Download the PHP package rezzza/security-bundle without Composer
On this page you can find all versions of the php package rezzza/security-bundle. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download rezzza/security-bundle
More information about rezzza/security-bundle
Files in rezzza/security-bundle
Package security-bundle
Short Description Signed requests check
License MIT
Homepage https://github.com/rezzza/SecurityBundle
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package security-bundle
SecurityBundle
Installation
With Composer
Enable Bundle
In AppKernel:
On symfony 2.0
Add factory to your security.yml
Request signature checker
Validate a signature sent by client in query string, this signature can have a lifetime.
Criterias are:
- Time send on signature (if replay_protection activated)
- RequestMethod
- http host
- path info
- content - RAW_DATA (posted fields)
It'll hash all theses criterias with a secret defined on security.yml, example:
Build the signature:
You can define distant firewall on a config:
And then:
Do you use PSR7 request ?
Obfuscate request
If you have critical data coming on your application, you may not want to expose them into symfony profiler. You can easily define which data will not appear on this one on each routes.
In your route:
Will obfuscate all datas on symfony profiler.
Keys to obfuscate are:
- format
- content
- content_type
- status_text
- status_code
- request_query ($_GET)
- request_request ($_POST)
- request_headers ($_HEADER)
- request_server ($_SERVER)
- request_cookies ($_COOKIES)
- request_attributes ($request->attributes)
- response_headers
- session_metadata
- session_attributes
- flashes
- path_info
- controller
- locale
WishList
- QueryString or HTTP Headers
- Unit Tests with atoum
All versions of security-bundle with dependencies
symfony/framework-bundle Version ~2.6|~3.0
symfony/security-bundle Version ~2.6|~3.0
doctrine/common Version ~2.2