Laravel server-app and the exploit