Security best practices in Laravel - Mini Project: Build & Apply

Security Best Practices in Laravel

📖 Scenario: You are building a simple Laravel web application that handles user registration and login. To keep user data safe, you need to apply basic security best practices in your code.

🎯 Goal: Learn how to implement essential security best practices in Laravel, including input validation, password hashing, and protection against common vulnerabilities.

📋 What You'll Learn

Create a user registration array with sample user data

Add a configuration variable for minimum password length

Hash the user password before saving

Use Laravel's built-in CSRF protection in a form

💡 Why This Matters

🌍 Real World

Web applications must protect user data and prevent attacks like CSRF and password theft. These practices help keep apps safe.

💼 Career

Understanding Laravel security basics is essential for backend developers to build secure and trustworthy applications.

1

Create User Data Array

Create an array called $userData with these exact entries: 'name' => 'John Doe', 'email' => '[e-mail]', and 'password' => 'secret123'.

Laravel

<?php
// Create the user data array
# Your code here

Need a hint?

Use PHP array syntax with keys and values exactly as shown.

2

Add Password Length Configuration

Add a variable called $minPasswordLength and set it to 8 to define the minimum password length requirement.

Laravel

 'John Doe', 'email' => '[e-mail]', 'password' => 'secret123'];
// Define minimum password length
# Your code here

Need a hint?

Just create a simple integer variable for the password length.

3

Hash the User Password

Use Laravel's Hash::make() method to hash the password in $userData['password'] and update it with the hashed value.

Laravel

 'John Doe', 'email' => '[e-mail]', 'password' => 'secret123'];
$minPasswordLength = 8;
// Hash the password using Hash::make()
# Your code here

Need a hint?

Remember to import the Hash facade and then call Hash::make() on the password.

4

Add CSRF Protection to Form

In a Blade template, add the @csrf directive inside the <form> tag to enable Laravel's CSRF protection.

Laravel

 'John Doe', 'email' => '[e-mail]', 'password' => 'secret123'];
$minPasswordLength = 8;
$userData['password'] = Hash::make($userData['password']);

// Blade template form
?>
    
    # Your code here

Need a hint?

Use the @csrf directive exactly inside the form tag.