Blog
Insights into my everyday programming life and other interesting technical tidbits
February 2026
PHP Security Pitfalls: Why $_SERVER['REQUEST_URI'] in Forms is Dangerous
A look at common security pitfalls in PHP: From XSS to SQL injection to insecure password storage.
Read More →My Production Server Setup with openSUSE Leap
From bare-metal server at Hetzner to a hardened production system: nginx with Brotli, PHP-FPM, RabbitMQ, CrowdSec, SSH tarpit and automated backups.
Read More →CSRF in Symfony and Why Shopware Dropped It
CSRF protection is standard in Symfony – but Shopware 6 deliberately chose against it. Why? And how do you properly handle MySQL locking and parallel JavaScript requests?
Read More →