Profile    Mohammed Shiroz Status   Loading  
Logo
Share This

My web
blog and Updates

It's my personal blog and my post about what was my interested in. Not regularly. If you have any questions any discussion, I'm happy you get in touch with me, and try to answer as many as possible!

Blog
Let's See
Back to blog
Filter by:
Tags
//Article

How HTTP/2 and HTTP/3 Make the Web Faster (Without Changing Your Code)

How HTTP/2 and HTTP/3 Make the Web Faster (Without Changing Your Code)

Blog Summary

Your page needs dozens of files, and HTTP/1.1 fetched them through a handful of narrow pipes. HTTP/2 and HTTP/3 changed that: multiplexing, header compression, QUIC over UDP, and the head-of-line blocking problem explained simply.

Read more
  • 76
  • 149
  • 15

File Upload Security Mistakes in PHP Apps (and the Safe Laravel Way)

File Upload Security Mistakes in PHP Apps (and the Safe Laravel Way)

Blog Summary

An upload form lets a stranger put a file on your server. Five classic PHP upload mistakes, from trusting the MIME type to storing files in the web root, why each one is dangerous, and the safe Laravel approach.

Read more
  • 18
  • 19
  • 12

Content Delivery Networks: How a CDN Makes Your Site Faster (and How It Can Bite)

Content Delivery Networks: How a CDN Makes Your Site Faster (and How It Can Bite)

Blog Summary

Your server is in one city and your users are everywhere. A CDN moves copies of your files closer to them. How edge caching works, the Cache-Control headers that drive it, invalidation, images, security, and the mistake that leaks pages.

Read more
  • 75
  • 35
  • 19

Me vs CORS: A Love Story in Five Bad Ideas and One Good One

Me vs CORS: A Love Story in Five Bad Ideas and One Good One

Blog Summary

Every developer's relationship with CORS goes through the same stages: denial, wildcards, browser flags and bargaining. Here are the bad ideas we all try, why they fail, and the boring fix that actually works.

Read more
  • 103
  • 141
  • 22

OAuth 2.0 Explained Without the Jargon: The Valet Key Guide

OAuth 2.0 Explained Without the Jargon: The Valet Key Guide

Blog Summary

OAuth is a valet key for your data: it lets an app park the car without reading your mail. The authorization code flow with PKCE explained step by step, plus scopes, tokens and OAuth vs OpenID Connect.

Read more
  • 30
  • 81
  • 25

Securing a Laravel App: A Practical 12-Point Checklist Before You Go Live

Securing a Laravel App: A Practical 12-Point Checklist Before You Go Live

Blog Summary

Laravel ships with strong security defaults, so apps get breached in boring ways: a debug flag, a mass-assignment slip, a missing ownership check. Here is the 12-point checklist I run before going live.

Read more
  • 57
  • 20
  • 14

01. About Shiroz

Mohammed Shiroz

Hi, I'm Mohammed Shiroz, a software engineer and AI enthusiast from Sri Lanka who turns ideas into intelligent, real-world solutions. With over 9 years of hands-on experience, I currently lead real estate ERP development at Kate Group, a...

03.My Projects

04. Categories

Ready To Start Your Project ?

Get in Touch
Close