Libraries tagged by method security

Allows you to easily create a sandboxed Twig environment where you can control what tags, filters, functions, and object methods/properties are allowed

Go to Download

XSS-safe strings for PHP templates: values HTML-encode themselves on echo, interpolation, and concatenation, at least 2.5x faster than calling htmlspecialchars() yourself

Go to Download

AIO Security Class offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.

Go to Download

Aurelia pseudo hashing method is my experimental function to hash password with HMAC (Hash-based message authentication code), PBKDF2 (Password-Based Key Derivation Function 2) and Pseudo Random Bytes.

Go to Download

Modular Authentication system supprting a number of authentication methods

Go to Download

Localzet WebAuthn is a high-performance PHP library designed for working with WebAuthn, a web authentication standard developed by W3C. The library provides secure and reliable user authentication using modern cryptographic methods. It supports PSR-4 autoloading and requires PHP version 8.2 or higher, as well as the openssl and mbstring extensions.

Go to Download

Duo Security Universal Prompt two-factor authentication for Roundcube. Supports multiple authentication methods including push notifications, SMS, phone calls, and hardware tokens.

Go to Download

Laravel static analysis tool - Verify API routes call required methods (authorization, logging, etc.)

Go to Download

PHPStan rule for Livewire components: public properties that are never reassigned outside lifecycle methods must be marked #[Locked], so the client cannot tamper with them via $wire.set.

Go to Download

Adds common security to you system.

Go to Download

PHP Security - A modern and secure PHP library that provides a set of methods to encrypt data, decrypt data, generate secure random passwords, sanitize data, and much more. It is built with PHP's built-in cryptography functions and is designed to be easy to use and highly secure.

Go to Download

Form securing methods

Go to Download

Allows you to generate 4096 Bit RSA private/public key-pairs, which can be used as authentication method and to encrypt / decrypt strings.

Go to Download

This plugin disables password login for all users, allowing only authentication via other methods (e.g. SSO).

Go to Download

Nemesis Shield — Sentinel SDK for PHP & Laravel. Positive-security runtime protection: learns your app's normal behavior and blocks off-baseline requests (auth bypass, path traversal, scanners, unusual methods). Fail-open, privacy-preserving. Works on Laravel 6+ / PHP 7.2+.

Go to Download