Claude Code for PHP Developers: Laravel, WordPress & Composer Workflows (2026)

Create a full resource controller for managing Products in my Laravel 11 e-commerce app. Products have: name, slug, description, price (decimal), stock_quantity (int), category_id (FK), is_active (bool), and images (polymorphic). Include: Form Request for validation, Policy for authorization, Resource class for API responses, and Pest feature tests for all 7 routes. Follow PSR-12 and declare strict_types.

Write an API controller for /api/v1/orders with index (paginated, filterable by status and date range), show, store, and update methods. Use Laravel's API Resource with conditional attributes. Include cursor pagination for index. Add rate limiting via RouteServiceProvider. Write Pest feature tests with RefreshDatabase.

I have these models: User, Order, OrderItem, Product, Category. Set up all Eloquent relationships (hasMany, belongsTo, hasManyThrough, morphTo as needed). Then write a query to get a user's last 5 orders with their items and product names, eager-loaded to avoid N+1. Add a query scope `scopeRecent` and `scopeByStatus` to the Order model.

This Eloquent query is slow: [paste query]. Analyze it for N+1 issues, missing indexes, and over-fetching. Rewrite it using eager loading, select() to limit columns, and withCount() where appropriate. Show me the query log before and after using DB::enableQueryLog().

Create a migration for an `audit_logs` table. Columns: id (uuid), user_id (nullable FK to users), action (string 100), model_type, model_id (morphs), ip_address, user_agent, payload (json), created_at. Add indexes for: user_id, model_type+model_id (composite), action, created_at. Include a corresponding AuditLog model with casts and a factory.

Create an Artisan command `app:sync-inventory` that: accepts a `--source` option (csv or api), reads a product inventory file or calls an external API, updates stock_quantity in the products table in batches of 100, logs each batch to Laravel's Log::channel('inventory'), sends a Slack notification on completion via a Job. Include a progress bar. Register it in the console kernel to run daily at 2 AM.

Review my composer.json and identify: packages that have newer major versions with breaking changes I should plan for, any packages with known security advisories, packages that duplicate functionality, and dev dependencies that accidentally ended up in require (not require-dev). Suggest a migration plan for the most critical updates.

I need to add PDF generation to a Laravel app. Compare these options: barryvdh/laravel-dompdf, barryvdh/laravel-snappy, spatie/laravel-pdf (using Browsershot/Puppeteer), and league/html-to-markdown + a native PDF lib. My requirements: complex layouts with CSS, Arabic RTL text support, server-side generation without a browser. Recommend the best option and show the installation + basic usage.

I want to restructure my Laravel app into domain-based modules: Orders, Catalog, Customers, Payments. Each domain should have its own Models, Services, Repositories, Events, Jobs, and Http directories. Set up composer.json PSR-4 autoloading for this structure, create the directory tree, and show me how to register the service providers for each domain module.

Write a complete Pest feature test suite for the checkout flow: add item to cart, apply coupon, calculate shipping, process payment (mock Stripe), create order record, send confirmation email (assert queued). Use RefreshDatabase, create realistic factories, test happy path and error cases (out of stock, invalid coupon, declined card). Use describe() blocks to group related tests.

Write Pest unit tests for this OrderService class: [paste class]. Mock all dependencies (OrderRepository, PaymentGateway, EmailService). Test each public method with happy path, edge cases, and exception handling. Use Pest's `beforeEach` for shared setup. Aim for 100% branch coverage on the core business logic methods.

I have these models: User, Company, Project, Task, Comment. Create Eloquent factories for all of them with realistic fake data. Include states: User::factory()->admin(), User::factory()->suspended(); Project::factory()->overdue(), Project::factory()->completed(). Use model relationships in factories (tasks should auto-create a project if none is provided).

Create a WordPress plugin scaffold for a custom post type called "Properties" (real estate listings). Include: plugin header, CPT registration with supports (title, editor, thumbnail, custom-fields), custom taxonomy "property-type", meta box for property details (price, bedrooms, bathrooms, sq_ft, address), custom REST API endpoint at /wp-json/properties/v1/listings with pagination, and a basic Gutenberg block to display a property card. Use OOP with a main plugin class.

I need to add custom functionality to WooCommerce: 1) Add a "Delivery Date" picker field on the product page that saves to order meta, 2) Show that date in the order admin view, 3) Include it in the order confirmation email, 4) Add it to the REST API order response. Use proper WooCommerce hooks (woocommerce_before_add_to_cart_button, woocommerce_checkout_fields, etc.) and avoid direct DB queries — use WC order meta functions.

Review this WordPress theme's functions.php: [paste file]. Identify: queries running on every page load that should be cached, missing transients, hooks firing on admin pages unnecessarily, scripts/styles loading everywhere instead of conditionally, and any direct $wpdb queries that could use WP_Query. Rewrite the worst offenders.

Modernize this PHP 5.6 class to PHP 8.3: [paste class]. Apply: constructor property promotion, readonly properties, enums instead of class constants, union types and nullables, named arguments where it improves clarity, match expressions over switch, fibers if appropriate, declare(strict_types=1). Preserve all existing behavior — do not change business logic. Show a diff-style view of changes.

This file is 800 lines of procedural PHP with global variables, mysql_* functions, and HTML mixed in: [paste file]. Refactor it to: separate the data layer (PDO), business logic (service class), and presentation (template). Identify what can be extracted into reusable functions or classes. Create a migration plan — I cannot rewrite it all at once, so show me the safest sequence of small refactors.

Scan this PHP file for SQL injection vulnerabilities: [paste file]. For each unsafe query, show the vulnerable line and a safe rewrite using PDO prepared statements or Laravel's query builder. Also check for: XSS vulnerabilities (unescaped output), CSRF issues, insecure file uploads, and md5/sha1 password hashing that should be replaced with password_hash().

Create Laravel Form Requests for this API endpoint that accepts order creation: [describe fields]. Include: required/optional field rules, custom validation rules for business logic (e.g., stock availability check, delivery date must be future), proper error messages in the messages() method, validation for nested arrays (order items), and a prepareForValidation() method to normalize input (strip spaces, lowercase email, etc.).

Review my Laravel app's authentication and authorization layer: [paste routes/web.php, Policies, and middleware]. Check for: routes missing auth middleware, policies with overly permissive `before()` methods, mass assignment vulnerabilities in models (missing $fillable or $guarded), sensitive data in API resources, and missing rate limiting on auth endpoints. Give me a prioritized fix list.

Set up proper CORS and API security for my Laravel API consumed by a React SPA on a different domain. Configure: CORS headers for the production and staging domains only, Sanctum SPA authentication, CSRF cookie setup, rate limiting per user (60 req/min) and per IP for unauthenticated routes (20 req/min), and API key auth for the mobile app as an alternative auth method. Show the config and middleware setup.