The Code Log
Welcome to my blog, a space where I share insights, lessons, and best practices from building secure, scalable web applications and SaaS solutions. From tackling complex development challenges to exploring modern tools, frameworks, and security techniques, this is where I document what works, what doesn’t, and how to create high-performance digital products that deliver real business impact.
Stop Leaking Secrets: Audit Your .env Files with VaultCheck
Most .env problems go unnoticed until something breaks or worse, leaks. VaultCheck is a PHP CLI tool that audits your environment files and git history for exposed secrets, missing keys, and bad permissions. Run one command and get a prioritized list of what to fix.
Harden Your Laravel Server in Minutes With SIGIL - A Practical Guide
Most security guides stop at your application code. SIGIL goes further, it scans your Nginx config, Docker setup, PHP settings, and database for the misconfigurations that actually get servers compromised. This guide walks you through installing it, running your first audit, and letting it fix what it safely can.
The Government Is Spying on You: ICE's Dangerous New Spyware Contract Explained
The U.S. government has reactivated a $2 million spyware contract with Paragon Solutions, raising serious concerns about mass surveillance. This post breaks down how ICE could use these tools against Americans and how you can defend your privacy.
How to Set Up a Local Laravel Development Environment with Docker
Learn how to create a dynamic sitemap generator in Laravel that automatically updates based on your site's content. In this post, I’ll walk you through the steps to build a flexible and efficient solution that keeps your sitemap current with minimal effort, improving SEO and site navigation