Back-End Web Developer specializing in PHP & Laravel.
Computer & Communications Engineering student crafting robust, scalable RESTful APIs and complex system architectures.
class Developer extends User {
protected $stack = [
'PHP',
'Laravel',
'MySQL'
];
public function build() {
return "Scalable APIs";
}
}
// Seif is coding..._I am a passionate Computer & Communications Engineering Student at Mansoura University (Class of 2028), based in El Mansoura, Egypt.
My journey in tech is defined by a strong, practical focus on designing and building robust back-end web applications using PHP (OOP) and the Laravel framework.
I possess a deep understanding of RESTful APIs, MySQL, and Architecture patterns like MVC and Service Layers. I'm eager to leverage these technical skills in a challenging team environment, solving complex problems through clean, optimized code.
Graduation Year
Projects Built
Mansoura University
2023 - 2028 (Expected: 2028)
Computer & Communications Engineering Department.
Arabic
Native
English
Fluent
My professional journey and the key systems I've engineered at enterprise level.
ABM Company
Building and maintaining Laravel-based backend systems for multi-tenant SaaS products, payments, and reusable platform integrations with a strong focus on API design, tenant isolation, and production reliability.
Own this Laravel reseller admin panel end-to-end — users, orders, billing, CMS, and Spatie roles & permissions — built across ~40 PRs with a full dashboard rebuild and real production fixes.
Built and now own this Laravel reseller admin panel end-to-end — user/order/package system, billing, a CMS/page-builder, and a Spatie-based roles & permissions system — across ~40 PRs.
Rebuilt the dashboard and admin UI through several iterations (v2–v4): a new collapsible dashboard shell, redesigned Orders/Sites/Transactions views with dark-mode support, a CMS-driven public landing page, and an async site-provisioning job moved from a blocking synchronous call to a queued job.
Closed real production issues along the way: an N+1 query in the dashboard controller, a payment race condition allowing duplicate pending orders per site, and a logic bug that showed cancelled/pending orders as active packages.
Multi-tenant Laravel SaaS storefront I designed and maintain — tenant isolation, payment engine, subscriptions, and theming — including an RCE-adjacent vulnerability I found and fixed.
Own and maintain a multi-tenant Laravel SaaS platform sold to resellers as a ready-made CAPTCHA-solving storefront (own domain, branding, checkout, and support built in). Designed tenant isolation from day one — scoped Eloquent models via a TenantScoped trait, domain-based tenant resolution middleware, and per-tenant webhook signing.
Rebuilt the payment engine (3 phases, ending in a wallet security hardening pass), the order/subscription lifecycle, OCR entitlement sync with the CaptchaAI service, 2FA across all three roles (customer/reseller/superadmin), and a theming engine unifying 6 storefront templates under one resolver.
Found and fixed an RCE-adjacent vulnerability where reseller-authored page content was interpreted as unsandboxed Blade (@php, @include, env(), raw PHP tags) by building a custom sandboxing guard. Also closed a wallet race condition where a payment provider session could open before the local order record existed, and hardened wallet operations with server-authoritative pricing and integer-cent money handling to eliminate float rounding errors and price/currency tampering.
Built a disputes management system and a real-time chat system from scratch, migrated permissions to Spatie, and added 2FA and an external Platform API.
Built a disputes management system from scratch — a full state machine covering a dispute's lifecycle from open to close, secure private evidence storage, 7 email templates per dispute stage, and PayPal-specific dispute handling.
Built a real-time chat system from scratch on Laravel Reverb (WebSocket broadcasting) with private channels, delivered/seen tracking, and attachment support.
Migrated the permissions system to Spatie Permission with zero data loss, added optional 2FA across the admin and merchant panels (fully decoupled from app-level verification), and built an external Platform API for third-party merchants with platform-wide scoped tokens.
A Laravel multi-tenant blogging platform I built end-to-end, from tenant routing to reseller integration.
Built a Laravel multi-tenant blogging platform end-to-end: tenant-aware routing, content management APIs, HMAC-secured provisioning, admin autologin, sitemap support, and reseller integration.
Migrating legacy PHP modules to Laravel and integrating with Blogs Center.
Migrating legacy PHP modules to Laravel and integrating the platform with Blogs Center, improving backend structure, maintainability, and Laravel-based business workflows.
Found and closed an RCE-adjacent template-injection vulnerability (arbitrary Blade/PHP execution via user-authored content) by building a sandboxing guard.
Closed a payment race condition that could let a wallet top-up be tampered with mid-flow.
Hardened wallet operations against price/currency tampering with server-authoritative pricing.
The core technologies, architectures, and tools I use to bring complex backend systems to life.
A selection of my best personal back-end systems and applications.
Open for freelance projects, collaborations, and job opportunities.