Level 50
I start receiving warnings for incoming requests (...) from specific IPs
Is your development server open to the public internet?
1 like
Jul 21, 2024
5
Level 1
Laravel php artisan serve on Microsoft Server stops unexpectedly
When running php artisan serve, my Laravel development server initially starts without issues. However, after a few minutes, I start receiving warnings such as "Invalid request (Malformed HTTP request)" and "Invalid request (Unsupported SSL request)" for incoming requests from specific IPs. Shortly after, the server crashes with errors pointing to undefined array keys in Laravel's ServeCommand.php.
The errors specifically mention Undefined array key 1 and Undefined array key 55230 at certain lines in ServeCommand.php, related to handling requests. Could someone explain what causes these warnings and errors? How can I address these issues to stabilize my development environment?
Thank you.
Level 1
@JussiMannisto Yes so when its stop all the user cant use the website
Level 50
@ior That's what I feared.
A development server should never be public. It should be used for development only. Normally you would run it locally on your machine. If you have to run it remotely for whatever reason, it should at least be protected against outsider access, e.g. with http basic authentication.
If you have APP_DEBUG enabled, outsiders may gain access to sensitive information from the error screen. Bots try to find these kinds of vulnerabilities all the time and it may have already happened to you.
Artisan serve is only meant for local development. It really doesn't work with multiple users because it can only process a single request at a time. It also doesn't support https, which is why you're getting the SSL errors. These requests may come from web crawlers or malicious bots.
In short: DON'T MAKE YOUR DEVELOPMENT SERVER PUBLIC.
1 like
Level 1
@JussiMannisto Can you help on what should i do?
Level 75
Please read here https://www.php.net/manual/en/features.commandline.webserver.php
It is in the warning box.
Please or to participate in this conversation.