Tags: security

SQL Injection Prevention in PHP: A Deep Dive

Learn how SQL injection attacks work and how prepared statements in PHP eliminate the vulnerability at its root.

XSS Prevention in PHP: A Deep Dive

Understand how XSS attacks work in PHP applications and how to prevent them through correct, context-aware output escaping.

Two-Factor Authentication in PHP: Adding a Second Layer of Login Security

A practical guide to adding TOTP-based two-factor authentication to PHP applications, with setup, verification, and recovery codes.

CSRF Protection in PHP: A Deep Dive

A deep dive into CSRF protection in PHP: how the attack works, the synchronizer token pattern, SameSite cookies, and why API endpoints need a different approach.

Security headers for PHP applications guide

Security Headers for PHP Applications: Hardening Your Responses

A practical guide to security headers for PHP applications: Content-Security-Policy, X-Frame-Options, HSTS, X-Content-Type-Options, and applying them via middleware.

Rate Limiting APIs in PHP: Protecting Your Application

A practical guide to rate limiting PHP APIs: token bucket implementation, choosing the right rate-limit key, proper status codes and headers, and per-endpoint limits.