Share ten of the best PHP security development libraries with detailed introduction in Chinese

Share ten of the best PHP security development libraries with detailed introduction in Chinese_PHP Tutorial

WBOY

Release： 2016-07-13 10:00:38

Original

702 people have browsed it

Share the ten best PHP security development libraries with detailed introduction in Chinese

　1. PHP intrusion detection system

PHP IDS (ie PHP-Intrusion Detection System) is an advanced security layer that is easy to use, well-structured, excellent in speed and specifically for PHP-like web applications. This intrusion detection system does not provide any mitigation and anti-virus mechanisms, nor does it filter malicious input content. Its function is simply to identify malicious activities carried out by attackers against the site and provide timely reminders in the way that everyone needs. With a set of proven and very strict filtering rules, the detection system will give an impact rating value to any attack activity, helping users to more easily understand how to respond to current hacker attacks. Response methods vary, including simply sending log records to the development team via an emergency email, displaying a warning message about the attacker, or even immediately terminating the user's current session.

　2. PHP Password Lib

PHP-PasswordLib aims to build an all-inclusive password library that includes solutions to all encryption needs. It's easy to install and easy to use, scalable, and powerful enough to satisfy the discerning eye of even the most seasoned developer.

　3. PHPSecLib

The design goal of phpseclib is to achieve extremely strong compatibility. It runs on PHP4 (requires PHP4 if using PHP_Compat) and does not require any other extensions. For users who value speed performance, you can also use mcrypt, gmp and bcmath (in order), but the three are not required.

　4.TCrypto

TCrypto is a simple and extremely flexible PHP 5.3 in-memory key-value store. By default, it uses cookies as the storage backend. TCrypto was built with security in mind. It has a complete range of security algorithms and modes, has both automatic and secure initialization vector generation capabilities, encryption and authentication key creation (Keytoll) with strong random characteristics, and is assisted by key conversion (i.e. versioned keys). TCrypto can be used as a set of extensible "session handlers". Especially when using cookies as the storage backend, its scalability will be more prominent. In this respect, TCrypto is quite similar to Ruby on Rails sessions.

　5. HTML Purifier

HTML Purifier is a set of standardized HTML filtering libraries written in PHP language. HTML Purifier not only removes all malicious code (commonly known as XSS) through a fully audited whitelist of security permissions, but also ensures that user files comply with standards requirements - with its help, meeting W3C specifications will no longer be a problem .

　6. URLcrypt

URLcrypt can easily and securely transfer short binary data fragments to URLs. It allows us to securely store user IDs, download expiration dates, and other common information. URLcrypt uses a 256-bit AES symmetric encryption mechanism to achieve data security encryption. Its encoding and decoding library contains 32 characters and can be directly applied to URLs.

　7. Hybrid Auth

Hybrid Auth is an open source PHP library used to authenticate a variety of social services and ID providers. The service types it supports include OpenID, Facebook, LinkedIn, Google, Twitter, Windows Live, Foursquare, Vimeo, Yahoo, PayPal, etc. Users can easily integrate it with their existing website by inserting a single file or a few lines of code into the login/login page.

　8. Security Check – Sensiolabs

This tool is of great practical significance for both novices and experienced PHP programmers. Its operating principle is very simple. Users only need to upload their own .lock file, and all other work can be done by Sensiolabs. If you look carefully at the statistics, you will realize how huge the number of vulnerabilities discovered are. We are likely to unknowingly let our projects output a lot of malicious content, and the emergence of Sensiolabs is enough to help us prevent problems in a more proactive way.

　9. PHP Login Project

PHP Login Project is a set of scripts designed to add verification mechanisms to our PHP projects. There are a large number of tutorials on the Internet that can guide you to install it on servers with different configuration types, as well as provide minimized and single-file versions of the script.

　10. SecurityMultiTool

This set of MultiTool libraries can recommend suitable security-related libraries, standardized security defense implementations, and common task security execution implementation solutions. The goal of creating this library is to provide both a practical tool and a reference material for achieving goals. Regardless of whether your application is based on a Web application framework, we should include SecurityMultiTool - after all, Web application architecture alone is far from being able to achieve security.