💰 Billing engineer at @laravel working on Cloud ☁️ • 💻 Building @moneytreesapp, @eventyio & @laravelio • ⭐️ @github Star
Belgium
Joined December 2010
- Tweets39.7K
- Following335
- Followers30.6K
- Likes31.3K
Pinned Tweet
📣 Moneytrees is live! So proud to be able to launch my very own SaaS finally. Over the past 4,5 months I worked hard on building it. It's how I wish other invoicing software would work. Go give it a try with the free tier and let me know what you think!
I'll share more behind-the scenes stuff soon.
💸 We're beyond excited to launch Moneytrees. Invoice clients, keep track of expenses, get that birds-eye view of your project's financial health, download reports, share invoices and projects through a hosted client portal and more.
Start for free at moneytrees.app
Dries Vints retweeted
Hate to be that guy 🙃, but if you’ve updated PHP, please update laravel/mcp too.
The advisory we published yesterday is patched in 1.1.0 and 0.9.7.
composer update laravel/mcp
github.com/laravel/mcp/secur…
Stay Safe. Fam!
Dries Vints retweeted
As if there weren't enough reasons to migrate to Laravel Cloud, on situations like today, they've patched every app running in there automatically with no action required on the users end. Great work. Can't wait for the write-up on that.
Some days it's not great to be behind Cloudflare but on most days it is. Then it's also good to speak out about that. Thanks @Cloudflare for keeping the web a bit safer 🙏
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
Dries Vints retweeted
The Laravel Cloud edge network is powered by Cloudflare.
All deployed Laravel Cloud applications, including those in dedicated zones and with custom domains, have these rules applied automatically.
We are continuing to rollout patched PHP images to address the underlying vulnerability.
The Cloudflare's writeup on our php2shell response is up.
Rules went live at 03:02 UTC, about 9 hours before disclosure. Unfortunately the vulnerability leaked early, so we were already watching attackers mutate payloads against the rules and updating as variants appeared.
New rules keep landing in the WAF changelog.
Expect updates through out the day. We will have a more thorough post of what we had to build to better protect people coming shortly.
PHP runs almost 70% of websites. The flaw is in the runtime, so updating plugins won't fix it. Patch PHP.
blog.cloudflare.com/php-vuln…
Dries Vints retweeted
We have published a guide on updating your Forge provisioned servers directly via SSH, allowing you to by-pass the Forge dashboard.
laravel.com/forge/docs/knowl…
Dries Vints retweeted
‼️ Two critical RCE vulnerabilities have been found in PHP itself. Treat all versions as affected, with reports going back to 5.x.
The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both have a CVSS v4.0 score of 9.2. The PHP security team will release fixes on October 21, 2026, at 2PM UTC
If you run PHP anywhere in your stack, please stay tuned for workarounds and patches. Be prepared to take action.
What you need to know about PHP2shell: aikido.dev/blog/critical-vul…
Dries Vints retweeted
At 14:00 UTC two critical security vulnerabilities will be patched in PHP.
These are extremely serious vulnerabilities affecting every PHP application on the web.
Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.
Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.
Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.
Dries Vints retweeted
dev-null.sh is on Laravel Cloud
Dries Vints retweeted
Here's a tip I'd give new builders: deploy with @laravel Cloud. You'll thank me later.
Dries Vints retweeted
Say hello to @laravel Herd 2.0 - the local Laravel dev environment
🎙️ Herd Studio
⚡️ artisan dev / vite detection
☁️ Laravel Cloud Integration
🕵️♀️ Insights MCP server
💻 git worktree & copy-on-write workspace support
🧑⚕️ Isolated databases
💅 Refined and polished UI
...and more!
Transactional emails have landed in Cloud! It’s never been easier to send out your emails ✉️🚀
Setting up transactional emails for your app is now easier than ever! Add email sending to any Laravel Cloud environment with our first-party @resend integration.
Here’s how you get set up 🧵
Dries Vints retweeted
can’t wait :)))
ok, urgent, @vanamerongen is joining us on day 2.. this will the biggest livestream ever 🐘
php forever
Static sites on Cloud! Come get em’
laravel.com/cloud
