Download the PHP package w34u/ssp without Composer
On this page you can find all versions of the php package w34u/ssp. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Package ssp
Short Description Secure login system for php frameworks, applications and sites
License MIT
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package ssp
Simple Site Protection
Secure login system for php frameworks, applications and sites
These set of php routines are designed to allow php developers to easily secure a site or an application.
Based on the ideas and information written about in [Innocent Code] (http:///www.amazon.co.uk/Innocent-Code-Security-Wake-up-Programmers/dp/0470857447/ref=sr_1_1?ie=UTF8&s=books&qid=1266594625&sr=1-1) by the security consultant [Sverre H. Huseby] (http://shh.thathost.com/) the code attempts to make the site resilient against most forms of attack.
Installation
composer require w34u/ssp
- Move vendor/w34u/ssp/cfg to version controlled part of your project, preferably outside the browser viewable part of your project.
- Rename vendor/w34u/ssp/cfg/Configuration.change.php to Configuration.php and assign values to all the properties to do the database connection and secure your site.
-
Add "autoload": { "psr-4": { "w34u\\ssp\\": "cfg/" } }, to composer.json so that the configurations load and then run 'composer dumpautoload' to refresh the loader.
- Move vendor/w34u/ssp/cfg/sspadmin to a browser viewable area and ensure sspadmin/includeheader.php requires the composer autoloader in vendor.
- Point your favourite browser at sspadmin/setup and follow the instructions to create the database and your first admin login.
[Originally hosted on source forge for old versions] (https://sourceforge.net/projects/ssprotection/)
System requirements
PHP >= 5.5 and up.
adodb/adodb-php >= 5.0
mbstring
mcrypt
Attacks hardened against are:
- Sql injection.
- Invalid character injection in forms.
- Javascript injection in forms.
- Sesson theft.
- Session takeover.
- One forms out put being used into another.
- Designed to be used with ssl thus helping to prevent man in the middle type attacks.
Facilities provided by this set of libraries and routines:
- Basic joinup routine.
- Password recovery.
- User admin.
- User self admin.
- Fully templated using fast simple template class.
- Powerful (and paranoid) form building class.
- Data checking class.
- Useful lister and html menu list generation classes
- Works with php 5.0 upwards
- Uses database abstraction to work with most databases, has been used with MySql, Access and MS Sql Server.
- Multi lingual capability with browser language checking.
Highly configurable session, login and debug:
- Http or Https.
- Variable number of actals for ip checking.
- Fully configurable on types of checks to be done.
- Login by email or username.
- Extend the login for other user inputs.
- Error output either to screen or log file for live sites.
All versions of ssp with dependencies
adodb/adodb-php Version ^5.0
ruckusing/ruckusing-migrations Version ^1.1
slim/slim Version ^4.14
php-di/php-di Version ^7.0
slim/psr7 Version ^1.7
ext-mbstring Version *