PHP Tinker REPL

A safe, sandboxed PHP REPL inside the SSH module — perfect for poking at local Laravel/Symfony projects without launching a separate shell.

What it does

The Tinker tab gives you a Laravel-style REPL against any local PHP project that VORTΞXHQ's project scanner has discovered (it scans ~/Code, ~/Sites, ~/Projects, ~/Herd, ~/Dev, etc.).

Safety model

Local shell execution is restricted to a whitelist of safe commands (ls, find with argument validation).
Dangerous characters in arguments are blocked — no shell interpretation.
Protected directories (.ssh, /etc, .gnupg, .vortex) are blocked from reads.
Path traversal attempts (..) are rejected by isPathSafe().

Typical use

App\Models\User::count() — quick eloquent queries.
Cache::get('key') — peek at cached values.
config('mail') — confirm config values match expectations.

Note: Tinker runs locally. For remote projects, open an SSH tab and run php artisan tinker on the server.