Libraries tagged by php security

A PHP to create and verify XAdES signature

Go to Download

Injection-proof PHP/MySQL database layer with automatic XSS-safe output

Go to Download

Authlete Library for PHP

Go to Download

Pure PHP implementation of the Curve25519 Diffie-Hellman function

Go to Download

Portable PHP password hashing framework

Go to Download

Adds WSSE security to your HTTP SOAP Transport

Go to Download

PHPIDS (PHP-Intrusion Detection System) is a simple to use, well structured, fast and state-of-the-art security layer for your PHP based web application

Go to Download

Composer plugin to improve the security of composer-based Drupal projects by moving all PHP files out of docroot for Acquia Environments.

Go to Download

Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.

Go to Download

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download

A PHP security attack detection plugin with 31 stateless threat detectors and 4 cross-request identity checks (session hijack, unusual login, data tamper, brute-force lockout). Works with Laravel, Webman, ThinkPHP, Hyperf, Yii2, and Yii3, or with no framework at all via global functions.

Go to Download

Security tools for PHP

Go to Download

Content Security Policy helper for PHP

Go to Download

WordPress Security Advisories https://php.watch/articles/WordPress-Security-Advisories

Go to Download

PHP port of the Cap proof-of-work captcha server. Wire-compatible with @cap.js/widget.

Go to Download