owasp/csrf-protector-php
OWASP CSRF Protector for PHP helps defend web apps against cross-site request forgery using token generation, validation, and configurable per-session or per-form protection. It integrates into existing PHP projects to secure state-changing requests.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| web-auth/webauthn-lib | 0.87 | PHP WebAuthn library for adding passkeys/FIDO2 authentication to apps and APIs. Implements registration and login flows, credential validation, and related WebAuthn data structures, suitable for Laravel or custom frameworks. | 124 | 131 | 25 | 8M | 0 | 1.4 | 55.3 | MIT | — | |
| metaclass-nl/authentication-guard-bundle | 0.86 | Symfony bundle for integrating guard-based authentication into your application. It helps wire custom authentication guards into Symfony Security so you can protect routes and control how users are authenticated, with straightforward configuration and reusable guard support. | 12 | 12 | 5 | 0 | 0 | 0.1 | — | — | 9 years ago | |
| enumag/csrf-route-bundle | 0.85 | enumag/csrf-route-bundle (GenedysCsrfRouteBundle) secures Symfony 3 routes against CSRF attacks without forms. Add a csrf_token option to any route; the bundle's router appends a token query parameter and a controller listener validates it on incoming requests. | 0 | 0 | 1 | 50 | 0 | 0.0 | 23.6 | MIT | — | |
| jeffersongoncalves/laravel-ssrf-guard | 0.85 | A Laravel package that helps protect your app from Server-Side Request Forgery (SSRF) by validating outbound URLs and blocking requests to private, loopback, and reserved network ranges. Useful for guarding HTTP clients and any user-supplied URLs. | 2 | 2 | 0 | 542 | 0 | 20.0 | 36.7 | MIT | 1 week ago | |
| mitnick/laravel-security | 0.85 | A Laravel security package that provides middleware and configuration to harden your application with security headers, CSP, HSTS, and other common protections. It helps enforce safer defaults across routes and responses with lightweight integration for Laravel projects. | 0 | 81 | — | 28 | — | 0.0 | 20.2 | — | — | |
| chrisbjr/api-guard | 0.85 | API Guard is a Laravel package for API key authentication. It lets you generate and manage API keys, protect routes with middleware, and authenticate requests via configurable headers or query parameters, with hashed key storage and easy integration. | 691 | 698 | 139 | 136 | 23 | 14.6 | 9.6 | MIT | 10 years ago | |
| binarcode/laravel-stateless-session | 0.85 | Laravel Stateless Session stores session data in encrypted client-side cookies instead of server-side storage, helping APIs and horizontally scaled apps stay stateless while keeping Laravel’s familiar session interface. | 32 | — | 2 | — | 0 | 0.5 | — | MIT | 6 years ago | |
| lolli42/finediff | 0.85 | Create HTML diffs between two strings with fine-grained character or word comparison. Outputs / markup, escapes HTML entities, supports multibyte strings, and exposes internal opcodes for diff processing. PHP 8.2+ in v1.1. | 13 | 13 | 3 | 489K | 0 | 3.3 | 55.6 | MIT | 1 year ago | |
| googlechromelabs/ise-web-security-bundle | 0.85 | A Symfony bundle from Google Chrome Labs that integrates ISE web security tooling into PHP applications. It helps developers configure browser security policies, apply security headers, and harden responses against common web threats with minimal setup and straightforward Symfony integration. | 10 | 10 | 2 | 0 | 4 | 0.6 | 0.5 | Apache-2.0 | 6 years ago | |
| php-standard-library/type | 0.85 | Runtime type validation for PHP built on the Parse, Don't Validate principle: coerce and assert unstructured input into well-typed data, with clear errors when values don't match. | 1 | 1 | 0 | 114K | 0 | 21.4 | 64.8 | MIT | 1 week ago | |
| phpbb/phpbb-sessions-auth-bundle | 0.85 | Symfony bundle that authenticates users against a phpBB forum, sharing phpBB sessions and login state. It bridges Symfony's security layer with phpBB's user and session tables, so people sign in once and are recognized by both your app and the board. | 21 | 22 | 15 | 0 | 0 | 0.3 | — | GPL-3.0 | — | |
| etcpasswd/oauth-bundle | 0.85 | A Symfony bundle that adds OAuth2 authentication to your security firewall, supporting providers like GitHub and Facebook, with multiple providers configurable at once. You still supply your own user provider. | 0 | 38 | — | 0 | — | 0.0 | — | — | — | |
| michaldudek/foundation | 0.85 | Foundation is a Laravel package that supplies reusable base classes and utilities for common application layers such as models, repositories, and services. It helps reduce boilerplate and keep project code structured, consistent, and easier to maintain. | 12 | 13 | 1 | 236 | 0 | 0.1 | 17.7 | NOASSERTION | — | |
| auth0/symfony | 0.85 | Symfony SDK for Auth0 authentication and Management APIs. Adds OAuth login, token validation, and user management to Symfony 6.4 LTS, 7, or 8 apps through a simple YAML config. Requires PHP 8.1+; install via Composer with auth0/symfony. | 126 | 127 | 76 | 27K | 4 | 28.7 | 38.8 | MIT | 3 months ago | |
| core23/antispam-bundle | 0.85 | A Symfony bundle for stopping form spam with honeypots, submission timers, banned scripts, markup and phrases, plus URL counting. Configure reusable anti-spam profiles and apply them to any form. Compatible with PHP 8.2+ and Symfony 6.4, 7.x and 8.x. | 0 | 52 | — | 0 | — | 0.0 | — | — | — | |
| genedys/csrf-route-bundle | 0.85 | A Laravel/PHP package for adding CSRF protection to routes, helping secure state-changing requests with token validation and straightforward route integration. Lightweight and simple to configure for safer forms and endpoints. | 1 | 1 | 2 | 0 | 1 | 0.7 | 0.4 | MIT | 8 years ago | |
| vizir/laravel-keycloak-web-guard | 0.85 | Laravel authentication guard that signs users in to your web app through Keycloak. It handles login, logout, token refresh, and role-based route protection, delegating identity to Keycloak via OpenID Connect with minimal configuration and no custom auth code to maintain. | 168 | — | 86 | — | 21 | 5.0 | 5.7 | — | — | |
| web-token/jwt-library | 0.85 | Read-only sub-repository of the JWT Framework: a PHP JSON Web Token library. For docs and contributions, see the main jwt-framework repo and the official documentation at https://web-token.spomky-labs.com/. MIT licensed. | 21 | 20 | 8 | 2M | 0 | 0.3 | 55.3 | MIT | — | |
| nidhognit/pass-security-bundle | 0.85 | A password security bundle for PHP applications that validates credentials against configurable strength rules and compromised-password checks. Drop it into registration and password-change flows to enforce safer passwords with reusable validators and simple configuration. | 11 | 11 | 1 | 0 | 0 | 0.1 | — | MIT | 8 years ago | |
| jorijn/laravel-security-checker | 0.85 | Laravel Security Checker scans your Composer dependencies for known vulnerabilities using the FriendsOfPHP security advisories database. Run it via an Artisan command or schedule it, and get notified through email, Slack, Telegram, or Discord when security issues affect your app. | 203 | 211 | 27 | 29K | 2 | 21.0 | 34.7 | MIT | 1 month ago |
How can I help you explore Laravel packages today?