SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Top signals
- 1 danielmiessler/SecLists 72.6k
- 2 nextcloud/server 36.3k
- 3 bagisto/bagisto 27.9k
- 4 firefly-iii/firefly-iii 24.2k
- 5 digininja/DVWA 13.5k
Fastest rising
- 1 danielmiessler/SecLists 72.6k
- 2 coollabsio/coolify 58.5k
- 3 nextcloud/server 36.3k
- 4 laravel/framework 34.8k
- 5 filamentphp/filament 31.7k
โ๏ธ Nextcloud server, a safe home for all your data
Free and open source laravel eCommerce platform
Firefly III: a personal finances manager
Leantime is a goals focused project management system for non-project managers. Building with ADHD, Autism, and dyslexia in mind.
PrestaShop is the universal open-source software platform to build your e-commerce solution.
The RSS feed for websites missing it
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Wallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.
The most advanced frontend drag & drop page builder. Create high-end, pixel perfect websites at record speeds. Any theme, any page, any design.
Speedtest Tracker is a self-hosted application that monitors the performance and uptime of your internet connection.
The most popular open source electronic health records and medical practice management solution.
Kimai is the #1 open-source time-tracking application. From freelancers to companies and organisations - everyone can manage timesheets, generate reports, create invoices and so much more... Web-based multi-user application, available as On-Premise or SaaS version: https://www.kimai.org
A self-hosted web radio management suite, including turnkey installer tools for the full radio software stack and a modern, easy-to-use web app to manage your stations.
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients ้ๅ/ๆธ้/ๅฎๅ จๆ่ฝ่ทฏ็ฑๅ - AI ่ชๅจ่ทฏ็ฑ + ๆ้่ชไธพๅทฅ…
TencentDB Agent Memory is a team-level memory hub for AI Agents — turning conversations, docs, and code into four reusable memory assets (Chat Memory, Skill, LLM-Wiki, Code-Graph) that are governed, shared, and equipped across agents and frameworks.
AirLLM 70B inference with single 4GB GPU
Multiplayer agent harness for work
12 Weeks, 24 Lessons, AI for All!
DeepSeek-native AI coding agent for your terminal. Engineered around prefix-cache stability — leave it running.
WordPress Develop, Git-ified. Synced from git://develop.git.wordpress.org/, including branches and tags! This repository is just a mirror of the WordPress subversion repository. Please include a link to a pre-existing ticket on https://core.trac.wordpress.org/ with every pull request.
21 Lessons, Get Started Building with Generative AI
A 2.78-trillion-parameter Kimi K3 running inference on a single CPU in 8.24 GB of RAM. Portable C99: no BLAS, no framework, no GPU.
Master programming by recreating your favorite technologies from scratch.
Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
Fast Rust library for PDF inspection, classification, and text extraction. Intelligently detects scanned vs text-based PDFs to enable smart routing decisions.
An interactive 3D human anatomy explorer built using threejs with GPT 5.6 Sol
Edit videos with coding agents
Run the full 2.78-trillion-parameter Kimi K3 model beyond available RAM by streaming activated weights directly from NVMe. A dependency-free, embeddable C inference engine.
FDE๏ผๅๆฒฟ้จ็ฝฒๅทฅ็จๅธ๏ผไป้ถๅ ฅ้จๆๅ๏ผๅบไบ่ๅฐใๅข้ฟ้ปๅฎขใๅไนฆๆกๆถ๏ผ
Production-grade Turborepo template for Next.js apps.
๐ฏ All you need. Nothing you don't. Open source project management that works for you, not against you.
An advanced guide which might benefit you a lot ๐ . ไบบ็่ฟ้ถๆๅ ็ฆป่ฐฑ็ไบบ็ ็ฆป่ฐฑ็่ฑ่ฏญๅญฆไน ๆๅ/่ฑ่ฏญๅญฆไน ๆ็จ/่ฑ่ฏญๅญฆไน /ๅญฆ่ฑ่ฏญ
Orchestrate AI agents to find real vulnerabilities in code.
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
access to david ondrej's personal agent skills
Orca is the ADE for working with a fleet of parallel agents. Run any coding agent with your own subscription. Available on desktop, mobile and VPS.
AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI
A powerful open-source UI framework for Laravel • Build and ship apps & admin panels fast with Livewire
An assortment of assets that demonstrate features and capabilities of the glTF format
ChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.
A free, self-hostable news aggregator…
A realtime voice runtime that keeps Agents talking, working, and present. Real-time Voice Runtime for AI Agents
Hunt down social media accounts by username across social networks
Codex-native architect orchestration with Luna and Terra implementation lanes and mandatory fresh Sol review.
Create polished educational animated voiceover videos with reusable scripting, visual direction, voice consistency, and CLI-based generation workflows.
Gradio WebUI for creators and developers, featuring key TTS (Edge-TTS, kokoro) and zero-shot Voice Cloning (E2 & F5-TTS, CosyVoice), with Whisper audio processing, YouTube download, Demucs vocal isolation, and multilingual translation.
Vibe-Research: Your Personal Trading Research Agent · A่ก/็พ่ก/ๆธฏ่ก ็ไธชไบบๆ็ Agent๏ผๆฏๆฅๅค็ใ่ต่ฎฏ้ท่พพใไธช่กๆฐๆฎใๆฟๅไธญๅฟใๆ็ๆไปใ็ ็ฉถ่ฎฐๅฝใVibe-Research ๆๆฐๆฎๅๅ่ฝ้ ้ฝ๏ผ็ฑไฝ ่ชๅทฑ็ AI ้ฉฑๅจๆ่ต็ ็ฉถใ
An arbitrage bot is a smart contract connected to an external automation script that controls its operation.
An open-source long-horizon SuperAgent harness that researches, codes, and creates. With the help of sandboxes, memories, tools, skill, subagents and message gateway, it handles different levels of tasks that could take minutes to hours.
Graph-Native Infrastructure for Context and Accountable AI Systems
wechat-miniprogram-builder
A PHP Blogging Platform. Simple and Powerful.
Lean certificates accompanying proofs in mathematics and theoretical computer science
Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, no vector store.
โก Dynamically generated, customizable SVG that gives the appearance of typing and deleting text for use on your profile page, repositories, or website.
A free shopping cart system. OpenCart is an open source PHP-based online e-commerce solution.
SuiteCRM - Open source CRM for the world
High-performance panel based on V2board secondary development supporting new protocols and new features
Open Source Point of Sale is a web based point of sale application written in PHP using CodeIgniter framework. It uses MySQL as the data back end and has a Bootstrap 3 based user interface. If you like this project, please give it a star! Doing so helps maintain Popular OSS status for the project.
The osTicket open source ticketing system official project repository, for versions 1.8 and later
Automatic tab-key completion for Symfony console application options, arguments and parameters
The library used by PKP's applications OJS, OMP and OPS, open source software for scholarly publishing.
Create Symfony Console commands from annotated command class methods.
Apply transformations to structured data to write output in different formats.
Most of the Laravel applications I work on expose REST APIs, and we've been trying to move more of our API testing into the terminal instead of relying on a GUI. The main goal is to use the same workflow locally and in CI/CD. We were looking for a tool that can: Run API tests fr…
It builds up quietly, it doesn't show on any board, and it comes due at the worst possible moment, usually when the technology the team never had time to learn becomes the technology the roadmap now depends on.The same note turns up in audit after audit. A team is building …
Yii DB Migration version 2.1.0 was released. In this version: Add MigrationBuilder::insertBatch() method, deprecate batchInsert() Explicitly import classes, functions, and constants in "use" section Remove unnecessary files from Composer package Remove confirmation prompt from m…
Helllllooooo! Happy August! I hope you had a great week. Mine was WILDLY busy at work, and this weekend was a welcome brain break. But now, break's over, let's learn! Was this forwarded to you? You can subscribe here! Web links of the week CodePen 2.0 React Debugging with Perfor…
Agentimus makes a WordPress site legible to AI assistants and lets them operate it over MCP. Until now it could only tell you what your site publishes. Version 1.33.0 turns the telescope around: it reads what Google, Bing and Cloudflare report back about you, and…
I added infrastructure discovery to my project boilerplate because generic scaffolding hides the services and failure modes that shape a real application.
I replaced our Queue/Horizon tier with a database-backed job engine; now stable, feedback welcome Background: I run a fairly large Queue/Horizon implementation (six-figure job counts, multi-host workers, nightly batch DAGs hundreds of jobs wide), and I kept hitting the same arch…
Hi I am pretty new at laravel and is quite impressed with the massive support in terms of tech stack and more. I am a business analyst with some little experience in coding, i have always been a wordpress person but really impressed with the creativity laravel brings. I am worki…
I've been working on Laravel API projects and recently started reviewing our API documentation workflow. Swagger/OpenAPI tools have been useful for generating documentation, but as projects grow, we're looking for a workflow that covers more than just documentation. Some things …
Part of the Integration Loop seriesHere's a bug you can't reproduce. curl says the page loads in 200ms. Lighthouse gives you a green score. Every synthetic check is happy. And the people actually using the app keep telling you it's slow. You stare at the dashboard…
Brendt shares fresh Packagist-based PHP version stats for July 2026: PHP 8.4 is now the most-used version, while PHP 8.5 reached 16% adoption after six months. He also notes that package minimum requirements still lag behind, with relatively few popular packages requiring a vers…
A useful status page makes operational reliability visible before the first incident by showing evidence, history, notifications, and honest limits.
Software is for users. Building it requires observation, judgment, experimentation, and honest feedback—not a mandate to use a particular tool. I have been building software for more than 25 years. The technology stacks move around, but the job does not. We build tools to…
Transcript [00:00:19] Nathan Wrigley: Welcome to the Jukebox Podcast from WP Tavern. My name is Nathan Wrigley. Jukebox is a podcast which is dedicated to all things WordPress. The people, the events, the plugins, the blocks, the themes, and in this case, testing secure WordPres…
Friday Night Dinner: Co & Ko Friday, July 31st 2026, 16:45 BST 72 Berwick Street, London, W1F 8TD, United Kingdom https://www.cookandkorea.com/ Korean Starters: £5-£10.5; Dishes: £10.5-£25.5 Situated in SOHO, this small restaurant has a large selection of…
I was a guest in Karol Skrzymowski’s podcast “Loosely Coupled”, together with Martin Fowler, Xin Yao, and Andrew Harmel-Law. It was recorded live at DDD Europe 2026 in Antwerp. Abstract Is design still relevant in the age of AI? Is AI capable of replacing domain experts, archite…
Matthew Weier O'Phinney
Iliya Miroslavov Iliev
Sjoerd Langkemper
Rowan Tommins [IMSoP]
Rowan Tommins [IMSoP]
Paul M. Jones
Paul M. Jones
Yii2 Safaricom Daraja Extension ¶ Example Application Compatibility Installation Yii2 Configuration Environment Variables Basic Usage Yii2 MVC Pattern Example Model: STK Push Form Example Controller STK Push and Query C2B URL Registration and Simulation B2C, B2B, and B2Pochi Rev…
Yii Bulma version 1.1.0 was released. In this version: Bump yiisoft/html version to ^4.2.0 Adapt configuration to changes in yiisoft/form Change PHP constraint in composer.json to 8.1 - 8.5 Adopt last change yiisoft/widget Refactor yiisoft/html classes usage Explicitly import co…
Yii2 eCitizen Payment Extension ¶ What This Package Does What This Package Does Not Do Compatibility Installation Yii2 Configuration Environment Variables Yii2 MVC Pattern Basic Checkout Usage Callback URL Building Example Model: Payment Form Example Controller: Checkout Example…
Yii-Permission ¶ Installation Usage Define your own model.conf Learning Casbin License An authorization library for the Yii 3.0 PHP Framework, based on Casbin. Installation Getting Composer package Configuring application Database Migration Usage Quick start Using Enforcer Api U…
If you maintain an active repository, you know the feeling. You open your notifications on a Monday morning and there they are: five, 10, sometimes a dozen Dependabot pull requests, each bumping a single dependency by a single patch version. Individually, every one of them is he…
Suppose a user searches for café and your corpus contains CAFÉ, or they type straße and you’ve stored STRASSE. To make these count as matches, you need a canonical form that erases case distinctions, so that two strings which differ only in case compare…
The PHP Podcast – July 30, 2026 Hosts: Joe Ferguson, Sara Golemon & Holly Schilling Time travel is real, birds aren’t. The gang argues about Fahrenheit vs. Celsius, boiling rocks, and stones (the weight kind), then gets into PSR-3 logging, the PHP ecosystem, AI s…
Video version: https://youtu.be/ZtAKnN6jWbE I love static analysis tools to a degree that my co-workers find annoying. Tools like PHPStan and Psalm catch bugs before they ever reach production, and once you get used to that safety net, it is impossible to imagine coding without …
Laracon US came back for its 2026 edition on July 28 and 29, at the SoWa Power Station in Boston’s arts district. Two days, one stage, and a lineup of eighteen speakers that ranged from Taylor Otwell himself down to independent educators, package authors, and engineers vis…
WordPress 7.1 Beta 4 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site t…
A few years ago, if someone had told me to rewrite the PHP engine in Rust, I would probably have laughed ๐. Not because it is technically impossible, but because such a project traditionally requires…
Most fragrance advice is written for weather we don’t have. Reviews are filmed in air-conditioned rooms in London or Chicago, longevity tests happen on skin that never breaks a sweat, and then we wonder why the same bottle behaves completely differently here. Bangladesh sp…
Who is this article for? This post is for people that do day-by-day busywork coding, and for team leads that want to direct their peers towards better logging practices. Note that this article comes from my regular need to present these exact points to different people, multiple…
One of the things that we at Chrome have been thinking about for a while now is a way to do declarative route and navigation matching in CSS. Together with Noam Rosenthal and David Baron I’ve been working on this for the past few months. After an initial introduction at the CSS …
When you want to know the last time some user was seen or some resource was accessed/viewed, then usually you reach to a timestamp column and update this to the current time whenever it’s seen or accessed. You may have written this kind of SQL statement (or the equivalent)…
Deploy your Next.js or Nuxt frontend alongside your Laravel app on Laravel Cloud: one platform, one deploy workflow, one bill.
Every Laravel framework and Cloud announcement from Laracon US 2026, including Laravel LSP, Inertia DevTools, managed queues, and scale-to-zero.
Symfony 6.4.43 has just been released. Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project. Tip Want to be notified whenever a new Symfony release is published?…
Symfony 7.4.15 has just been released. Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project. Tip Want to be notified whenever a new Symfony release is published?…
Symfony 8.0.15 has just been released. Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project. Tip Want to be notified whenever a new Symfony release is published?…
Symfony 8.1.2 has just been released. Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project. Tip Want to be notified whenever a new Symfony release is published? …
Symfony 8.0.16 has just been released. Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project. Tip Want to be notified whenever a new Symfony release is published?…
Symfony 8.1.3 has just been released. Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project. Tip Want to be notified whenever a new Symfony release is published? …
Symfony 8.0.16 was released on July 29, 2026. It is the last release of the 8.0 branch. Symfony's release policy gives standard versions eight months of support, with bug fixes and security fixes ending at the same time. Symfony 8.0.0 was published on November 27, 2025, so the b…
For years, Webpack Encore was the answer to asset management in Symfony, and it still works. But the JavaScript bundler landscape has moved on since Encore was designed. Webpack needed a loader wired up for nearly everything (Sass, TypeScript, you name it), which is exactly why …
This week, Symfony 6.4.43, 7.4.15, 8.0.16 and 8.1.3 maintenance versions were released. In addition, Symfony 8.0 reached its end of life. Finally, we introduced Symfony Reprise, the evolution of Webpack Encore for modern bundlers such as Vite and Rsbuild. Symfony development hig…
Pint 1.30.0 adds a --blade flag that formats .blade.php files through Prettier, alongside fixes for --diff, --quiet, and a new in key for pint.json. The post Blade Formatting in Laravel Pint appeared first on Laravel News. Join the Laravel Newsletter to get all the latest Larave…
Queue-SQL is a Laravel package that turns mass updates, deletes, and inserts into batches of parallel queued jobs. The post Queue-SQL: Run Mass Deletes and Updates Across Parallel Queue Jobs appeared first on Laravel News. Join the Laravel Newsletter to get all the latest Larave…
Nuno Maduro announced Pest 5 at Laracon US 2026. The PHP testing framework adds test impact analysis, an agent plugin, evals, PHPStan, and Rector support. The post Pest 5 Released With Test Impact Analysis, Agent Verification, and Evals appeared first on Laravel News. Join the L…
Announced at Laracon US 2026, the Laravel AI SDK's new human-in-the-loop API pauses an agent before it runs a sensitive tool so a person can approve, reject, or edit the tool call first. The post Laravel AI SDK Adds Human-in-the-Loop Tool Approval appeared first on Laravel …
cpx 2.0 is a full rewrite of the Composer package executor. It runs a command from any Composer package without adding it to your project, prefers the binaries your project already pins, and returns JSON when an AI agent is driving it. The post CPX: The Composer Package Executor…
Hi everyone! ๐ I've just open-sourced **Laravel Cooldown**, a package for managing **action cooldowns** in Laravel. While Laravel's built-in `RateLimiter` is excellent for request throttling, I found myself repeatedly needing a reusable solution for **time-based action restricti…
Yii2 PHPStan rules Support Installation Configuration Rules at a glance Rule reference A set of PHPStan rules for Yii2 projects that I put together for my own day-to-day work. Yii2 leans heavily on loosely-typed config arrays and magic properties/methods that PHPStan can't see t…
Hey everyone, I recently built an open-source Textile ERP system and wanted to share it with the community here. While this is built entirely in the Next.js ecosystem, I know a lot of us use React/Next.js alongside our typical backend stacks, so I thought it might be of interest…
Been writing Laravel for years. Every time a project pulls me into Node.js territory, whether it's a side project, a microservice, or just helping a team, the first thing I notice is that nothing feels like Eloquent. Prisma is fine but it's a different mental model entirely. Typ…
Yii2 Sentry ¶ Features Installation Configuration Built-in Collectors Usage How Collectors Work Creating a Custom Collector License Read this in other languages: English, ะ ัััะบะธะน Complete Sentry integration for Yii2 framework: logging, tracing and profiling. Features ¶ Tracking …
Hi everyone, I've been building **KAAL Realtime**, a Laravel package that enables **live updates across connected browsers** while letting you continue using standard Blade templates.  method to Button widget Raise yiisoft/html version to ^3.13 || ^4.0 Fix Collapse re-encoding content already managed by Toggler
Voyti — Yii3 User Management Extension ¶ Features Requirements Installation Documentation Testing ะฒะพะนัะธ /vษjหtสฒi/ verb "to enter" or "to log in" Highly customizable and extensible user management, authentication, and authorization extension for Yii Framework 3. Originally ported…
Yii3 reCAPTCHA ¶ Features Requirements Installation Documentation Testing Google reCAPTCHA v2 and v3 form field + server-side validator for Yii3. Stats for Nerds Features ¶ reCAPTCHA v2 — checkbox/invisible widget field with theme, size, and type options reCAPTCHA v3 — score-bas…
If you’re a **Laravel developer**, you know the pain: you finish a feature, but then you spend another 30 minutes updating YAML files or adding messy docblock annotations just so the frontend team knows how the API works. I built **Laravel API Visibility** to change that. No ann…
Hi Guys, Good day! Can you share some real websites using Laravel? And If I have a website, how do I know if there's any tags or signs that shows it's using Laravel? AI tells me to check like this document.cookie.includes('laravel_session') to see if such a cookie...is that true…
Hey everyone! ๐ I recently tried to contribute `Arr::after()` to the Laravel framework (PR #60081) but Taylor decided to keep the framework minimal. So I released it as a standalone package! ## What it does Retrieves the value after a given value in an array. ## Installation ```…
Good evening, everyone! I’m looking for recommendations for libraries or packages to create tables in Laravel using Tailwind CSS. Previously, I used Yajra Laravel DataTables with Bootstrap, but now I want to switch to a solution that works well with Tailwind and, preferably, doe…
I’ve been working on internal approval/workflow systems for years and recently tried extracting the core engine into a reusable Laravel package. Repository: [Approval Binary GitHub Repository](https://github.com/menma977/Approval-Binary) The package started as a simple approval …
I'm currently working on a personal project related to Warhammer. Because I needed to test some things, I have made an test project for a quiz that would help select a faction. But I'm kind of still looking for advise to improve it. At first I had all the faction calculations ru…
I'm using Laravel 13 and accessing my app via ngrok. I noticed that changing APP_URL in my .env file doesn't affect asset() it still generates localhost URLs. After digging in, I found two ways to fix it: 1. Set ASSET_URL to the ngrok URL 2. Add URL::forceRootUrl(config('app.url…
As a trusted [](https://www.nxdeep.com/erp-software-development), NxDeep Connectz creates strong and scalable ERP solutions designed for specific business needs. Our ERP systems bring together essential business processes, remove data silos, and improve operational efficiency th…
Hey Laravel community! I built Pterocos (https://pterocos.eu.org) - a free online editor that runs PHP code entirely in your browser. No installation, no account required. **Why Laravel developers might find this useful:** - Quickly test PHP snippets without local setup - Protot…
Hi everyone, I’ve been running into an issue in queue-heavy Laravel apps where the real origin of a change gets lost. Typical flow: HTTP request → service → queue → job → model update By the time the model is updated, the audit log usually only shows the job or system as the act…
I often need to compare different versions of documentation, website content, configuration snippets, and notes. Git works great for source code, but for plain text I sometimes find it more convenient to use a dedicated comparison tool. I'm interested in learning what other deve…
Hey everyone ๐ I built a small Laravel package for filtering Eloquent models via request query strings, and I'd love to get some feedback from the community. **Package:** https://github.com/AhmedEzz20/laravel-query-filters **Packagist:** https://packagist.org/packages/dev-astro/…
Hey everyone, I recently released the first alpha of **CarvePHP**, an open-source Laravel package for teams working with large Laravel monoliths. The goal is not automatic “one-click microservices.” I know that is not realistic for most real-world systems. Instead, CarvePHP focu…
JWT, JWE, JWS, etc. are terrible designs and need to be scrapped, not resuscitated.
A deep dive into the security engineering decisions that went into CMS Airship. A lot of the decisions we made are subtle.
Application security has a checklist problem; we propose a better way forward.
How to implement field-level data encryption while still allowing fast queries.
Why your software product needs code audits (particularly with cryptography), and how we deliver a higher standard of service.
A quick comparison of libsodium functions with similar names/purposes, and which one to use for a specific use case
How to use Sapient, our new Secure API Toolkit, to Harden your PHP 7 software.
With Chronicle, you probably don't need a blockchain to solve your problems anymore.
A reflection on the first six months of the year, ext/sodium landing in PHP 7.2, and where to go from here.
Ward is our latest security product, intended to help secure e-Commerce platforms.
How to build your own automatic update system that is verifiably secure.
Recent events have put supply chain attacks against software updaters on everyone's radar. Scott explains what this means and what to do about it.
Our new open source library, which keeps your Certificate Authority certificate bundle up-to-date.
Introducing PIE-Hosted Services to Help Further our Goals to Secure the Entire PHP Ecosystem
How to build a homomorphic encryption scheme that is not vulnerable to chosen-ciphertext attacks, using blockchain-like protocols.
Everything a developer needs to know to build secure software in the PHP programming language in the year 2018
Let's solve application security at an ecosystem level by updating outdated and/or insecure blog posts to refer developers to better practices.
Paseto (Platform-Agnostic Security Tokens) is everything JWT should be, but isn't (namely, secure)
Our company's name was decided on March 14, 2015, which makes its birthday very easy to remember.
A deep dive into preventing chosen-ciphertext (e.g. padding oracle) attacks against RSA in custom encrypted transport protocols.
A brief overview of the various common use-cases of asymmetric cryptography (also known as "public-key cryptography") from the perspective of a software developer.
If you're planning on implementing the W3C and FIDO Alliance's new WebAuthn standard for hardware security token support, skip ECDAA for now.
Paragon Initiative Enterprises answers several reader questions
We have a lot of work ahead of us in 2019, and we hope it benefits the entire PHP community
CipherSweet is a PHP library that provides searchable encryption for the most common cases a web developer is likely to encounter.
A simple, accessible recommendation for key sizes and recommended algorithms for various cryptographic algorithms.
We wrote a cryptography library entirely in PHP to make your WordPress site secure against supply-chain attacks.
Your webserver can initiate HTTP requests too, and securing those matters a lot.
We'll be doing for JavaScript (Node.js) what we've been doing for PHP for several years now.
Why versioned protocols are superior to "cipher agility"-based cryptographic designs.
Introducing Ristretto255 for PHP developers
Announcing new versions of the PASETO protocol, which offer better arguments for security in a wider range of use cases.
PASERK adds public-key encryption, key-wrapping, key serialization, and unique key identification to PASETO.
How we plan to discourage insecure implementations of PASETO.
Our project, Gossamer, is the best first step to solving supply chain security for the PHP ecosystem.
A short summary of the work we've done to make the Internet more secure for everyone.
Your PHP 5 code won't break, but your PHP 8.1+ code will be faster and cleaner
Leveraging the ubiquity of the PHP programming language to make everyone more secure.
Announcing a PHP extension and pure-PHP polyfill providing post-quantum cryptography for the PHP open source software community.
Introduction Installation Quick Setup Core Features Best Practices Common Patterns Troubleshooting Additional Resources Conclusion Introduction ¶Inertia.js is a modern approach to building single-page applications (SPAs) without the complexity of building an API. It allows you t…
yii2-recurring-date ¶ Main Features Installation Usage JSON Format (persisted) Calculation of the Next Expiration Date Configuration and Customization Validations and UX Behavior Internationalization (i18n) Tests Best Practices and Notes Contributing License A Yii2 extension/wid…
ChartJs Widget ¶ Installation Usage Further Information Contributing Credits License Este paquete es un fork de 2amigos/yii2-chartjs-widget, el cual se encuentra en modo de solo lectura. Este fork fue creado para mantener vivo el paquete y continuar su mantenimiento. Renders a C…
Yii2 IDE Helper ¶ ๅ่ฝ็นๆง ๅฎ่ฃ ไฝฟ็จ PhpStorm Meta ๆไปถ่ฏฆ่งฃ PhpStorm ้ ็ฝฎ ็ๆๆไปถ็คบไพ ๆต่ฏ ่ดก็ฎ ่ฎธๅฏ่ฏ ่ด่ฐข ไธบ Yii2 ๆกๆถๆไพ PhpStorm ๆบ่ฝไปฃ็ ่กฅๅ จๆฏๆ๏ผ็ตๆๆฅๆบไบ barryvdh/laravel-ide-helper ๅ่ฝ็นๆง ¶ โ ไธบ Yii2 ็ปไปถ็ๆๅฎๆด็ PHPDoc ็ฑปๅๆ็คบ โ ไธบ ActiveRecord ๆจกๅ็ๆๅฑๆงๅๆนๆณๆๆกฃ โ ไธบ ActiveQuery ็ๆๆฅ่ฏขๆๅปบๅจๆ็คบ โ ็ๆ PhpStorm Meta ๆไปถๆฏๆ้ซ็บง IDE ็นๆง๏ผDI ๅฎนๅจใ็ฑปๅๆจๆญ๏ผ…
Response download version 1.1.0 was released. In this version: Add support for psr/http-message version ^2.0 Try to determine content MIME type automatically
Both web template and API template got 1.4.0 release which adds expicit Caddyfile configs for production and development Docker environments. These configs are in docker/Caddyfile for production image and docker/dev/Caddyfile for development image. After these are edited you nee…
First stable version of FrankenPHP worker runner released. The runner allows using FrankenPHP in worker mode. In this mode application is initializer once per worker and is serving multiple reqests in this state resulting in signficiant performance gains. Since the application d…
Yii Log Email Target version 4.2.0 was released. In this version: Change PHP constraint in composer.json to 8.1 - 8.5 Raise the minimum yiisoft/mailer version to ^6.0 and adapt the code accordingly Explicitly import classes in "use" section
We are pleased to announce the release of Yii Framework version 2.0.55. Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version. In this release: Security fix for CVE-2026-39850: internal variables in View::renderPhpFile()…
Yii RBAC PHP File Storage version 2.1.0 was released. In this version: Change PHP constraint in composer.json to 8.1 - 8.5 Bump yiisoft/rbac version to ^2.1 Apply code style fixes Explicitly import functions and constants in "use" section
Yii Active Record version 1.1.0 was released. In this version: Clarify $relations parameter type in JoinWith::__construct() from array<string|Closure> to array<string|callable(ActiveQueryInterface):void> Optimize performance of ActiveRecord::get() method Remove check…
Yii HTML version 4.1.0 was released. In this version: Add test helper functions for controlling HTML ID generation
Yii Runner RoadRunner version 3.2.0 was released. In this version: Add PHP 8.5 support Add spiral/roadrunner-http version ^v4.0.0 support
Yii HTML version 4.2.0 was released. In this version: Add beforeInput() and afterInput() methods to abstract BooleanInputTag, extended by Radio and Checkbox Add beforeCheckbox() and afterCheckbox() methods to CheckboxList, and beforeRadio() and afterRadio() methods to RadioList