Laravel: A 50-Line Production Config

The exact Caddyfile I run in production — automatic HTTPS, HTTP/3, security headers, rate limiting, asset caching, all in ~50 lines.

Laravel DevOps Deployment Security
Apr 30
· 8 min read

Cloudflare in Front of Laravel: Real IPs, Trusted Proxies, Locked-Down Origins

How to make Laravel see real visitor IPs through Cloudflare — TrustProxies config, origin firewall rules, geolocation headers, and the caching gotchas.

Laravel DevOps Security Cloudflare

About Security

Everything Al Amin Ahamed has written about Security — written after shipping rather than before, so what is in here is what the constraint turned out to be and what I got wrong first.