This is the thirteenth article in a series on PHP and Laravel application security.

So far we have covered:

Detecting SQL injection attempts in PHP logs

Why URL encoding blinds most PHP security checks

The decode bomb problem with unlimited URL decoding