Some good resources for getting started with application security

Audit your PHP version for known CVEs and patches

An implementation of the FIDO U2F server protocol in PHP

Damn Vulnerable PHP Application (DVPA) - It is Lab Written in The PHP lang, Which Contains PHP Type Juggling - RCE Challenges

Sessions handler which stores session data in HMAC-signed and encrypted cookies

🔐 basics on making php applications secure

Lightweight, fast, and secure TOTP (2FA) authentication library for PHP — battle tested, dependency free, and ready for enterprise integration.

Secure Coding Practices for PHP – A white paper and code snippets on best practices for securing PHP applications, covering input validation, authentication, encryption, and more. 🔒🚀

Common security threats and standard best practice for php application development

🐘 PHP技巧

This project is a personal learning, so you will find errors or disorganization

Automatic protection from Cross-Site Request Forgery.

A fast and secure by default content management system.

🔍Find potential vulnerable/exploitable PHP functions in PHP projects automatically!

A simple Firewall Class built in PHP

SecurePassword is a PHP component for creating strong passwords using modern encryption.

Obfuscate and protect your PHP source code with a multi-layered encoding tool — secure your scripts from being edited, copied, or reverse engineered.

Profile Hanger | Authenticated Profile Upload Testing Tool for Ethical Cybersecurity Learning

PHPInfo Insecure Configurations Checker.

JSON Web Tokens for PHP