Are you secure?
The only constant in the world of web application development is change. With this change comes a whole host of new security concerns and problems. The PHP ecosystem is no different.
Securing PHP wants to help take the guesswork out of protecting your PHP applications and put you on the right path towards a more secure future. It will give you the terms, the technology and the best practices to help keep your apps (and users) protected. Security doesn't have to be hard, but it can be overwhelming.
Our eBooks
Mailing List Archives
If you're not a subscriber to our mailing list, you can always find the past issues here:
Recommended Libraries
Below is a listing of recommended libraries for use in a security context in PHP. All can be installed via Composer.
Access Control/Authentication
- beatswitch/lock
- cartalyst/sentrybranched into a commerical product, but still available
- psecio/gatekeeper
Two-factor Authentication
Secure Environment
Password Management
Miscellaneous
- psecio/jwtJSON Web Tokens
- psecio/parsePHP static security scanner
- Roave/SecurityAdvisoriesprevent installation of Composer libs with known issues
- indigophp/hash-compatbackport of hash_equals/hash_pbkdf2 to older PHP versions
Have a library you think should be included in the list? Drop us a line and we'll take a look!