Some security attacks are performed by sending requests to Web servers that it is not expected to handle. One way to minimize the chances of these attacks happening is to use a Web application firewall (WAF). This package implements a Web Application Firewall in PHP for Web servers that support htaccess configuration. It alters the .htaccess file so requests are handled by a script of this framework. It keeps track of a white list of request URLs supported by your application, so only approved URL formats are allowed. URLs with unknown formats are put in moderation, so an administrator can approve the URLs or not for future requests. This way the application can be protected from types of requests meant to perform security exploits.

Notable PHP package: PHP Web Application Firewall

MailChimp Holiday Tips



MailChimp?s e-commerce tips will help you make the most of your holiday marketing.

Rofl, a PHP package is considered Notable when it does something different that is worth noting.

If you have also written Notable packages, contribute them to the PHP Classes site to get your work more exposure.

If your notable package is innovative, you may also earn prizes and recognition in the PHP Innovation Award.

Now you can also win a Big elePHPant as one of the possible prizes you can win every month. Check the complete list of prizes here: List of prizes

Package

PHP Web Application Firewall

Block malicious requests using a white list

Moderator comment

Some security attacks are performed by sending requests to Web servers that it is not expected to handle.

One way to minimize the chances of these attacks happening is to use a Web application firewall (WAF).

This package implements a Web Application Firewall in PHP for Web servers that support htaccess configuration.

It alters the .htaccess file so requests are handled by a script of this framework. It keeps track of a white list of request URLs supported by your application, so only approved URL formats are allowed.

URLs with unknown formats are put in moderation, so an administrator can approve the URLs or not for future requests.

This way the application can be protected from types of requests meant to perform security exploits.

Author

Roman Shneer

Groups

HTTP, PHP 5, Security

Description

This package can block malicious requests using a white list.

It alters the .htaccess file to make requests for PHP pages go through a filter script that acts like a reverse proxy to implement a Web application framework (WAF).

The filter script will block requests of unauthorized format but the package provides a Web interface for the administrator white list requests of expected formats for the current Web application.
Rofl you are getting this message as free service for being a user of the PHP Classes site to which you registered voluntarily using the email address rofldigger@getsend.xyz. If you wish to unsubscribe go to the unsubscribe page.