phpc.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A server for PHP programmers & friends. Join us for discussions on the PHP programming language, frameworks, packages, tools, open source, tech, life, and more.

Administered by:

Server stats:

834
active users

Great question in the comments for: securinglaravel.com/p/security
"Would you recommend moving "laravel/tinker" to dev?"
No, since it's only a command line tool, but you do need to consider your audit trail. Building custom Artisan commands instead would be easier to test and review.

Securing LaravelSecurity Tip: Disable Dev Tools on ProdBy Stephen Rees-Carter

@valorin I have used Tinker once or twice, in production, to peak at questionable behaviour that was not appearing in dev or staging.

@outofcontrol @valorin me too.

Though I switched to using tinkerwell’s ssh capability now.

@emd @valorin … and I had forgotten about that feature! Thank you for the reminder on this. 😘

@outofcontrol @emd I use Tinker all the time. Granted, it's on small single dev projects, but still.

I've tried to like Tinkerbell, but it's never worked well for me on Win+WSL. ☹️

@valorin @emd Wonder if Sebastien and devs could sort that out and get Tinkerwell working on WSL?

@outofcontrol I offered them help to make Tinkerwell work with WSL2 some years ago. But they never came back to me. Not sure if it’s working by now. I switched to macOS in the meantime.