Some good resources for getting started with application security

Audit your PHP version for known CVEs and patches

An implementation of the FIDO U2F server protocol in PHP

Damn Vulnerable PHP Application (DVPA) - It is Lab Written in The PHP lang, Which Contains PHP Type Juggling - RCE Challenges

Sessions handler which stores session data in HMAC-signed and encrypted cookies

🔐 basics on making php applications secure

Lightweight, fast, and secure TOTP (2FA) authentication library for PHP — battle tested, dependency free, and ready for enterprise integration.

Secure Coding Practices for PHP – A white paper and code snippets on best practices for securing PHP applications, covering input validation, authentication, encryption, and more. 🔒🚀

Common security threats and standard best practice for php application development

:elephant: PHP技巧

This project is a personal learning, so you will find errors or disorganization

Automatic protection from Cross-Site Request Forgery.

🔍Find potential vulnerable/exploitable PHP functions in PHP projects automatically!

A simple Firewall Class built in PHP

SecurePassword is a PHP component for creating strong passwords using modern encryption.

Obfuscate and protect your PHP source code with a multi-layered encoding tool — secure your scripts from being edited, copied, or reverse engineered.

Profile Hanger | Authenticated Profile Upload Testing Tool for Ethical Cybersecurity Learning

JSON Web Tokens for PHP

PHPInfo Insecure Configurations Checker.

Educational RCE (Remote Command Execution) demo using User-Agent injection.

Encapsulated and type-safe user input.

A powerful framework designed to deliver!

api rate limiter for php,whcih works on csv file as DB and tracks request based on IP count and matches with the given rate limit set by user

For PHP Security

REDACTS | REDCap Arbitary Code Threat Scan — baseline-driven differential analysis to detect tampering, backdoors, and the INFINITERED malware campaign. NOT a replacement for manual review.

:rocket: 4People - Ferramentas Online e Blog para Pessoas. :star: (Trabalho de Conclusão de Curso, Escola Técnica) :heart:

An ongoing collection of php tools and frameworks, software, libraries, learning tutorials, frameworks, academic and practical resources.

Fail-closed configuration + hardening layer for BlackCat: secure file-based runtime config (no env bypass), profiles/templates, and platform-aware permission checks used by TrustKernel/Web3 integrity.

A fast and secure by default content management system.

Optimize your php to ensure that all the functions and classes are defined for complete compatibility. Enable helper functions and classes to speed up the development of your web application.