Libraries tagged by php security

Framework-agnostic PHP database library with unified API for MySQL, MariaDB, PostgreSQL, SQLite, MSSQL, and Oracle. Query Builder, caching, sharding, window functions, CTEs, JSON, migrations, ActiveRecord, CLI tools, AI-powered analysis. Zero external dependencies.

Go to Download

An advanced, compact and lightweight MySQL database wrapper library, built around PHP's MySQLi extension.

Go to Download

An HTML/XHTML filter written in PHP. Checks on attribute values. Can be used to avoid Cross-Site Scripting (XSS), Buffer Overflows and Denial of Service attacks, among other things.

Go to Download

Passkeys (WebAuthn) library for PHP with zero dependencies

Go to Download

Shared foundation for building static analysis tools - includes abstract analyzer classes, result formatters, file parsers, and utilities

Go to Download

Upload single or multiple files with validations. (allowed file extensions, matched mime type, max file size, security scan, reserved file name, safe for web file name).

Go to Download

Simple PHP Request Validator

Go to Download

Modern PHP Sanitization Library

Go to Download

HTTP/HTML transport layer for Milpa Live: CSRF/HMAC/nonce security, the signed XHTML state-transfer codec, the wire-protocol LiveEndpoint controller, and the HTML/Alpine/Latte-subset renderers for the Milpa PHP framework.

Go to Download

Runtime-native identity vocabulary for the Milpa PHP framework: the typed Actor / AuthContext / AuthState / Credential primitives, the CredentialVerifier, AuthContextFactory and SessionStore contracts, and the WebAuthn ceremony types (RelyingParty, WebAuthnVerifier, assertion/registration value objects) — the trusted producer of the context policies need. Zero framework, zero ORM, fail-closed by construction.

Go to Download

A laravel package that protect users from entering non-existing/spam email addresses.

Go to Download

PHPStan extension for better support of SensitiveParameter and SensitiveParameterValue attributes.

Go to Download

Clone of zfr/rbac v1.2.0 for PHP 8 support

Go to Download

XSS-safe strings for PHP templates: values HTML-encode themselves on echo, interpolation, and concatenation, at least 3x faster than calling htmlspecialchars() yourself

Go to Download

XSS-safe collections for PHP templates: database rows with fields that HTML-encode themselves, plus chainable filtering, sorting, and grouping

Go to Download