Securing PHP (@SecuringPHP) profile picture

Securing PHP

@SecuringPHP

Keeping your code safe, one line at a time. We provide articles, ebooks and training tools to teach PHP developers about secure code brought to you by @enygma

securingphp.com
Joined January 2014
  • Tweets1.4K
  • Following0
  • Followers2.5K
Off Cycle Drupal Core Security Release - drupal.org/psa-2021-05-25

Off Cycle Drupal Core Security Release - PSA-2021-05-25

drupal.org
1
63
3
54
Securing PHP retweeted
Rey Bango (@reybango) profile picture
Rey Bango
@reybango3 May 2021
If you're a PHP developer using Composer, please be sure to read this new advisory on a potential supply chain attack. These types of attacks are only going to get worse and as developers we need to begin to make security a normal part of our workflow. portswigger.net/daily-swig/p…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
4
30
1
46
Holy supply chain compromise Batman! Malicious commits made to the PHP source repo. news-web.php.net/php.interna…
Image from Jake Williams (@MalwareJake)
7
54
6
144
A new GitHub Action has been added to the marketplace! Check out 'aozora0000/local-php-security-checker' from aozora0000. github.com/marketplace/actio…
aozora0000/local-php-security-checker - GitHub Marketplace

aozora0000/local-php-security-checker - GitHub Marketplace

check composer.lock file for security vulnerabilities

github.com
2
Securing PHP retweeted
ITNEXT (@ITNEXT_io) profile picture
ITNEXT@ITNEXT_io3 Dec 2020
How to implement password recovery securely in PHP by Nicolas Far at #ITNEXT. #Php #Security #PasswordSecurity itnext.io/how-to-implement-p…
2
5
Drupal core - Critical - Remote code execution - SA-CORE-2020-012 ow.ly/fugr50Cofms

Drupal core - Critical - Remote code execution - SA-CORE-2020-012

drupal.org
3
72
11
94
This is an amazing article on what your API_KEY does inside your #laravel app and a lot more thing. A must read: tighten.co/blog/app-key-and-… #php #security

Tighten | Software Development for Web and Mobile | Laravel, Livewire, Vue.js, and React

Tighten is a software development firm specializing in Laravel, Livewire, Vue.js, and React.

tighten.com
8
9
Securing PHP retweeted
Lobsters (@lobsters) profile picture
Lobsters@lobsters19 Oct 2020
Secret fragments: Remote code execution on Symfony based websites lobste.rs/s/1ivux7 #php #security ambionics.io/blog/symfony-se…
6
10
Securing PHP retweeted
Cal Evans (@CalEvans) profile picture
Cal Evans
@CalEvans3 Aug 2020
Join me on Wed, Aug 5th at Noon EDT as Gabriel Caruso, Sara Golemon, and I present a live episode of @elephpant, "Eighters Gonna Eight". We'll talk about all the goodness coming in PHP8! Register today! ringcentr.al/33miHpS Thank you to our sponsor @RingCentralDevs!
1
23
2
19
Securing PHP retweeted
Chris Cornutt (@enygma) profile picture
Chris Cornutt@enygma23 Jun 2020
From the Psalm blog (a PHP static analysis tool from @Vimeo): “Detect PHP security vulnerabilities with Psalm” psalm.dev/articles/detect-se…

Detect PHP security vulnerabilities with Psalm

Security vulnerabilities are often pretty hard to spot manually. While a null-pointer error can make itself known very quickly, you can execute code…

psalm.dev
1
4
1
12
Securing PHP retweeted
Chris Cornutt (@enygma) profile picture
Chris Cornutt@enygma23 Jun 2020
“Perforce Unveils New PHP Security Center by Zend“ realwire.com/releases/Perfor…
4
7
Securing PHP retweeted
Paul Turner (@P_Turner7) profile picture
Paul Turner@P_Turner712 May 2020
"Two #WordPress Plugin Bugs Expose Over One Million Sites." 👾If an attacker is able to trick an admin into clicking on a phishing link, they could gain full remote control of the site.⚠️ Read the below article to know more.👇👇👇 buff.ly/2yHexw6 #infosec #CyberSec
Image from Paul Turner (@P_Turner7)
2
2
Securing PHP retweeted
Ryan Carson (@ryancarson) profile picture
Ryan Carson
@ryancarson25 Mar 2020
Love the @treehouse Beginning Security track! Learn how to keep you, your users, and your data safe. Complete this track for FREE: 🔐 teamtreehouse.com/tracks/beg… #learntocode #dataprivacy #security #100DaysOfCode
Start Your Tech Career with Beginner Security Skills

Start Your Tech Career with Beginner Security Skills

Master cybersecurity with Treehouse. Gain essential skills in security literacy, vulnerabilities, and data protection to secure a tech job.

teamtreehouse.com
1
11
15
Securing PHP retweeted
Laravel (@laravel) profile picture
Laravel
@laravel13 Mar 2020
🚨Security: Laravel 7.1.2 has been released to address a possible XSS attack vector in Laravel 7.x Blade components: blog.laravel.com/security-la…
Security: Laravel 7.1.2 Released | Laravel - The clean stack for Artisans and agents

Security: Laravel 7.1.2 Released | Laravel - The clean stack for Artisans and agents

Today we released Laravel 7.1.2 to address a possible XSS related attack vector in the Laravel 7.x Blade Component tag attributes when users are allowed to dict...

laravel.com
4
80
4
190
Meta tags quick - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-057 dlvr.it/R8bcJh

Meta tags quick - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-057

drupal.org
8
3
ImageCache Actions - Critical - Multiple Vulnerabilities - SA-CONTRIB-2019-056 dlvr.it/R8bcGf

ImageCache Actions - Critical - Multiple Vulnerabilities - SA-CONTRIB-2019-056

drupal.org
7
3
Menu Item Extras - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2019-050 dlvr.it/R5Cx53

Menu Item Extras - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2019-050

drupal.org
11
7
Workflow - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-049 dlvr.it/R5Cx3v
13
5
Laravel Daily: “Laravel Auth: After-Registration Redirect to Previous (Intended) Page” laraveldaily.com/auth-after-…
Laravel Auth: After-Registration Redirect to Previous (Intended) Page

Laravel Auth: After-Registration Redirect to Previous (Intended) Page

laraveldaily.com
3
2
Symfony Blog: “New in Symfony 4.3: Native password encoder” symfony.com/blog/new-in-symf…
New in Symfony 4.3: Native password encoder (Symfony Blog)

New in Symfony 4.3: Native password encoder (Symfony Blog)

Symfony 4.3 introduces a new native password encoder to auto-select the best possible hashing algorithm available to hash user passwords.

symfony.com
9
6
Load more