• 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle






  • Review is done before code gets into main, but that’s inefficient for most of the non-mission critical projects out there. A better approach is to optimistically merge most changes as soon as not-rocket-science allows it, and then later review the code in situ, in the main branch.

    Assuming you have a project with continuous delivery, that is an absolute foot gun. Optimistically merge the change and then realize in situ that you forgot the WHERE part of your SQL command (or analog statement of the query builder)? No fucking thanks.



  • There are some good points in it but the list feels poorly written as it contains very general tips which feel like fluff to increase the article length like:

    Protect the client-side against attacks.

    Or just wrong stuff like:

    Validate all server-side input data.

    If you can trust someone, it’s the server. You should validate data coming from the client on the server side.

    Some things even contradict each other like

    Implement strong authentication, such as two-factor authentication (2FA).

    And

    Use secure authentication mechanisms such as OAuth.

    Assuming your app is an OAuth client, you have no say in how the identity provider identifies the user.

    Good point, but even better than

    Monitor file and source code integrity.

    is having the application source code read-only, ideally owned by another user to avoid the confused deputy problem.









  • Docs is another topic I really don’t like about Laravel. Why don’t you have a simple API doc with available functions and their parameters instead of that blog-style documentation. And no, I don’t want to watch a video about how to use X, I want to know what functions I can call. Oh and don’t get me started on all their global “helper” functions.


  • Hey, I’ve came over from Reddit and thought I’ll introduce myself as well. As every programmer, I’ve started way too many pet projects and almost all of them are starving. In terms of framework, I prefer Yii2 over Laravel every day. I feel like Laravel provides you a dozen different (seemingly equally good) ways of doing something. You could say it’s lacking clarity or guidance for the developer.