Tips in Security

Explore all tips and tutorials about Security.

Security Medium

CORS Explained: Same-Origin Policy, Preflight, Credentials and Laravel config/cors.php

CORS errors tempt you to reflect any Origin and move on. Learn what the browser checks, when preflight happens, how credentials change the rules, and safe config.

Laravel 13 PHP 8.4 Node.js 22

Diagram Try the challenge

10 min 23/10/2026 Read tip

Security Medium

Verifying Webhook Signatures with HMAC: Raw Body, Timing-Safe Compare and Replay Protection

A webhook URL is a public endpoint that changes your data. Verify HMAC signatures on the raw body, compare in constant time and block replays with timestamps.

Laravel 13 PHP 8.4 Node.js 22

Diagram Try the challenge

10 min 23/10/2026 Read tip

Security Medium

Password Hashing Done Right: bcrypt vs Argon2id, Cost Tuning and Rehash on Login

MD5 and SHA-256 crack in hours once a dump leaks. Pick bcrypt or Argon2id, tune the cost on real hardware and upgrade old hashes on login in PHP and Laravel.

PHP 8.4 Laravel 13 Python 3.13

Diagram Try the challenge

11 min 23/10/2026 Read tip

Security Medium

Rate Limiting APIs: Token Bucket vs Sliding Window

Fixed windows let clients burst 2x at the boundary. See how token bucket and sliding window rate limiting actually work, with Redis-backed implementations and the pitfalls that break them in production.

Redis 6.x+ Node 18.x+

Diagram

2 min 27/09/2026 Read tip