Download the PHP package sam-it/yii2-urlsigner without Composer

On this page you can find all versions of the php package sam-it/yii2-urlsigner. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of sam-it/yii2-urlsigner

Informations about the package yii2-urlsigner

Scrutinizer Code Quality Code Coverage Build Status

yii2-urlsigner Secure URL signing and validation.

The goal of this component is to enable stateless but secure URL validation. This can be useful, for example, when doing email validation or password reset.

The idea is simple, consider I want to change my email, the system could send me a link like this:

Of course, this is very insecure, and no one actually (hopefully) does it like this. One solution is to generate a random token:

This is secure, but requires keeping state on the server. This package solves the problem by signing the URL.

This allows us to verify that the URL was actually created by us therefore can be trusted.

Upgrade to v4

The Yii2 component and the actual signer have been split into two separate classes. In my opinion, you should use the UrlSigner class directly, configuring it using a closure in your DI config. If you need to use the component with array configuration, you may use the UrlSignerComponent class.

Deprecated function signParams has been removed, use sign instead. UrlSigner::calculateHMAC() has been deprecated.

Upgrade to v5

In v5 for better static analysis we have removed configuration options. The names for query parameters are now fixed. If you previously customized them you cannot switch to v5 without breaking existing code.

Example

Do not share secrets across hosts

If you use this component in a multi-host application you must make sure each host uses a different secret. The URL signing takes into account the absolute route and all given parameters, anything else is excluded from the signature and from validation. This means that if you have a structure like this:

And they use the same route, for example /user/do-reset, for password resets, a normal user will be able to change the domain without invalidating the signature.

All versions of yii2-urlsigner with dependencies

PHP Build Version
Package Version
Requires php Version >= 8.4
yiisoft/yii2 Version ^2
psr/clock Version ^1.0
psr/clock-implementation Version *
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package sam-it/yii2-urlsigner contains the following files

Loading the files please wait ...