💰 Billing engineer at @laravel working on Cloud ☁️ • 💻 Building @moneytreesapp, @eventyio & @laravelio • ⭐️ @github Star
Belgium
Joined December 2010
- Tweets39.7K
- Following335
- Followers30.6K
- Likes31.3K
Dries Vints retweeted
I’ve heard great things about rails on @laravel cloud lately.
Dries Vints retweeted
Hate to be that guy 🙃, but if you’ve updated PHP, please update laravel/mcp too.
The advisory we published yesterday is patched in 1.1.0 and 0.9.7.
composer update laravel/mcp
github.com/laravel/mcp/secur…
Stay Safe. Fam!
Dries Vints retweeted
As if there weren't enough reasons to migrate to Laravel Cloud, on situations like today, they've patched every app running in there automatically with no action required on the users end. Great work. Can't wait for the write-up on that.
Dries Vints retweeted
The Laravel Cloud edge network is powered by Cloudflare.
All deployed Laravel Cloud applications, including those in dedicated zones and with custom domains, have these rules applied automatically.
We are continuing to rollout patched PHP images to address the underlying vulnerability.
The Cloudflare's writeup on our php2shell response is up.
Rules went live at 03:02 UTC, about 9 hours before disclosure. Unfortunately the vulnerability leaked early, so we were already watching attackers mutate payloads against the rules and updating as variants appeared.
New rules keep landing in the WAF changelog.
Expect updates through out the day. We will have a more thorough post of what we had to build to better protect people coming shortly.
PHP runs almost 70% of websites. The flaw is in the runtime, so updating plugins won't fix it. Patch PHP.
blog.cloudflare.com/php-vuln…
Dries Vints retweeted
We have published a guide on updating your Forge provisioned servers directly via SSH, allowing you to by-pass the Forge dashboard.
laravel.com/forge/docs/knowl…
Dries Vints retweeted
‼️ Two critical RCE vulnerabilities have been found in PHP itself. Treat all versions as affected, with reports going back to 5.x.
The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both have a CVSS v4.0 score of 9.2. The PHP security team will release fixes on October 21, 2026, at 2PM UTC
If you run PHP anywhere in your stack, please stay tuned for workarounds and patches. Be prepared to take action.
What you need to know about PHP2shell: aikido.dev/blog/critical-vul…
Dries Vints retweeted
At 14:00 UTC two critical security vulnerabilities will be patched in PHP.
These are extremely serious vulnerabilities affecting every PHP application on the web.
Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.
Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.
Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.
Dries Vints retweeted
dev-null.sh is on Laravel Cloud
Dries Vints retweeted
Here's a tip I'd give new builders: deploy with @laravel Cloud. You'll thank me later.
Dries Vints retweeted
Say hello to @laravel Herd 2.0 - the local Laravel dev environment
🎙️ Herd Studio
⚡️ artisan dev / vite detection
☁️ Laravel Cloud Integration
🕵️♀️ Insights MCP server
💻 git worktree & copy-on-write workspace support
🧑⚕️ Isolated databases
💅 Refined and polished UI
...and more!
Dries Vints retweeted
can’t wait :)))
ok, urgent, @vanamerongen is joining us on day 2.. this will the biggest livestream ever 🐘
php forever
Dries Vints retweeted
💪 After moving our internal apps over to Laravel Cloud this weekend, my AI buddies and I proceeded to move a big part of our client sites over as well.
Spatie has been (and still is) a web agency for almost 20 years, so you can imagine that we've amassed quite a few legacy projects.
Some of these were on ancient versions of Laravel, and a couple... I don't even want to say what they were on 😱. As part of the move, the AI converted them to Laravel 13 in one fell swoop, and tests and all modern tools and best practices described in my skills.
Moving these old and new projects was pretty wild, in the sense that it was so fast and flawless. It verified prepared DNS records, verified that databases were the same, that all media was the same, testing in browsers... All in parallel for those apps.
Complaints from our clients reported because of mistakes: 0
Feels very good to have made this move and to have those old projects on modern technology and platform.
Next move: conversion to Rust? 😅 🦀
RT @pushpak1300: okay, the time has finally come 👀
One of the most requested features for Laravel AI sdk is HERE.
Your agents can now hav…
Dries Vints retweeted
From side project to production, @laravel Cloud helps developers ship in seconds and grow with control over their costs.
Hats off to @driesvints and the team. Proud to power the billing behind Cloud ☁️
getlago.com/blog/laravel-bil…
Dries Vints retweeted
Serverless was supposed to be the cheap option.
We just moved all 16 of our apps off @laravel Vapor onto Laravel Cloud and our infra bill dropped 65% org wide.
Same apps. Same traffic. Nearly two-thirds cheaper.
Ask me anything about the migration 👇
