PHP Security Project
summary
Project claims a working collection of 12–13 libraries plus a framework built from Google Summer of Code work and ~10–12 contributors, with code on github and a sample app. It shows concrete tools: password hashing and brute‑force detection, temporary passwords, a crypto wrapper that encrypts config strings, a database layer that enforces parameterized queries, a static scanner that flags unsafe echo/printf, tainted‑string markers, logging and database-backed sessions with rolling, and a resumable download manager.
AI-written summary · about
chapters (26)
- 0:00Introduction
- 2:46AppSec USA
- 6:17Who is this for
- 7:02Disclaimer
- 8:24Other Libraries
- 10:09Project Introduction
- 12:12Framework Overview
- 14:28Why use PHPsec
- 15:32Encryption
- 16:38Logs
- 16:54Password Library
- 17:34Importance of Password
- 20:44Password is not guessable
- 22:11Password entropy
- 23:50Password functions
- 24:45Password guessing
- 25:33Advanced Password Library
- 28:36User Library
- 30:55Crypto Library
- 33:34Example
- 38:40SQL Injection
- 41:09Parameterized Query
- 43:54Download Manager
- 48:52HTTP Library
- 53:31Tainted Library
- 58:41Log Library
related talks
43mPHP Security, Redefined
02h 14mWeb application security (Part 1)
52mPractical Security in Web Applications
55mCodified Security
01h 02mCode Review For Security
59mDon't Get Burned! Secure Coding Essentials to Protect Your Application
01h 01mSecurity: From basic principles to PHP specifics
30mThink Like a Hacker