Profile    Mohammed Shiroz Status   Loading  
Logo
Share This

My laravel
blog and Updates

It's my personal blog and my post about what was my interested in. Not regularly. If you have any questions any discussion, I'm happy you get in touch with me, and try to answer as many as possible!

Blog
Let's See
Back to blog
Filter by:
Tags
//Article

Mass Assignment in Laravel: The Bug Hiding in Your create() Call

Mass Assignment in Laravel: The Bug Hiding in Your create() Call

Blog Summary

One extra field in a registration request, is_admin=1, and a stranger is an administrator. How mass assignment works in Laravel, why $guarded = [] plus $request->all() is a trap, and the habits that close the hole.

Read more
  • 105
  • 54
  • 19

Logging That Helps at 3 AM: Structured Logs in Laravel

Logging That Helps at 3 AM: Structured Logs in Laravel

Blog Summary

"Something went wrong" is not a log line, it's a cry for help. How to write Laravel logs you can actually search: context arrays, request IDs, the Context facade, sensible levels, JSON channels, and what never to log.

Read more
  • 118
  • 14
  • 13

Designing a Maintenance Request System That Tenants Actually Use

24 Jul 2025Category : Blog
Designing a Maintenance Request System That Tenants Actually Use

Blog Summary

A leaking tap is simple. Getting it fixed, without five phone calls, is a design problem. Behind the scenes of the maintenance flow in Kate PMS: photos, assignment, status updates and the step most systems forget.

Read more
  • 58
  • 109
  • 12

What Happens Inside a PHP Request: From Apache to Your Laravel Controller

What Happens Inside a PHP Request: From Apache to Your Laravel Controller

Blog Summary

Your controller is the last stop on a surprisingly long trip. Follow one request from Apache through PHP-FPM, Laravel's bootstrap, middleware and the router, and see why PHP rebuilds everything every time and how OPcache saves it.

Read more
  • 50
  • 25
  • 21

Me vs CORS: A Love Story in Five Bad Ideas and One Good One

Me vs CORS: A Love Story in Five Bad Ideas and One Good One

Blog Summary

Every developer's relationship with CORS goes through the same stages: denial, wildcards, browser flags and bargaining. Here are the bad ideas we all try, why they fail, and the boring fix that actually works.

Read more
  • 71
  • 117
  • 8

Environment Variables and Secrets: Keeping API Keys Out of Your Code (and Git History)

Environment Variables and Secrets: Keeping API Keys Out of Your Code (and Git History)

Blog Summary

Deleting a leaked key from your code doesn't un-leak it. How .env files really work, why Laravel's config cache changes the rules, when to reach for a secret manager, and what to do in the first hour after a leak.

Read more
  • 117
  • 141
  • 17

01. About Shiroz

Mohammed Shiroz

Hi, I'm Mohammed Shiroz, a software engineer and AI enthusiast from Sri Lanka who turns ideas into intelligent, real-world solutions. With over 9 years of hands-on experience, I currently lead real estate ERP development at Kate Group, a...

03.My Projects

04. Categories

Ready To Start Your Project ?

Get in Touch
Close