Operations | Monitoring | ITSM | DevOps | Cloud

January 2024

Making sure Laravel's debug mode is always disabled in production

Recently, people started talking about a malware called “Androxgh0st” specifically targeting Laravel apps. In a recent edition of Securing Laravel, Stephen Rees-Carter wrote a good explanation of how it works. The malware targets apps with APP_DEBUG set to true. When enabled, Laravel will give detailed error messages, and some security features will be disabled. In production, you always want this value to be set to false.

Two smallish improvements to our DNS check

As you probably know, Oh Dear is run by a small but capable team. One of the advantages of being small is that we can implement stuff pretty quickly: there’s no red tape, and our code base is very healthy. So, when our users have feature requests that make sense to add to Oh Dear, we can move fast. In the past month, we implemented two smallish feature requests for our DNS check we got through support. Here’s what our new DNS settings screens look like.

Laravel Pulse cards to show response times, scheduled jobs, broken links

Today, we released the ohdearapp/ohdear-pulse package, which contains Laravel Pulse cards to show you the status of your scheduled jobs, any broken links you have in your Laravel app, and uptime / HTTP performance stats. All of these cards use the Oh Dear API to fetch their data. Laravel Pulse is a first party package that can display a dashboard with information surrounding usage and performance of your Laravel app. Here’s how a default installation looks like.