Description
PHPIDS (PHP-Intrusion Detection System) is a simple to use, well structured, fast and state-of-the-art
security layer for your PHP based web application. The IDS neither strips, sanitizes nor filters any
malicious input, it simply recognizes when an attacker tries to break your site and reacts in exactly
the way you want it to. Based on a set of approved and heavily tested filter rules any attack is given a
numerical impact rating which makes it easy to decide what kind of action should follow the hacking attempt.
This could range from simple logging to sending out an emergency mail to the development team, displaying
a warning message for the attacker or even ending the user’s session.
PHPIDS enables you to see who’s attacking your site and how and all without the tedious trawling of
logfiles or searching hacker forums for your domain. Last but not least it’s licensed under the fair LGPL!
PHP IDS alternatives and similar libraries
Based on the "Security" category.
Alternatively, view PHP IDS alternatives based on common mentions on social networks and blogs.
-
-
-
-
-
Cossack Labs
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms. -
-
-
scheb/two-factor-bundle
DISCONTINUED. [ABANDONED] Two-factor authentication for Symfony 2 & 3 applications 🔐. Please use the newer versions from https://github.com/scheb/2fa. -
Elliptic-PHP
Fast, general Elliptic Curve Cryptography library. Supports curves used in Bitcoin, Ethereum and other cryptocurrencies (secp256k1, ed25519, ..) -
-
SecurityMultiTool
A multitool library offering access to recommended security related libraries, standardised implementations of security defences, and secure implementations of commonly performed tasks.
WorkOS - The modern identity platform for B2B SaaS
* Code Quality Rankings and insights are calculated and provided by Lumnify.
They vary from L1 to L5 with "L5" being the highest.
Do you think we are missing an alternative of PHP IDS or a related project?
README
PHPIDS
PHPIDS (PHP-Intrusion Detection System) is a simple to use, well structured, fast and state-of-the-art security layer for your PHP based web application. The IDS neither strips, sanitizes nor filters any malicious input, it simply recognizes when an attacker tries to break your site and reacts in exactly the way you want it to. Based on a set of approved and heavily tested filter rules any attack is given a numerical impact rating which makes it easy to decide what kind of action should follow the hacking attempt. This could range from simple logging to sending out an emergency mail to the development team, displaying a warning message for the attacker or even ending the user’s session.
PHPIDS enables you to see who’s attacking your site and how and all without the tedious trawling of logfiles or searching hacker forums for your domain. Last but not least it’s licensed under the fair LGPL!
Contributions
If you would like to contribute, please open a pull request. If you need something to do, have a look at our open issues.
Credits
The project was started by Christian Matthies [email protected] and Mario Heiderich [email protected]. Mario spend a lot of time maintaining PHPIDS mostly on his own. Huge props for that. Currently Lars Strojny [email protected] merges pull requests.
An incomplete list of contributors:
- LeverOne for his outstanding work, testing and XSS vectors from the depths of markup hell
- Kishor for providing cutting edge XSS and great help in the group
- Martin Hinks for great hints, the .NETIDS and help with false positives
- SirDarckCat for providing XSS so advanced it made us shiver
- Gareth Heyes for his help enhancing the rules and very creative XSS vectors
- Kevin Schroeder for the audit and great help on testing and enhancing the PHPIDS
- xorrer for his help optimizing the rules against his cryptic and sophisticated XSS vectors
- Johannes Dahse for his help optimizing the SQLI rules
- Roberto Salgado for helping hardening the SQLI rules with his SQL-Fu
- tx for even more outstanding SQLI stuff and almost magic PHP code injection vectors
- Giorgio Maone for redefining the word JavaScript with his vectors
- thornmaker for submitting smart and very hard to detect JavaScript concatenation vectors
- Martin Trauth for helping us with the design and giving hints on estate usability
- Ronald v.d. Heetkamp for helping on the SQLI and XSS detection issues
- Dan for helping i18n-ing the PHPIDS
- CrYpTiC_MauleR for providing great hints and XSS magic
- Robert Hansen for providing (sl|h)a.ckers.org and the XSS cheat sheet
- beford for providing great hints and esoteric but working XSS
*Note that all licence references and agreements mentioned in the PHP IDS README section above
are relevant to that project's source code only.