

(Please refer to for code-style guides)Ĭheck out the wiki for more info on how to use this.

Security is an issue that demands attention, given the growing frequency of attacks on web sites. If you think I should add a file regarding a certain topic about security, let me know or add some code of your own. However, as more web sites are developed in PHP, they become targets for malicious attackers, and developers need to prepare for the attacks. This repository is currently under construction, and doesn't cover everything, but here is a list of things that have been implemented so far: This repository is not foolproof, and is created and maintained during my free time, feel free to contribute at any given moment or buy me a coffee <3Īs I learn about certain vulnerabilities in applications, I try to write classes that fix these vulnerability in a way that is easy to understand and use for developers (even for those who don't know much about application security). It's bad enough working with bad code, but working with vulnerable code just makes some people (especially myself) cringe. The reasoning for this, is that I see many many websites that have great potential, but they lack the responsibility that many web developers bare: Making their applications secure.

By examining specific attacks and the techniques used to protect against them, you will have a deeper understanding and appreciation of the safeguards you are about to learn in this book. The initial idea of this repository is to simply add some classes that makes life as a programmer a bit easier. Essential PHP Security explains the most common types of attacks and how to write code that isn't susceptible to them. This includes web designers who want to use PHP to build commercial websites.
