Writing secure forms

Every form on a website is a door. Laravel gives you good locks; use all of them.

1. Validate everything on the server, even if the browser already checks it.
2. Keep CSRF protection on so other sites cannot submit forms as your users.
3. Rate-limit logins, sign-ups and contact forms to stop scripts hammering them.
4. Add a captcha where bots are a problem. Our products include a built-in captcha and Google reCAPTCHA.
5. Escape output so text users typed cannot become code on your pages.