Securing PHP

Keeping your code safe, one line at a time. We provide articles, ebooks and training tools to teach PHP developers about secure code brought to you by @enygma

[Drupal Security @drupalsecurity]

Off Cycle Drupal Core Security Release - https://t.co/pYIuCMakbQ

[Rey Bango 🇺🇦🌻 @reybango]

If you're a PHP developer using Composer, please be sure to read this new advisory on a potential supply chain attack.

These types of attacks are only going to get worse and as developers we need to begin to make security a normal part of our workflow.

https://t.co/GcI8yBpK1X

[Jake Williams @MalwareJake]

Holy supply chain compromise Batman! Malicious commits made to the PHP source repo.
https://t.co/TRmujPJIQF

[GitHubActionsNews @GitHubActions]

A new GitHub Action has been added to the marketplace!

Check out 'aozora0000/local-php-security-checker' from aozora0000. https://t.co/9PAkczJVhn

[ITNEXT @ITNEXT_io]

How to implement password recovery securely in PHP by Nicolas Far at #ITNEXT. #Php #Security #PasswordSecurity https://t.co/3CFqfwdHN7

[Drupal Security @drupalsecurity]

Drupal core - Critical - Remote code execution - SA-CORE-2020-012
https://t.co/pdJ0yFDeKm

[Amitav Roy | Software developer | Laravel @amitavroy7]

This is an amazing article on what your API_KEY does inside your #laravel app and a lot more thing. A must read: https://t.co/tf69RCQENu

#php #security

[Lobsters @lobsters]

Secret fragments: Remote code execution on Symfony based websites
https://t.co/odBm7It7WE #php #security
https://t.co/yUt0F70gdk

[Cal Evans @CalEvans]

Join me on Wed, Aug 5th at Noon EDT as Gabriel Caruso, Sara Golemon, and I present a live episode of @elephpant, "Eighters Gonna Eight".

We'll talk about all the goodness coming in PHP8!

Register today!

https://t.co/nl1ZhthW15

Thank you to our sponsor @RingCentralDevs!

[Chris Cornutt @enygma]

From the Psalm blog (a PHP static analysis tool from @Vimeo): “Detect PHP security vulnerabilities with Psalm” https://t.co/EuClVh6S3y

[Chris Cornutt @enygma]

“Perforce Unveils New PHP Security Center by Zend“ https://t.co/w16OiNd1yl

[Paul Turner @P_Turner7]

"Two #WordPress Plugin Bugs Expose Over One Million Sites."

👾If an attacker is able to trick an admin into clicking on a phishing link, they could gain full remote control of the site.⚠️

Read the below article to know more.👇👇👇
https://t.co/VCgq7aqZTj #infosec #CyberSec

[Ryan Carson @ryancarson]

Love the @treehouse Beginning Security track! Learn how to keep you, your users, and your data safe.

Complete this track for FREE:
🔐 https://t.co/4C5WqRxadh

#learntocode #dataprivacy #security #100DaysOfCode

[Laravel @laravel]

🚨Security: Laravel 7.1.2 has been released to address a possible XSS attack vector in Laravel 7.x Blade components: https://t.co/s44z8PdC6m

[Drupal Security @drupalsecurity]

Meta tags quick - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-057 https://t.co/cNyWr9GWmM

[Drupal Security @drupalsecurity]

ImageCache Actions - Critical - Multiple Vulnerabilities - SA-CONTRIB-2019-056 https://t.co/XIxp2jN9IN

[Drupal Security @drupalsecurity]

Menu Item Extras - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2019-050 https://t.co/AMzAoCU0s0

[Drupal Security @drupalsecurity]

Workflow - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-049 https://t.co/VatWk1eL95

[Securing PHP @SecuringPHP]

Laravel Daily: “Laravel Auth: After-Registration Redirect to Previous (Intended) Page” https://t.co/EM2YqldQwA

[Securing PHP @SecuringPHP]

Symfony Blog: “New in Symfony 4.3: Native password encoder” https://t.co/xI0xET0rBh