Libraries tagged by insecure

This package declares conflicts to insecure TYPO3 extensions

Go to Download

Monitors TYPO3 instances and warns about insecure extensions, old TYPO3 versions, wrong PHP versions, etc. Requires a Nagios monitoring server.

Go to Download

Removes HTTPS scheme requirements from routes in your Symfony2 app (for dev/test environments).

Go to Download

A TYPO3 toolbox so handy, it makes even missing plugins feel insecure.

Go to Download

Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.

Go to Download

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download

A Laravel validation rule to determine whether a given password is pwned (insecure)

Go to Download

A psr-18 compliant middleware client that handles upgrade insecure request headers.

Go to Download

A PHP security linter to detect insecure functions like var_dump, print_r, and other dangerous functions in your codebase

Go to Download

WordPress mu-plugin that fixes common insecure and annoying defaults.

Go to Download

Generates a list of insecure extensions for EXT:nagios based on the extension list in the current TYPO3 instance.

Go to Download

An easy way for people on shared hosting without command line access to use laravel. It is likely insecure because of it

Go to Download

mysql-escape-string-polyfill is a very insecure `mysql_escape_string` implementation (PHP 7.1/7.2/8.0) for a very limited use case

Go to Download

Protect your users from entering dumb and common passwords

Go to Download

Generate insecure, but funny passwords

Go to Download