Cloudhim

Oct 10, 2026 ·

Asif Mughal · 62

Docker Ignores Your UFW Rules. Here's How to Check Your Own Server

Docker writes its own firewall rules, so UFW can say a port is blocked while a container port stays open to the internet. Here is how to check your own server and fix it three ways.

Oct 4, 2026 ·

Asif Mughal · 129

CVE-2026-87902: A Critical WordPress Core RCE Flaw Under Active Attack

CVE-2026-87902 is a critical WordPress core RCE flaw, no plugin needed, affecting every version from 4.7 through 7.1.1. Here's how it works, why Docker and cPanel setups are affected by default, and what to check if you were already hit.

Oct 4, 2026 ·

Asif Mughal · 92

Laravel Version Support Schedule Going Into 2027: Which to Run

Laravel 11 has had no security fixes since March 2026, and Laravel 12 loses its last security patches on February 24, 2027. Here's the full official Laravel support schedule going into 2027, and which version to actually target now.

Oct 1, 2026 ·

Asif Mughal · 572

DigitalOcean Droplet Pricing 2026: Full Tables and the Change Nobody Got Right

DigitalOcean did not cut Droplet prices 20% in January 2026, despite what several sites claim. Here's what actually changed (per-second billing), full current pricing tables, and real backup and bandwidth costs most comparisons leave out.

Oct 1, 2026 ·

Asif Mughal · 84

The Complete Backup Strategy for a Solo-Run VPS: Five Layers, One Runbook

Restic backups, uptime monitoring, provider outages, and certificate renewal are usually written about one at a time. Here is how all five layers of a real VPS backup strategy fit together, plus the exact recovery sequence to follow the day a server is actually gone.

Sep 25, 2026 ·

Asif Mughal · 191

PHP End of Life Schedule Going Into 2027: Which Version to Actually Run

PHP 8.2 reaches end of life December 31, 2026, the same day PHP 8.4 quietly loses active support. Here's the full official PHP schedule going into 2027, and which version to actually target for a new or existing project.

Sep 21, 2026 ·

Asif Mughal · 204

The Events Calendar Had Two Critical RCE Flaws. Here's What to Check

Two critical, unauthenticated CVEs (CVSS 9.8) hit The Events Calendar plugin a day apart, putting 600,000+ WordPress sites at risk. Here's what each attack path does, how to check for compromise, and why this landed in an unusually busy month for WordPress security.

Sep 21, 2026 ·

Asif Mughal · 2,655

Hetzner CX23 Pricing (Formerly CX22): Full 2026–2027 Price Tables

Hetzner CX22 is now CX23, still €5.99/month for 2 vCPU and 4GB RAM. Full pricing tables for the whole CX, CAX, and CPX lineup, a link to Hetzner's official pricing page, and why the plan may be unorderable right now.

Sep 18, 2026 ·

Asif Mughal · 96

Specified Key Was Too Long: The Real Fix, Not the One-Liner Everyone Copies

The usual fix for this Laravel migration error caps every unspecified string column at 191 characters, not just the one that failed. Here is a targeted fix instead, and whether this error still shows up on modern MySQL 8.

Sep 18, 2026 ·

Asif Mughal · 120

Nginx Shows 502 But Your App Is Running? Check This IPv6 Localhost Trap

Nginx shows 502 Bad Gateway but your app is confirmed running? Check for an IPv4 vs IPv6 localhost mismatch in proxy_pass. Here is how to spot it in the error log and the one-line config fix.

Sep 18, 2026 ·

Asif Mughal · 110

Expose a Self-Hosted App Without Opening a Port: Cloudflare Tunnel Explained

Cloudflare Tunnel lets you expose a self-hosted app to the internet without opening a single port, using an outbound-only connection instead. Here is the setup, the catch-all rule most people miss, and a real firewall gotcha reported just weeks ago.

Sep 17, 2026 ·

Asif Mughal · 110

Laravel Cloud vs a VPS: When Managed Laravel Hosting Is Actually Worth It

Laravel Cloud added a genuinely usage-based, hibernation-enabled entry plan, changing the math against a plain VPS for a small project. Here is what you get for the extra cost, the real cold-start tradeoff, and when a VPS still wins.