Libraries tagged by php security

MongoDB-backed structured application logging for Laravel.

Go to Download

PHP Client for haveibeenpwned.com APIs

Go to Download

VirusTotal Public API v2.0 PHP Wrapper

Go to Download

Signed access tokens and opaque refresh tokens with SQL token store and token authentication (subject + tenant), session handling, password hashing, and role-based access control for PHP DDD applications — framework-free, no JWT, no third-party runtime dependencies beyond PHP built-ins and the Jardis contracts and dbquery packages

Go to Download

Allowlist check for uploaded SVG files: rejects any that could run script, load an outside resource, or hang a renderer, even when opened outside an tag, and never rewrites a file it accepts

Go to Download

XSS-safe strings for PHP templates: values HTML-encode themselves on echo, interpolation, and concatenation, at least 3x faster than calling htmlspecialchars() yourself

Go to Download

XSS-safe collections for PHP templates: database rows with fields that HTML-encode themselves, plus chainable filtering, sorting, and grouping

Go to Download

Allowlist check for HTML that has to be printed unencoded, such as rich text from a WYSIWYG editor: rejects content that could run script, send the page's data to another host, or mislead the visitor, and never rewrites what it accepts

Go to Download

Dependency free, simple access control lists for PHP.

Go to Download

Bot and AI-crawler control presets for the Phirewall PHP firewall - block AI scrapers and rate-limit aggressive SEO crawlers

Go to Download

Threat-intelligence IP blocklist preset for the Phirewall PHP firewall - bundles a public-domain bad-IP feed snapshot

Go to Download

HOTP / TOTP secrets with corresponding QR links and code verification from a simple PHP script.

Go to Download

Interprocedural taint analysis for WordPress PHP. Finds real XSS, SQL injection and authorization bugs.

Go to Download

AuthorityController is an PHP authorization library for Laravel 5 which restricts what resources a given user is allowed to access.

Go to Download

Dependency-free PHP attributes for the OpenAPI details Docuccino cannot infer: summaries, parameters, responses and security.

Go to Download