Enabling and Disabling Debug Mode in Laravel
APP_DEBUG in .env, why it must always be false in production, and what actually leaks when it is left on by mistake.
GUIDES
APP_DEBUG in .env, why it must always be false in production, and what actually leaks when it is left on by mistake.
Laravel's remember-me support is built into Auth::attempt() — a single boolean argument, plus one column already present in the default users table migration.
The image upload API itself hasn't meaningfully changed across recent Laravel versions — what genuinely differs in Laravel 10 and 11 is scaffolding and folder structure, not the store() call itself.
Every Eloquent timestamp is already a Carbon instance — the part that actually causes bugs is timezone handling: what gets stored, what gets displayed, and where the conversion between them should happen.
A single well-maintained package (endroid/qr-code, wrapped by simple-qrcode) covers this — the actual decisions are output format, error-correction level, and whether to embed a logo.
A QR code package turns any string — a URL, a ticket ID, WiFi credentials — into a scannable SVG or PNG in a single method call.
Rendering a Blade view to PDF is a matter of passing its rendered HTML to a PDF library like DomPDF — the same view can double as both the web page and the downloadable PDF.
Beyond storing JSON, Eloquent's whereJsonContains() and arrow-path syntax let you actually filter and search inside that structured data at the database level.
A browser blocks cross-origin requests by default — CORS headers on the server are what explicitly permit a specific frontend origin to actually call your API.
Dispatching a job pushes it onto a queue instead of running it inline — the request returns to the user immediately, while a separate queue worker process actually does the slow work.
A facade is a static-looking proxy to an object resolved from the service container — creating your own is three small pieces: the underlying class, the facade class, and (optionally) a binding.
{!! !!} deliberately skips Blade's automatic HTML escaping — the right choice for trusted, pre-sanitized HTML, and an XSS vulnerability waiting to happen for anything containing raw user input.