├── .gitignore
├── .htaccess
├── .php_cs
├── LICENSE
├── README.md
├── composer.json
├── composer.lock
├── rector.php
├── renovate.json
├── screenshots
    ├── amwscan_1.png
    ├── amwscan_2.png
    └── xssblock_screen.png
├── src
    └── Security.php
└── tests
    ├── captcha.php
    ├── captcha_test.php
    ├── cookies_test.php
    ├── csrf_test.php
    ├── dos_test.php
    ├── globals_test.php
    ├── password_test.php
    ├── securehtml_test.php
    ├── security_test.php
    └── xss_test.php


/.gitignore:
--------------------------------------------------------------------------------
1 | .idea/*
2 | vendor/**
3 | /.php_cs.cache
4 | src/.ddos
5 | 


--------------------------------------------------------------------------------
/.htaccess:
--------------------------------------------------------------------------------
 1 | # htaccess
 2 | # @author: Marco Cesarato <cesarato.developer@gmail.com>
 3 | 
 4 | IndexIgnore *
 5 | Options All -Indexes
 6 | 
 7 | # Hide server informations
 8 | ServerSignature Off
 9 | 
10 | #LimitRequestBody 10240000
11 | 
12 | # Security php settings
13 | #php_flag expose_php off
14 | #php_flag allow_url_fopen off
15 | #php_flag magic_quotes_gpc  off
16 | #php_flag register_globals off
17 | #php_flag session.cookie_httponly on
18 | #php_flag session.use_only_cookies on
19 | 
20 | # Headers protection/improvements
21 | <IfModule mod_headers.c>
22 | 
23 |     # Hide server informations
24 |     Header always unset X-Powered-By
25 |     Header unset X-Powered-By
26 | 
27 |     # XSS Protection
28 |     Header set X-XSS-Protection "1; mode=block"
29 |     # Clickjacking
30 |     Header set X-Frame-Options "sameorigin"
31 | 
32 |     Header set Accept-Encoding "gzip, deflate"
33 |     Header set Cache-Control "max-age=15552000, must-revalidate"
34 | 
35 |     Header set Referer-Policy "origin"
36 |     Header set Strict-Transport-Security "max-age=16070400; includeSubDomains"
37 |     Header set X-UA-Compatible "IE=edge,chrome=1"
38 |     Header set X-Permitted-Cross-Domain-Policies "master-only"
39 |     Header set X-Content-Type-Options "nosniff"
40 |     Header set X-Download-Options "noopen"
41 |     Header set Access-Control-Allow-Methods "GET, POST"
42 |     # Content policy
43 |     #Header set Content-Security-Policy "default-src 'self'"
44 |     Header set Content-Security-Policy "default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; object-src 'self'"
45 | 
46 | </IfModule>
47 | 
48 | <IfModule mod_rewrite.c>
49 | 
50 |     # Enable URL Rewriter
51 |     RewriteEngine On
52 |     Options +FollowSymlinks
53 |     Options +SymLinksIfOwnerMatch
54 | 
55 |     RewriteCond %{REQUEST_METHOD} ^(TRACE|OPTIONS)
56 |     RewriteRule .* – [F]
57 | 
58 |     # HTTPS
59 |     #RewriteCond %{HTTPS} !on
60 |     #RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
61 | 
62 |     # URL Rewrite
63 |     # Remove comment from here if you use a url rewriter
64 |     #RewriteBase /
65 |     #RewriteRule ^index\.php$ - [L]
66 |     #RewriteCond %{REQUEST_FILENAME} !-f
67 |     #RewriteCond %{REQUEST_FILENAME} !-d
68 |     #RewriteRule . index.php [L]
69 | 
70 |     RewriteRule .*\.git.* index.php [L]
71 |     RewriteRule .*\.svn.* index.php [L]
72 |     RewriteRule .*\.hg.* index.php [L]
73 | 
74 | </IfModule>
75 | 
76 | # File protection
77 | <Files ~ "^(config)\.php">
78 |   Order Allow,Deny
79 |   Deny from all
80 | </Files>
81 | <Files ~ "^.*\.([Hh][Tt][Aa])">
82 |   Order Allow,Deny
83 |   Deny from all
84 |   Satisfy all
85 | </Files>
86 | 
87 | # Robots file protection
88 | <Files ~ "\.pdf$">
89 |   Header set X-Robots-Tag "noindex, nofollow"
90 | </Files>
91 | <Files ~ "\.(png|jpe?g|gif|bmp|psd)$">
92 |   Header set X-Robots-Tag "noindex"
93 | </Files>
94 | 


--------------------------------------------------------------------------------
/.php_cs:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | return PhpCsFixer\Config::create()
 4 |                         ->setUsingCache(true)
 5 |                         ->setRiskyAllowed(true)
 6 |                         ->setCacheFile(__DIR__ . '/.php_cs.cache')
 7 |                         ->setRules([
 8 |                             '@PSR1'                        => true,
 9 |                             '@PSR2'                        => true,
10 |                             '@Symfony'                     => true,
11 |                             'psr4'                         => true,
12 |                             // Custom rules
13 |                             'align_multiline_comment'      => ['comment_type' => 'phpdocs_only'], // PSR-5
14 |                             'phpdoc_to_comment'            => false,
15 |                             'array_indentation'            => true,
16 |                             'array_syntax'                 => ['syntax' => 'short'],
17 |                             'cast_spaces'                  => ['space' => 'none'],
18 |                             'concat_space'                 => ['spacing' => 'one'],
19 |                             'compact_nullable_typehint'    => true,
20 |                             'declare_equal_normalize'      => ['space' => 'single'],
21 |                             'increment_style'              => ['style' => 'post'],
22 |                             'list_syntax'                  => ['syntax' => 'long'],
23 |                             'no_short_echo_tag'            => true,
24 |                             'phpdoc_align'                 => false,
25 |                             'phpdoc_no_empty_return'       => false,
26 |                             'phpdoc_order'                 => true, // PSR-5
27 |                             'phpdoc_no_useless_inheritdoc' => false,
28 |                             'protected_to_private'         => false,
29 |                             'yoda_style'                   => false,
30 |                             'method_argument_space'        => ['on_multiline' => 'ensure_fully_multiline'],
31 |                             'ordered_imports'              => [
32 |                                 'sort_algorithm' => 'alpha',
33 |                                 'imports_order'  => ['class', 'const', 'function']
34 |                             ],
35 |                         ])
36 |                         ->setFinder(PhpCsFixer\Finder::create()
37 |                                                      ->exclude(__DIR__ . '/vendor')
38 |                                                      ->in(__DIR__ . '/src')
39 |                                                      ->in(__DIR__ . '/tests')
40 |                                                      ->name('*.php')
41 |                                                      ->ignoreDotFiles(true)
42 |                                                      ->ignoreVCS(true));


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
  1 |                     GNU GENERAL PUBLIC LICENSE
  2 |                        Version 3, 29 June 2007
  3 | 
  4 |  Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
  5 |  Everyone is permitted to copy and distribute verbatim copies
  6 |  of this license document, but changing it is not allowed.
  7 | 
  8 |                             Preamble
  9 | 
 10 |   The GNU General Public License is a free, copyleft license for
 11 | software and other kinds of works.
 12 | 
 13 |   The licenses for most software and other practical works are designed
 14 | to take away your freedom to share and change the works.  By contrast,
 15 | the GNU General Public License is intended to guarantee your freedom to
 16 | share and change all versions of a program--to make sure it remains free
 17 | software for all its users.  We, the Free Software Foundation, use the
 18 | GNU General Public License for most of our software; it applies also to
 19 | any other work released this way by its authors.  You can apply it to
 20 | your programs, too.
 21 | 
 22 |   When we speak of free software, we are referring to freedom, not
 23 | price.  Our General Public Licenses are designed to make sure that you
 24 | have the freedom to distribute copies of free software (and charge for
 25 | them if you wish), that you receive source code or can get it if you
 26 | want it, that you can change the software or use pieces of it in new
 27 | free programs, and that you know you can do these things.
 28 | 
 29 |   To protect your rights, we need to prevent others from denying you
 30 | these rights or asking you to surrender the rights.  Therefore, you have
 31 | certain responsibilities if you distribute copies of the software, or if
 32 | you modify it: responsibilities to respect the freedom of others.
 33 | 
 34 |   For example, if you distribute copies of such a program, whether
 35 | gratis or for a fee, you must pass on to the recipients the same
 36 | freedoms that you received.  You must make sure that they, too, receive
 37 | or can get the source code.  And you must show them these terms so they
 38 | know their rights.
 39 | 
 40 |   Developers that use the GNU GPL protect your rights with two steps:
 41 | (1) assert copyright on the software, and (2) offer you this License
 42 | giving you legal permission to copy, distribute and/or modify it.
 43 | 
 44 |   For the developers' and authors' protection, the GPL clearly explains
 45 | that there is no warranty for this free software.  For both users' and
 46 | authors' sake, the GPL requires that modified versions be marked as
 47 | changed, so that their problems will not be attributed erroneously to
 48 | authors of previous versions.
 49 | 
 50 |   Some devices are designed to deny users access to install or run
 51 | modified versions of the software inside them, although the manufacturer
 52 | can do so.  This is fundamentally incompatible with the aim of
 53 | protecting users' freedom to change the software.  The systematic
 54 | pattern of such abuse occurs in the area of products for individuals to
 55 | use, which is precisely where it is most unacceptable.  Therefore, we
 56 | have designed this version of the GPL to prohibit the practice for those
 57 | products.  If such problems arise substantially in other domains, we
 58 | stand ready to extend this provision to those domains in future versions
 59 | of the GPL, as needed to protect the freedom of users.
 60 | 
 61 |   Finally, every program is threatened constantly by software patents.
 62 | States should not allow patents to restrict development and use of
 63 | software on general-purpose computers, but in those that do, we wish to
 64 | avoid the special danger that patents applied to a free program could
 65 | make it effectively proprietary.  To prevent this, the GPL assures that
 66 | patents cannot be used to render the program non-free.
 67 | 
 68 |   The precise terms and conditions for copying, distribution and
 69 | modification follow.
 70 | 
 71 |                        TERMS AND CONDITIONS
 72 | 
 73 |   0. Definitions.
 74 | 
 75 |   "This License" refers to version 3 of the GNU General Public License.
 76 | 
 77 |   "Copyright" also means copyright-like laws that apply to other kinds of
 78 | works, such as semiconductor masks.
 79 | 
 80 |   "The Program" refers to any copyrightable work licensed under this
 81 | License.  Each licensee is addressed as "you".  "Licensees" and
 82 | "recipients" may be individuals or organizations.
 83 | 
 84 |   To "modify" a work means to copy from or adapt all or part of the work
 85 | in a fashion requiring copyright permission, other than the making of an
 86 | exact copy.  The resulting work is called a "modified version" of the
 87 | earlier work or a work "based on" the earlier work.
 88 | 
 89 |   A "covered work" means either the unmodified Program or a work based
 90 | on the Program.
 91 | 
 92 |   To "propagate" a work means to do anything with it that, without
 93 | permission, would make you directly or secondarily liable for
 94 | infringement under applicable copyright law, except executing it on a
 95 | computer or modifying a private copy.  Propagation includes copying,
 96 | distribution (with or without modification), making available to the
 97 | public, and in some countries other activities as well.
 98 | 
 99 |   To "convey" a work means any kind of propagation that enables other
100 | parties to make or receive copies.  Mere interaction with a user through
101 | a computer network, with no transfer of a copy, is not conveying.
102 | 
103 |   An interactive user interface displays "Appropriate Legal Notices"
104 | to the extent that it includes a convenient and prominently visible
105 | feature that (1) displays an appropriate copyright notice, and (2)
106 | tells the user that there is no warranty for the work (except to the
107 | extent that warranties are provided), that licensees may convey the
108 | work under this License, and how to view a copy of this License.  If
109 | the interface presents a list of user commands or options, such as a
110 | menu, a prominent item in the list meets this criterion.
111 | 
112 |   1. Source Code.
113 | 
114 |   The "source code" for a work means the preferred form of the work
115 | for making modifications to it.  "Object code" means any non-source
116 | form of a work.
117 | 
118 |   A "Standard Interface" means an interface that either is an official
119 | standard defined by a recognized standards body, or, in the case of
120 | interfaces specified for a particular programming language, one that
121 | is widely used among developers working in that language.
122 | 
123 |   The "System Libraries" of an executable work include anything, other
124 | than the work as a whole, that (a) is included in the normal form of
125 | packaging a Major Component, but which is not part of that Major
126 | Component, and (b) serves only to enable use of the work with that
127 | Major Component, or to implement a Standard Interface for which an
128 | implementation is available to the public in source code form.  A
129 | "Major Component", in this context, means a major essential component
130 | (kernel, window system, and so on) of the specific operating system
131 | (if any) on which the executable work runs, or a compiler used to
132 | produce the work, or an object code interpreter used to run it.
133 | 
134 |   The "Corresponding Source" for a work in object code form means all
135 | the source code needed to generate, install, and (for an executable
136 | work) run the object code and to modify the work, including scripts to
137 | control those activities.  However, it does not include the work's
138 | System Libraries, or general-purpose tools or generally available free
139 | programs which are used unmodified in performing those activities but
140 | which are not part of the work.  For example, Corresponding Source
141 | includes interface definition files associated with source files for
142 | the work, and the source code for shared libraries and dynamically
143 | linked subprograms that the work is specifically designed to require,
144 | such as by intimate data communication or control flow between those
145 | subprograms and other parts of the work.
146 | 
147 |   The Corresponding Source need not include anything that users
148 | can regenerate automatically from other parts of the Corresponding
149 | Source.
150 | 
151 |   The Corresponding Source for a work in source code form is that
152 | same work.
153 | 
154 |   2. Basic Permissions.
155 | 
156 |   All rights granted under this License are granted for the term of
157 | copyright on the Program, and are irrevocable provided the stated
158 | conditions are met.  This License explicitly affirms your unlimited
159 | permission to run the unmodified Program.  The output from running a
160 | covered work is covered by this License only if the output, given its
161 | content, constitutes a covered work.  This License acknowledges your
162 | rights of fair use or other equivalent, as provided by copyright law.
163 | 
164 |   You may make, run and propagate covered works that you do not
165 | convey, without conditions so long as your license otherwise remains
166 | in force.  You may convey covered works to others for the sole purpose
167 | of having them make modifications exclusively for you, or provide you
168 | with facilities for running those works, provided that you comply with
169 | the terms of this License in conveying all material for which you do
170 | not control copyright.  Those thus making or running the covered works
171 | for you must do so exclusively on your behalf, under your direction
172 | and control, on terms that prohibit them from making any copies of
173 | your copyrighted material outside their relationship with you.
174 | 
175 |   Conveying under any other circumstances is permitted solely under
176 | the conditions stated below.  Sublicensing is not allowed; section 10
177 | makes it unnecessary.
178 | 
179 |   3. Protecting Users' Legal Rights From Anti-Circumvention Law.
180 | 
181 |   No covered work shall be deemed part of an effective technological
182 | measure under any applicable law fulfilling obligations under article
183 | 11 of the WIPO copyright treaty adopted on 20 December 1996, or
184 | similar laws prohibiting or restricting circumvention of such
185 | measures.
186 | 
187 |   When you convey a covered work, you waive any legal power to forbid
188 | circumvention of technological measures to the extent such circumvention
189 | is effected by exercising rights under this License with respect to
190 | the covered work, and you disclaim any intention to limit operation or
191 | modification of the work as a means of enforcing, against the work's
192 | users, your or third parties' legal rights to forbid circumvention of
193 | technological measures.
194 | 
195 |   4. Conveying Verbatim Copies.
196 | 
197 |   You may convey verbatim copies of the Program's source code as you
198 | receive it, in any medium, provided that you conspicuously and
199 | appropriately publish on each copy an appropriate copyright notice;
200 | keep intact all notices stating that this License and any
201 | non-permissive terms added in accord with section 7 apply to the code;
202 | keep intact all notices of the absence of any warranty; and give all
203 | recipients a copy of this License along with the Program.
204 | 
205 |   You may charge any price or no price for each copy that you convey,
206 | and you may offer support or warranty protection for a fee.
207 | 
208 |   5. Conveying Modified Source Versions.
209 | 
210 |   You may convey a work based on the Program, or the modifications to
211 | produce it from the Program, in the form of source code under the
212 | terms of section 4, provided that you also meet all of these conditions:
213 | 
214 |     a) The work must carry prominent notices stating that you modified
215 |     it, and giving a relevant date.
216 | 
217 |     b) The work must carry prominent notices stating that it is
218 |     released under this License and any conditions added under section
219 |     7.  This requirement modifies the requirement in section 4 to
220 |     "keep intact all notices".
221 | 
222 |     c) You must license the entire work, as a whole, under this
223 |     License to anyone who comes into possession of a copy.  This
224 |     License will therefore apply, along with any applicable section 7
225 |     additional terms, to the whole of the work, and all its parts,
226 |     regardless of how they are packaged.  This License gives no
227 |     permission to license the work in any other way, but it does not
228 |     invalidate such permission if you have separately received it.
229 | 
230 |     d) If the work has interactive user interfaces, each must display
231 |     Appropriate Legal Notices; however, if the Program has interactive
232 |     interfaces that do not display Appropriate Legal Notices, your
233 |     work need not make them do so.
234 | 
235 |   A compilation of a covered work with other separate and independent
236 | works, which are not by their nature extensions of the covered work,
237 | and which are not combined with it such as to form a larger program,
238 | in or on a volume of a storage or distribution medium, is called an
239 | "aggregate" if the compilation and its resulting copyright are not
240 | used to limit the access or legal rights of the compilation's users
241 | beyond what the individual works permit.  Inclusion of a covered work
242 | in an aggregate does not cause this License to apply to the other
243 | parts of the aggregate.
244 | 
245 |   6. Conveying Non-Source Forms.
246 | 
247 |   You may convey a covered work in object code form under the terms
248 | of sections 4 and 5, provided that you also convey the
249 | machine-readable Corresponding Source under the terms of this License,
250 | in one of these ways:
251 | 
252 |     a) Convey the object code in, or embodied in, a physical product
253 |     (including a physical distribution medium), accompanied by the
254 |     Corresponding Source fixed on a durable physical medium
255 |     customarily used for software interchange.
256 | 
257 |     b) Convey the object code in, or embodied in, a physical product
258 |     (including a physical distribution medium), accompanied by a
259 |     written offer, valid for at least three years and valid for as
260 |     long as you offer spare parts or customer support for that product
261 |     model, to give anyone who possesses the object code either (1) a
262 |     copy of the Corresponding Source for all the software in the
263 |     product that is covered by this License, on a durable physical
264 |     medium customarily used for software interchange, for a price no
265 |     more than your reasonable cost of physically performing this
266 |     conveying of source, or (2) access to copy the
267 |     Corresponding Source from a network server at no charge.
268 | 
269 |     c) Convey individual copies of the object code with a copy of the
270 |     written offer to provide the Corresponding Source.  This
271 |     alternative is allowed only occasionally and noncommercially, and
272 |     only if you received the object code with such an offer, in accord
273 |     with subsection 6b.
274 | 
275 |     d) Convey the object code by offering access from a designated
276 |     place (gratis or for a charge), and offer equivalent access to the
277 |     Corresponding Source in the same way through the same place at no
278 |     further charge.  You need not require recipients to copy the
279 |     Corresponding Source along with the object code.  If the place to
280 |     copy the object code is a network server, the Corresponding Source
281 |     may be on a different server (operated by you or a third party)
282 |     that supports equivalent copying facilities, provided you maintain
283 |     clear directions next to the object code saying where to find the
284 |     Corresponding Source.  Regardless of what server hosts the
285 |     Corresponding Source, you remain obligated to ensure that it is
286 |     available for as long as needed to satisfy these requirements.
287 | 
288 |     e) Convey the object code using peer-to-peer transmission, provided
289 |     you inform other peers where the object code and Corresponding
290 |     Source of the work are being offered to the general public at no
291 |     charge under subsection 6d.
292 | 
293 |   A separable portion of the object code, whose source code is excluded
294 | from the Corresponding Source as a System Library, need not be
295 | included in conveying the object code work.
296 | 
297 |   A "User Product" is either (1) a "consumer product", which means any
298 | tangible personal property which is normally used for personal, family,
299 | or household purposes, or (2) anything designed or sold for incorporation
300 | into a dwelling.  In determining whether a product is a consumer product,
301 | doubtful cases shall be resolved in favor of coverage.  For a particular
302 | product received by a particular user, "normally used" refers to a
303 | typical or common use of that class of product, regardless of the status
304 | of the particular user or of the way in which the particular user
305 | actually uses, or expects or is expected to use, the product.  A product
306 | is a consumer product regardless of whether the product has substantial
307 | commercial, industrial or non-consumer uses, unless such uses represent
308 | the only significant mode of use of the product.
309 | 
310 |   "Installation Information" for a User Product means any methods,
311 | procedures, authorization keys, or other information required to install
312 | and execute modified versions of a covered work in that User Product from
313 | a modified version of its Corresponding Source.  The information must
314 | suffice to ensure that the continued functioning of the modified object
315 | code is in no case prevented or interfered with solely because
316 | modification has been made.
317 | 
318 |   If you convey an object code work under this section in, or with, or
319 | specifically for use in, a User Product, and the conveying occurs as
320 | part of a transaction in which the right of possession and use of the
321 | User Product is transferred to the recipient in perpetuity or for a
322 | fixed term (regardless of how the transaction is characterized), the
323 | Corresponding Source conveyed under this section must be accompanied
324 | by the Installation Information.  But this requirement does not apply
325 | if neither you nor any third party retains the ability to install
326 | modified object code on the User Product (for example, the work has
327 | been installed in ROM).
328 | 
329 |   The requirement to provide Installation Information does not include a
330 | requirement to continue to provide support service, warranty, or updates
331 | for a work that has been modified or installed by the recipient, or for
332 | the User Product in which it has been modified or installed.  Access to a
333 | network may be denied when the modification itself materially and
334 | adversely affects the operation of the network or violates the rules and
335 | protocols for communication across the network.
336 | 
337 |   Corresponding Source conveyed, and Installation Information provided,
338 | in accord with this section must be in a format that is publicly
339 | documented (and with an implementation available to the public in
340 | source code form), and must require no special password or key for
341 | unpacking, reading or copying.
342 | 
343 |   7. Additional Terms.
344 | 
345 |   "Additional permissions" are terms that supplement the terms of this
346 | License by making exceptions from one or more of its conditions.
347 | Additional permissions that are applicable to the entire Program shall
348 | be treated as though they were included in this License, to the extent
349 | that they are valid under applicable law.  If additional permissions
350 | apply only to part of the Program, that part may be used separately
351 | under those permissions, but the entire Program remains governed by
352 | this License without regard to the additional permissions.
353 | 
354 |   When you convey a copy of a covered work, you may at your option
355 | remove any additional permissions from that copy, or from any part of
356 | it.  (Additional permissions may be written to require their own
357 | removal in certain cases when you modify the work.)  You may place
358 | additional permissions on material, added by you to a covered work,
359 | for which you have or can give appropriate copyright permission.
360 | 
361 |   Notwithstanding any other provision of this License, for material you
362 | add to a covered work, you may (if authorized by the copyright holders of
363 | that material) supplement the terms of this License with terms:
364 | 
365 |     a) Disclaiming warranty or limiting liability differently from the
366 |     terms of sections 15 and 16 of this License; or
367 | 
368 |     b) Requiring preservation of specified reasonable legal notices or
369 |     author attributions in that material or in the Appropriate Legal
370 |     Notices displayed by works containing it; or
371 | 
372 |     c) Prohibiting misrepresentation of the origin of that material, or
373 |     requiring that modified versions of such material be marked in
374 |     reasonable ways as different from the original version; or
375 | 
376 |     d) Limiting the use for publicity purposes of names of licensors or
377 |     authors of the material; or
378 | 
379 |     e) Declining to grant rights under trademark law for use of some
380 |     trade names, trademarks, or service marks; or
381 | 
382 |     f) Requiring indemnification of licensors and authors of that
383 |     material by anyone who conveys the material (or modified versions of
384 |     it) with contractual assumptions of liability to the recipient, for
385 |     any liability that these contractual assumptions directly impose on
386 |     those licensors and authors.
387 | 
388 |   All other non-permissive additional terms are considered "further
389 | restrictions" within the meaning of section 10.  If the Program as you
390 | received it, or any part of it, contains a notice stating that it is
391 | governed by this License along with a term that is a further
392 | restriction, you may remove that term.  If a license document contains
393 | a further restriction but permits relicensing or conveying under this
394 | License, you may add to a covered work material governed by the terms
395 | of that license document, provided that the further restriction does
396 | not survive such relicensing or conveying.
397 | 
398 |   If you add terms to a covered work in accord with this section, you
399 | must place, in the relevant source files, a statement of the
400 | additional terms that apply to those files, or a notice indicating
401 | where to find the applicable terms.
402 | 
403 |   Additional terms, permissive or non-permissive, may be stated in the
404 | form of a separately written license, or stated as exceptions;
405 | the above requirements apply either way.
406 | 
407 |   8. Termination.
408 | 
409 |   You may not propagate or modify a covered work except as expressly
410 | provided under this License.  Any attempt otherwise to propagate or
411 | modify it is void, and will automatically terminate your rights under
412 | this License (including any patent licenses granted under the third
413 | paragraph of section 11).
414 | 
415 |   However, if you cease all violation of this License, then your
416 | license from a particular copyright holder is reinstated (a)
417 | provisionally, unless and until the copyright holder explicitly and
418 | finally terminates your license, and (b) permanently, if the copyright
419 | holder fails to notify you of the violation by some reasonable means
420 | prior to 60 days after the cessation.
421 | 
422 |   Moreover, your license from a particular copyright holder is
423 | reinstated permanently if the copyright holder notifies you of the
424 | violation by some reasonable means, this is the first time you have
425 | received notice of violation of this License (for any work) from that
426 | copyright holder, and you cure the violation prior to 30 days after
427 | your receipt of the notice.
428 | 
429 |   Termination of your rights under this section does not terminate the
430 | licenses of parties who have received copies or rights from you under
431 | this License.  If your rights have been terminated and not permanently
432 | reinstated, you do not qualify to receive new licenses for the same
433 | material under section 10.
434 | 
435 |   9. Acceptance Not Required for Having Copies.
436 | 
437 |   You are not required to accept this License in order to receive or
438 | run a copy of the Program.  Ancillary propagation of a covered work
439 | occurring solely as a consequence of using peer-to-peer transmission
440 | to receive a copy likewise does not require acceptance.  However,
441 | nothing other than this License grants you permission to propagate or
442 | modify any covered work.  These actions infringe copyright if you do
443 | not accept this License.  Therefore, by modifying or propagating a
444 | covered work, you indicate your acceptance of this License to do so.
445 | 
446 |   10. Automatic Licensing of Downstream Recipients.
447 | 
448 |   Each time you convey a covered work, the recipient automatically
449 | receives a license from the original licensors, to run, modify and
450 | propagate that work, subject to this License.  You are not responsible
451 | for enforcing compliance by third parties with this License.
452 | 
453 |   An "entity transaction" is a transaction transferring control of an
454 | organization, or substantially all assets of one, or subdividing an
455 | organization, or merging organizations.  If propagation of a covered
456 | work results from an entity transaction, each party to that
457 | transaction who receives a copy of the work also receives whatever
458 | licenses to the work the party's predecessor in interest had or could
459 | give under the previous paragraph, plus a right to possession of the
460 | Corresponding Source of the work from the predecessor in interest, if
461 | the predecessor has it or can get it with reasonable efforts.
462 | 
463 |   You may not impose any further restrictions on the exercise of the
464 | rights granted or affirmed under this License.  For example, you may
465 | not impose a license fee, royalty, or other charge for exercise of
466 | rights granted under this License, and you may not initiate litigation
467 | (including a cross-claim or counterclaim in a lawsuit) alleging that
468 | any patent claim is infringed by making, using, selling, offering for
469 | sale, or importing the Program or any portion of it.
470 | 
471 |   11. Patents.
472 | 
473 |   A "contributor" is a copyright holder who authorizes use under this
474 | License of the Program or a work on which the Program is based.  The
475 | work thus licensed is called the contributor's "contributor version".
476 | 
477 |   A contributor's "essential patent claims" are all patent claims
478 | owned or controlled by the contributor, whether already acquired or
479 | hereafter acquired, that would be infringed by some manner, permitted
480 | by this License, of making, using, or selling its contributor version,
481 | but do not include claims that would be infringed only as a
482 | consequence of further modification of the contributor version.  For
483 | purposes of this definition, "control" includes the right to grant
484 | patent sublicenses in a manner consistent with the requirements of
485 | this License.
486 | 
487 |   Each contributor grants you a non-exclusive, worldwide, royalty-free
488 | patent license under the contributor's essential patent claims, to
489 | make, use, sell, offer for sale, import and otherwise run, modify and
490 | propagate the contents of its contributor version.
491 | 
492 |   In the following three paragraphs, a "patent license" is any express
493 | agreement or commitment, however denominated, not to enforce a patent
494 | (such as an express permission to practice a patent or covenant not to
495 | sue for patent infringement).  To "grant" such a patent license to a
496 | party means to make such an agreement or commitment not to enforce a
497 | patent against the party.
498 | 
499 |   If you convey a covered work, knowingly relying on a patent license,
500 | and the Corresponding Source of the work is not available for anyone
501 | to copy, free of charge and under the terms of this License, through a
502 | publicly available network server or other readily accessible means,
503 | then you must either (1) cause the Corresponding Source to be so
504 | available, or (2) arrange to deprive yourself of the benefit of the
505 | patent license for this particular work, or (3) arrange, in a manner
506 | consistent with the requirements of this License, to extend the patent
507 | license to downstream recipients.  "Knowingly relying" means you have
508 | actual knowledge that, but for the patent license, your conveying the
509 | covered work in a country, or your recipient's use of the covered work
510 | in a country, would infringe one or more identifiable patents in that
511 | country that you have reason to believe are valid.
512 | 
513 |   If, pursuant to or in connection with a single transaction or
514 | arrangement, you convey, or propagate by procuring conveyance of, a
515 | covered work, and grant a patent license to some of the parties
516 | receiving the covered work authorizing them to use, propagate, modify
517 | or convey a specific copy of the covered work, then the patent license
518 | you grant is automatically extended to all recipients of the covered
519 | work and works based on it.
520 | 
521 |   A patent license is "discriminatory" if it does not include within
522 | the scope of its coverage, prohibits the exercise of, or is
523 | conditioned on the non-exercise of one or more of the rights that are
524 | specifically granted under this License.  You may not convey a covered
525 | work if you are a party to an arrangement with a third party that is
526 | in the business of distributing software, under which you make payment
527 | to the third party based on the extent of your activity of conveying
528 | the work, and under which the third party grants, to any of the
529 | parties who would receive the covered work from you, a discriminatory
530 | patent license (a) in connection with copies of the covered work
531 | conveyed by you (or copies made from those copies), or (b) primarily
532 | for and in connection with specific products or compilations that
533 | contain the covered work, unless you entered into that arrangement,
534 | or that patent license was granted, prior to 28 March 2007.
535 | 
536 |   Nothing in this License shall be construed as excluding or limiting
537 | any implied license or other defenses to infringement that may
538 | otherwise be available to you under applicable patent law.
539 | 
540 |   12. No Surrender of Others' Freedom.
541 | 
542 |   If conditions are imposed on you (whether by court order, agreement or
543 | otherwise) that contradict the conditions of this License, they do not
544 | excuse you from the conditions of this License.  If you cannot convey a
545 | covered work so as to satisfy simultaneously your obligations under this
546 | License and any other pertinent obligations, then as a consequence you may
547 | not convey it at all.  For example, if you agree to terms that obligate you
548 | to collect a royalty for further conveying from those to whom you convey
549 | the Program, the only way you could satisfy both those terms and this
550 | License would be to refrain entirely from conveying the Program.
551 | 
552 |   13. Use with the GNU Affero General Public License.
553 | 
554 |   Notwithstanding any other provision of this License, you have
555 | permission to link or combine any covered work with a work licensed
556 | under version 3 of the GNU Affero General Public License into a single
557 | combined work, and to convey the resulting work.  The terms of this
558 | License will continue to apply to the part which is the covered work,
559 | but the special requirements of the GNU Affero General Public License,
560 | section 13, concerning interaction through a network will apply to the
561 | combination as such.
562 | 
563 |   14. Revised Versions of this License.
564 | 
565 |   The Free Software Foundation may publish revised and/or new versions of
566 | the GNU General Public License from time to time.  Such new versions will
567 | be similar in spirit to the present version, but may differ in detail to
568 | address new problems or concerns.
569 | 
570 |   Each version is given a distinguishing version number.  If the
571 | Program specifies that a certain numbered version of the GNU General
572 | Public License "or any later version" applies to it, you have the
573 | option of following the terms and conditions either of that numbered
574 | version or of any later version published by the Free Software
575 | Foundation.  If the Program does not specify a version number of the
576 | GNU General Public License, you may choose any version ever published
577 | by the Free Software Foundation.
578 | 
579 |   If the Program specifies that a proxy can decide which future
580 | versions of the GNU General Public License can be used, that proxy's
581 | public statement of acceptance of a version permanently authorizes you
582 | to choose that version for the Program.
583 | 
584 |   Later license versions may give you additional or different
585 | permissions.  However, no additional obligations are imposed on any
586 | author or copyright holder as a result of your choosing to follow a
587 | later version.
588 | 
589 |   15. Disclaimer of Warranty.
590 | 
591 |   THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
592 | APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
593 | HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
594 | OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
595 | THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
596 | PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
597 | IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
598 | ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
599 | 
600 |   16. Limitation of Liability.
601 | 
602 |   IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
603 | WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
604 | THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
605 | GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
606 | USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
607 | DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
608 | PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
609 | EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
610 | SUCH DAMAGES.
611 | 
612 |   17. Interpretation of Sections 15 and 16.
613 | 
614 |   If the disclaimer of warranty and limitation of liability provided
615 | above cannot be given local legal effect according to their terms,
616 | reviewing courts shall apply local law that most closely approximates
617 | an absolute waiver of all civil liability in connection with the
618 | Program, unless a warranty or assumption of liability accompanies a
619 | copy of the Program in return for a fee.
620 | 
621 |                      END OF TERMS AND CONDITIONS
622 | 
623 |             How to Apply These Terms to Your New Programs
624 | 
625 |   If you develop a new program, and you want it to be of the greatest
626 | possible use to the public, the best way to achieve this is to make it
627 | free software which everyone can redistribute and change under these terms.
628 | 
629 |   To do so, attach the following notices to the program.  It is safest
630 | to attach them to the start of each source file to most effectively
631 | state the exclusion of warranty; and each file should have at least
632 | the "copyright" line and a pointer to where the full notice is found.
633 | 
634 |     <one line to give the program's name and a brief idea of what it does.>
635 |     Copyright (C) <year>  <name of author>
636 | 
637 |     This program is free software: you can redistribute it and/or modify
638 |     it under the terms of the GNU General Public License as published by
639 |     the Free Software Foundation, either version 3 of the License, or
640 |     (at your option) any later version.
641 | 
642 |     This program is distributed in the hope that it will be useful,
643 |     but WITHOUT ANY WARRANTY; without even the implied warranty of
644 |     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
645 |     GNU General Public License for more details.
646 | 
647 |     You should have received a copy of the GNU General Public License
648 |     along with this program.  If not, see <http://www.gnu.org/licenses/>.
649 | 
650 | Also add information on how to contact you by electronic and paper mail.
651 | 
652 |   If the program does terminal interaction, make it output a short
653 | notice like this when it starts in an interactive mode:
654 | 
655 |     <program>  Copyright (C) <year>  <name of author>
656 |     This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
657 |     This is free software, and you are welcome to redistribute it
658 |     under certain conditions; type `show c' for details.
659 | 
660 | The hypothetical commands `show w' and `show c' should show the appropriate
661 | parts of the General Public License.  Of course, your program's commands
662 | might be different; for a GUI interface, you would use an "about box".
663 | 
664 |   You should also get your employer (if you work as a programmer) or school,
665 | if any, to sign a "copyright disclaimer" for the program, if necessary.
666 | For more information on this, and how to apply and follow the GNU GPL, see
667 | <http://www.gnu.org/licenses/>.
668 | 
669 |   The GNU General Public License does not permit incorporating your program
670 | into proprietary programs.  If your program is a subroutine library, you
671 | may consider it more useful to permit linking proprietary applications with
672 | the library.  If this is what you want to do, use the GNU Lesser General
673 | Public License instead of this License.  But first, please read
674 | <http://www.gnu.org/philosophy/why-not-lgpl.html>.
675 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
  1 | # PHP AIO Security Class
  2 | 
  3 | **Version:** 0.2.8.183 beta
  4 | 
  5 | **Github:** https://github.com/marcocesarato/PHP-AIO-Security-Class
  6 | 
  7 | **Author:** Marco Cesarato
  8 | 
  9 | _IF YOU USE ON YOUR PROJECT SOME OF THESE METHODS PLEASE TO CREDIT ME :) THANK YOU!_
 10 | 
 11 | 
 12 | ## Description
 13 | 
 14 | This is a security class in php with some useful and automatic static methods. 
 15 | 
 16 | The objective of this class is offer an automatic system of protection for developer's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. In fact you could just call the main method to have better security yet without too much complicated operations.
 17 | 
 18 | 
 19 | ### Antimalware Scanner
 20 | 
 21 | Link Repository: https://github.com/marcocesarato/PHP-Antimalware-Scanner
 22 | 
 23 | 
 24 | ### Instructions
 25 | 
 26 | #### Composer
 27 | 1. Install composer
 28 | 2. Type `composer require marcocesarato/security`
 29 | 3. Go on `vendor/marcocesarato/security/` for have source
 30 | 5. Move `.htaccess` on your ROOT directory (or try to merge it with your `.htaccess`)
 31 | 6. Config the class
 32 | 7. Enjoy
 33 | 
 34 | #### Implementation
 35 | 
 36 | 1.1 - Include the class
 37 | 
 38 | ```php
 39 | use marcocesarato\security\Security;
 40 | ```
 41 | 
 42 | or 
 43 | 
 44 | ```php
 45 | include 'Security.php';
 46 | ```
 47 | 
 48 | 1.2 - Session store on database (Optional) (PDO/CPDO instances only)
 49 | 
 50 | ```php
 51 | $conn = new PDO(...);
 52 | Security::setDatabase($conn); // Or Security::$database = $conn;
 53 | ```
 54 | 
 55 | 2.0 - Just create a new object to be more at safe (the **constructor/putInSafety** filter \$_REQUEST and \$_GET globals, add some useful headers for security, check if there is an **Hijacking** and check the URL Request)
 56 | 
 57 | ```php
 58 | $isAPI = false; // default is FALSE (this remove some check that could block API request)
 59 | $security = new Security($isAPI);
 60 | ```
 61 | 
 62 | or just call
 63 | 
 64 | ```php
 65 | $isAPI = false; // default is FALSE
 66 | Security::putInSafety($isAPI);
 67 | ```
 68 | 
 69 | 
 70 | 
 71 | **NOTES:**
 72 | 
 73 | *<sup>1</sup> You can also call only the methods that you need instead this method*
 74 | 
 75 | *<sup>2</sup> Constructor and putInSafety are the **same** thing*
 76 | 
 77 | *<sup>3</sup> These methods call **session_start** then **don't** use it before/after*
 78 | 
 79 | *<sup>4</sup> global **$_POST** is not filtered. If you dont enable the cleanGlobals feature on settings*
 80 | 
 81 | 
 82 | 
 83 | All the uncleaned data can be recovered calling the following globals:
 84 | 
 85 | ```php
 86 | $GLOBALS['UNSAFE_SERVER'] = $_SERVER;
 87 | $GLOBALS['UNSAFE_COOKIE'] = $_COOKIE;
 88 | $GLOBALS['UNSAFE_GET'] = $_GET;
 89 | $GLOBALS['UNSAFE_POST'] = $_POST;
 90 | $GLOBALS['UNSAFE_REQUEST'] = $_REQUEST;
 91 | ```
 92 | 
 93 | 
 94 | 
 95 | 3 - Prevent **XSS/SQL Injection** on your variables with:
 96 | 
 97 | ```php
 98 | $is_html = true;        // default is TRUE
 99 | $have_quotes = true;    // default is TRUE
100 | $escape_string = true;  // default is TRUE except if you set FALSE in class config
101 | $var = Security::clean($_POST['var'], $is_html, $have_quotes, $escape_string);
102 | echo $var; 
103 | ```
104 | or 
105 | 
106 | ```php
107 | Security::cleanGlobals();
108 | ```
109 | 
110 | __PS:__ THIS COULD COMPROMISE DATA IF YOU SEND HTML WITH SCRIPT TAGS
111 | 
112 | _send with htmlentities could be a solution if you want inline js and clean globals at the same time_
113 | 
114 | 
115 | 
116 | 4 - Use **output** method to filter your output (it also check for **CSRF**)
117 | 
118 | ```php
119 | ob_start()
120 |     
121 | // ... Your code ...
122 |     
123 | echo Security::output(ob_get_clean());
124 | ```
125 | 
126 | Enjoy!
127 | 
128 | ## Options
129 | These are the options availables:
130 | 
131 | __PS:__ *You can change the configuration as following for each parameters or simply editing the var directly on the class file:*
132 | 
133 | ```php
134 | Security::$session_name = "MYSESSID";
135 | ```
136 | 
137 | 
138 | ### Configs
139 | 
140 | |  Option | Description | Default |
141 | | --- | --- | --- |
142 | |  $basedir | Project basedir where is located .htaccess | \_\_DIR\_\_ |
143 | |  $salt | Salt for crypt | "_SALT" |
144 | |  $session_name | Session cookie name | "XSESSID" |
145 | |  $session_lifetime | Session lifetime | "288000" (8 hours) |
146 | |  $session_regenerate_id | Regenerate session id | FALSE |
147 | |  $session_database | Store sessions on database | FALSE |
148 | |  $csrf_session | CSRF session token name | "_CSRFTOKEN" |
149 | |  $csrf_formtoken | CSRF form token input name |  "_FORMTOKEN" |
150 | |  $headers_cache | Enable header cache | TRUE |
151 | |  $cookies_encrypted | Encrypt cookies \[PHP 5.3+\] | FALSE |
152 | |  $cookies_enc_prefix | Cookies encrypted prefix | "SEC_" |
153 | |  $headers_cache_days | Cache on NO HTML response (set 0 to disable) | 30 |
154 | |  $escape_string | If you use PDO I recommend to set this to false | TRUE |
155 | |  $clean_post_xss | Remove XSS on post global | TRUE |
156 | |  $compress_output | Compress output | TRUE |
157 | |  $force_https | Force HTTPS (recommended if you have https) | FALSE |
158 | |  $hide_errors | Hide php errors (useful for hide vulnerabilities) | TRUE |
159 | |  $database | PDO instance for store sessions if enabled before | null |
160 | 
161 | ### Autostart
162 | 
163 | |  Option | Description | Default |
164 | | --- | --- | --- |
165 | |  $auto_session_manager | Run session at start | TRUE |
166 | |  $auto_cookies_decrypt | Auto encrypt cookies \[PHP 5.3+\] | FALSE |
167 | |  $auto_block_tor | If you want block TOR clients | TRUE |
168 | |  $auto_csrf | If you want enable CSRF (need use ::output method) | FALSE |
169 | |  $auto_clean_global | Global clean at start | FALSE |
170 | |  $auto_antidos | Block the client ip when there are too many requests | TRUE |
171 | 
172 | ### Error template
173 | ```php
174 | // Error Template
175 | $error_callback = null; // Set a callback on errors
176 | $error_template = '<html><head><title>${ERROR_TITLE}</title></head><body>${ERROR_BODY}</body></html>';
177 | ```
178 | 
179 | ## Methods available:
180 | 
181 | ### Generic Methods
182 | 
183 | | Method                    | Params             | Return | Description                                                  |
184 | | ------------------------- | ------------------ | ------ | ------------------------------------------------------------ |
185 | | setDatabase               | $conn              | Void   | Set PDO datbase instance for store sessions (only if enabled)                                              |
186 | | __construct / putInSafety | $isAPI = false     | Void   | Call some methods:<br /><br />headers `$isAPI`<br />secureSession `$isAPI`<br />secureFormRequest `$isAPI`<br />secureBots<br />secureRequest<br />secureBlockTor<br />secureHijacking<br />secureCookies |
187 | | secureCSRF                | -                  | Void   | Check for CSRF                                               |
188 | | secureCSRFCompare         | \$key = '', \$input_name = null| Bool   | Compare CSRF Token                                              |
189 | | secureCSRFGenerate        | \$key = ''         | String | Generate CSRF Token                                               |
190 | | secureCSRFToken           | \$key = ''         | String | Get CSRF Token                                               |
191 | | secureRequest             | -                  | Void   | Enable the WAF (Firewall) then check the request method and the URL to prevent some XSS/SQL Injections and bad requests |
192 | | secureFormRequest         | $isAPI = false     | Void   | Check if the form origin come from the same website          |
193 | | secureSession             | -                  | Void   | Set custom session name for prevent fast identification of php and add some secure param to session cookie. PS: This method call `session_start` |
194 | | headers                   | $isAPI = false     | Void   | Set some secure headers (to prevent some XSS, Clickjacking and others bad requests) and secure php setting |
195 | | headersCache              | $cache_days = null | Void   | Set cache headers                                            |
196 | | secureCookies             | -                  | Void   | Set some secure parameter on cookies (autoencryption soon...) |
197 | | secureDOS                 | -                  | Void   | Block clients that do too much requests (after 10 requests within 1.5 seconds consecutive detect a DOS attempt, the first 4 times the client must wait 10 seconds after that its IP will be banned from the server) |
198 | | secureBlockBots           | -                  | Void   | Block some generic bad bots/crawler/spiders                  |
199 | | secureBlockTor            | -                  | Void   | Block TOR clients                                            |
200 | | secureHijacking           | -                  | Void   | Prevent Hijacking and delete session                         |
201 | 
202 | ### Utility Methods
203 | 
204 | | Method                   | Params                                                       | Return  | Description                                                  |
205 | | ------------------------ | ------------------------------------------------------------ | ------- | ------------------------------------------------------------ |
206 | | encrypt                  | \$string, \$key = null                                       | String  | Encrypt strings                                              |
207 | | decrypt                  | \$string, \$key = null                                       | String  | Decrypt strings                                              |
208 | | generateGUID             | -                                                            | String  | Generate a GUID                                              |
209 | | generatePassword         | \$length = 8, \$available_sets = 'luns'<br /><br />(l = lowercase, u = uppercase, n = numbers, s = special chars) | String  | Generate a completly random and strong password              |
210 | | generateFriendlyPassword | \$string, \$strong_lv = 1                                    | String  | Generate a user friendly random password. Strong level go from 0 to 2.<br /><br />EXAMPLE: <br />Marco Cesarato 1996 <br />Ce$Ar4t0_m4RCo_1996 |
211 | | passwordHash             | \$password, \$cost = 10 (4-30)                               | String  | Hash the passwords                                           |
212 | | passwordVerify           | \$password, \$hash                                           | Boolean | Verify if password hash (returned by passwordHash) match     |
213 | | passwordStrength         | \$password                                                   | Integer | Return password strength score from 0 to 10 (under 6 is a bad score) |
214 | | getCookie                | $name                                                        | String  | Get decrypted cookie                                         |
215 | | setCookie                | \$name, \$value, \$expires = 2592000, \$path = "/", \$domain = null, \$secure = false, \$httponly = true | Boolean | Set encrypted cookie                                         |
216 | | checkHTTPS               | -                                                            | Boolean | Check if site is running over https                          |
217 | | unsetCookie              | $name                                                        | String  | Unset a cookie                                               |
218 | | clientIP                 | -                                                            | String  | Get real client IP address                                   |
219 | | clientIPs                | -                                                            | Array   | Get all client IP addresses                                  |
220 | | clientIsTor              | -                                                            | Boolean | Check if client use TOR                                      |
221 | | secureJSONP              | \$json, \$callback                                           | String  | Prevent malicious callbacks from being used in JSONP requests. |
222 | | secureDownload           | \$filename, $name = null                                     | Void    | Secure headers for download request                          |
223 | | isInfectedFavicon        | \$file                                               | Boolean | Return if is an infected favicon file                                        |
224 | | isInfectedFile           | \$file                                               | Boolean | Return if is an infected php file                                     |
225 | | secureUpload             | \$file, \$destination                                               | Boolean | File upload with scan                                        |
226 | | environmentCheck         | -                                                            | Array   | Check environment configuration and return the current and the recommended php.ini configuration |
227 | 
228 | ### Cleaning Methods
229 | 
230 | | Method           | Params                                               | Return | Description                                                  |
231 | | ---------------- | ---------------------------------------------------- | ------ | ------------------------------------------------------------ |
232 | | clean            | \$data, \$html = true, \$quotes = true, \$xss = true | Mixed  | Clean value form XSS, SQL Injection etc… recursively         |
233 | | cleanGlobals     | -                                                    | Void   | Clean all input global vars (\$\__REQUEST,\$\__*POST,*\$\__GET,_\$\_COOKIE)<br />THIS COULD COMPROMISE SOME DATA |
234 | | restoreGlobals   | -                                                    | Void   | Restore globals to uncleaned/unsafe globals                  |
235 | | debugGlobals     | -                                                    | Array  | Return an array with the safe, unsafe and the current globals, this is userful for comparing |
236 | | escapeXSS        | $data                                                | Mixed  | Clean value from XSS recursively                             |
237 | | escapeSQL        | $data                                                | Mixed  | Clean from SQL Injection (similar at mysql_real_escape) recursively |
238 | | escapeAttr       | $data                                                | Mixed  | Escape for HTML attribute values<br />`<html attr="&quot;">`  recursively |
239 | | stripTags        | $data                                                | Mixed  | Strip tags recursively                                       |
240 | | stripTagsContent | \$data, \$tags = '', \$invert = false                | Mixed  | Strip tags and contents recursively                          |
241 | | trim             | $data                                                | Mixed  | Trim recursively                                             |
242 | | stripslashes     | $data                                                | Mixed  | Strip slashes recursively                                    |
243 | 
244 | ### Output Methods
245 | 
246 | | Method         | Params                                                       | Return | Description                                                  |
247 | | -------------- | ------------------------------------------------------------ | ------ | ------------------------------------------------------------ |
248 | | output         | \$buffer, \$type = (html\|css\|js\|json\|xml\|csv\|txt), $cache_days = null, \$compress = true | String | Put in safety HTML if is HTML, compress HTML if is HTML, check for CSRF and add cache headers if isn't HTML (usually used with ob_start) |
249 | | secureHTML     | $buffer                                                      | String | Put in safety some html elements, block old browsers console scripts executions on output buffer and add automatically the CSRF token |
250 | | captcha        | $base64 = false                                              | Void   | Print captcha image and die or if base64 return the image in base64. |
251 | | captchaVerify  | \$input_name = 'captcha'                                     | Void   | Validate captcha                                             |
252 | | captchaPrint   | \$class = '', \$input_name = 'captcha'                       | String | Return the captcha input field and the image in html         |
253 | | captchaCode    | -                                                            | String | Get captcha code                                             |
254 | | compressOutput | $buffer                                                      | String | Compression generic                                          |
255 | | compressHTML   | $html                                                        | String | Compression of HTML                                          |
256 | | compressJS     | $js                                                          | String | Compression of JS                                            |
257 | | compressCSS    | $css                                                         | String | Compression of CSS                                           |
258 | | error          | \$code = 404, \$message = "Not found!", \$title = 'Error'    | Void   | Error <br />(use \$error_template and \$error_callback)      |
259 | 
260 | ## Screenshots
261 | 
262 | ![XSSBlock](screenshots/xssblock_screen.png)


--------------------------------------------------------------------------------
/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "marcocesarato/security",
 3 |   "description": "AIO Security Class offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.",
 4 |   "type": "console",
 5 |   "license": "GPL-3.0-or-later",
 6 |   "minimum-stability": "stable",
 7 |   "authors": [
 8 |     {
 9 |       "name": "Marco Cesarato",
10 |       "email": "cesarato.developer@gmail.com"
11 |     }
12 |   ],
13 |   "autoload": {
14 |     "psr-4": {
15 |       "marcocesarato\\security\\": "src"
16 |     }
17 |   },
18 |   "scripts": {
19 |     "fix-cs": "vendor/bin/php-cs-fixer fix --config=.php_cs"
20 |   },
21 |   "require-dev": {
22 |     "friendsofphp/php-cs-fixer": "^3.0"
23 |   },
24 |   "require": {
25 |     "php": ">=7.0",
26 |     "ext-dom": "*",
27 |     "ext-libxml": "*",
28 |     "ext-gd": "*",
29 |     "ext-fileinfo": "*",
30 |     "ext-openssl": "*",
31 |     "ext-json": "*",
32 |     "ext-pdo": "*"
33 |   }
34 | }
35 | 


--------------------------------------------------------------------------------
/composer.lock:
--------------------------------------------------------------------------------
   1 | {
   2 |     "_readme": [
   3 |         "This file locks the dependencies of your project to a known state",
   4 |         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
   5 |         "This file is @generated automatically"
   6 |     ],
   7 |     "content-hash": "161d0bb10fd6b937546ff610d52f7873",
   8 |     "packages": [],
   9 |     "packages-dev": [
  10 |         {
  11 |             "name": "composer/pcre",
  12 |             "version": "3.1.0",
  13 |             "source": {
  14 |                 "type": "git",
  15 |                 "url": "https://github.com/composer/pcre.git",
  16 |                 "reference": "4bff79ddd77851fe3cdd11616ed3f92841ba5bd2"
  17 |             },
  18 |             "dist": {
  19 |                 "type": "zip",
  20 |                 "url": "https://api.github.com/repos/composer/pcre/zipball/4bff79ddd77851fe3cdd11616ed3f92841ba5bd2",
  21 |                 "reference": "4bff79ddd77851fe3cdd11616ed3f92841ba5bd2",
  22 |                 "shasum": ""
  23 |             },
  24 |             "require": {
  25 |                 "php": "^7.4 || ^8.0"
  26 |             },
  27 |             "require-dev": {
  28 |                 "phpstan/phpstan": "^1.3",
  29 |                 "phpstan/phpstan-strict-rules": "^1.1",
  30 |                 "symfony/phpunit-bridge": "^5"
  31 |             },
  32 |             "type": "library",
  33 |             "extra": {
  34 |                 "branch-alias": {
  35 |                     "dev-main": "3.x-dev"
  36 |                 }
  37 |             },
  38 |             "autoload": {
  39 |                 "psr-4": {
  40 |                     "Composer\\Pcre\\": "src"
  41 |                 }
  42 |             },
  43 |             "notification-url": "https://packagist.org/downloads/",
  44 |             "license": [
  45 |                 "MIT"
  46 |             ],
  47 |             "authors": [
  48 |                 {
  49 |                     "name": "Jordi Boggiano",
  50 |                     "email": "j.boggiano@seld.be",
  51 |                     "homepage": "http://seld.be"
  52 |                 }
  53 |             ],
  54 |             "description": "PCRE wrapping library that offers type-safe preg_* replacements.",
  55 |             "keywords": [
  56 |                 "PCRE",
  57 |                 "preg",
  58 |                 "regex",
  59 |                 "regular expression"
  60 |             ],
  61 |             "support": {
  62 |                 "issues": "https://github.com/composer/pcre/issues",
  63 |                 "source": "https://github.com/composer/pcre/tree/3.1.0"
  64 |             },
  65 |             "funding": [
  66 |                 {
  67 |                     "url": "https://packagist.com",
  68 |                     "type": "custom"
  69 |                 },
  70 |                 {
  71 |                     "url": "https://github.com/composer",
  72 |                     "type": "github"
  73 |                 },
  74 |                 {
  75 |                     "url": "https://tidelift.com/funding/github/packagist/composer/composer",
  76 |                     "type": "tidelift"
  77 |                 }
  78 |             ],
  79 |             "time": "2022-11-17T09:50:14+00:00"
  80 |         },
  81 |         {
  82 |             "name": "composer/semver",
  83 |             "version": "3.3.2",
  84 |             "source": {
  85 |                 "type": "git",
  86 |                 "url": "https://github.com/composer/semver.git",
  87 |                 "reference": "3953f23262f2bff1919fc82183ad9acb13ff62c9"
  88 |             },
  89 |             "dist": {
  90 |                 "type": "zip",
  91 |                 "url": "https://api.github.com/repos/composer/semver/zipball/3953f23262f2bff1919fc82183ad9acb13ff62c9",
  92 |                 "reference": "3953f23262f2bff1919fc82183ad9acb13ff62c9",
  93 |                 "shasum": ""
  94 |             },
  95 |             "require": {
  96 |                 "php": "^5.3.2 || ^7.0 || ^8.0"
  97 |             },
  98 |             "require-dev": {
  99 |                 "phpstan/phpstan": "^1.4",
 100 |                 "symfony/phpunit-bridge": "^4.2 || ^5"
 101 |             },
 102 |             "type": "library",
 103 |             "extra": {
 104 |                 "branch-alias": {
 105 |                     "dev-main": "3.x-dev"
 106 |                 }
 107 |             },
 108 |             "autoload": {
 109 |                 "psr-4": {
 110 |                     "Composer\\Semver\\": "src"
 111 |                 }
 112 |             },
 113 |             "notification-url": "https://packagist.org/downloads/",
 114 |             "license": [
 115 |                 "MIT"
 116 |             ],
 117 |             "authors": [
 118 |                 {
 119 |                     "name": "Nils Adermann",
 120 |                     "email": "naderman@naderman.de",
 121 |                     "homepage": "http://www.naderman.de"
 122 |                 },
 123 |                 {
 124 |                     "name": "Jordi Boggiano",
 125 |                     "email": "j.boggiano@seld.be",
 126 |                     "homepage": "http://seld.be"
 127 |                 },
 128 |                 {
 129 |                     "name": "Rob Bast",
 130 |                     "email": "rob.bast@gmail.com",
 131 |                     "homepage": "http://robbast.nl"
 132 |                 }
 133 |             ],
 134 |             "description": "Semver library that offers utilities, version constraint parsing and validation.",
 135 |             "keywords": [
 136 |                 "semantic",
 137 |                 "semver",
 138 |                 "validation",
 139 |                 "versioning"
 140 |             ],
 141 |             "support": {
 142 |                 "irc": "irc://irc.freenode.org/composer",
 143 |                 "issues": "https://github.com/composer/semver/issues",
 144 |                 "source": "https://github.com/composer/semver/tree/3.3.2"
 145 |             },
 146 |             "funding": [
 147 |                 {
 148 |                     "url": "https://packagist.com",
 149 |                     "type": "custom"
 150 |                 },
 151 |                 {
 152 |                     "url": "https://github.com/composer",
 153 |                     "type": "github"
 154 |                 },
 155 |                 {
 156 |                     "url": "https://tidelift.com/funding/github/packagist/composer/composer",
 157 |                     "type": "tidelift"
 158 |                 }
 159 |             ],
 160 |             "time": "2022-04-01T19:23:25+00:00"
 161 |         },
 162 |         {
 163 |             "name": "composer/xdebug-handler",
 164 |             "version": "3.0.3",
 165 |             "source": {
 166 |                 "type": "git",
 167 |                 "url": "https://github.com/composer/xdebug-handler.git",
 168 |                 "reference": "ced299686f41dce890debac69273b47ffe98a40c"
 169 |             },
 170 |             "dist": {
 171 |                 "type": "zip",
 172 |                 "url": "https://api.github.com/repos/composer/xdebug-handler/zipball/ced299686f41dce890debac69273b47ffe98a40c",
 173 |                 "reference": "ced299686f41dce890debac69273b47ffe98a40c",
 174 |                 "shasum": ""
 175 |             },
 176 |             "require": {
 177 |                 "composer/pcre": "^1 || ^2 || ^3",
 178 |                 "php": "^7.2.5 || ^8.0",
 179 |                 "psr/log": "^1 || ^2 || ^3"
 180 |             },
 181 |             "require-dev": {
 182 |                 "phpstan/phpstan": "^1.0",
 183 |                 "phpstan/phpstan-strict-rules": "^1.1",
 184 |                 "symfony/phpunit-bridge": "^6.0"
 185 |             },
 186 |             "type": "library",
 187 |             "autoload": {
 188 |                 "psr-4": {
 189 |                     "Composer\\XdebugHandler\\": "src"
 190 |                 }
 191 |             },
 192 |             "notification-url": "https://packagist.org/downloads/",
 193 |             "license": [
 194 |                 "MIT"
 195 |             ],
 196 |             "authors": [
 197 |                 {
 198 |                     "name": "John Stevenson",
 199 |                     "email": "john-stevenson@blueyonder.co.uk"
 200 |                 }
 201 |             ],
 202 |             "description": "Restarts a process without Xdebug.",
 203 |             "keywords": [
 204 |                 "Xdebug",
 205 |                 "performance"
 206 |             ],
 207 |             "support": {
 208 |                 "irc": "irc://irc.freenode.org/composer",
 209 |                 "issues": "https://github.com/composer/xdebug-handler/issues",
 210 |                 "source": "https://github.com/composer/xdebug-handler/tree/3.0.3"
 211 |             },
 212 |             "funding": [
 213 |                 {
 214 |                     "url": "https://packagist.com",
 215 |                     "type": "custom"
 216 |                 },
 217 |                 {
 218 |                     "url": "https://github.com/composer",
 219 |                     "type": "github"
 220 |                 },
 221 |                 {
 222 |                     "url": "https://tidelift.com/funding/github/packagist/composer/composer",
 223 |                     "type": "tidelift"
 224 |                 }
 225 |             ],
 226 |             "time": "2022-02-25T21:32:43+00:00"
 227 |         },
 228 |         {
 229 |             "name": "doctrine/annotations",
 230 |             "version": "2.0.1",
 231 |             "source": {
 232 |                 "type": "git",
 233 |                 "url": "https://github.com/doctrine/annotations.git",
 234 |                 "reference": "e157ef3f3124bbf6fe7ce0ffd109e8a8ef284e7f"
 235 |             },
 236 |             "dist": {
 237 |                 "type": "zip",
 238 |                 "url": "https://api.github.com/repos/doctrine/annotations/zipball/e157ef3f3124bbf6fe7ce0ffd109e8a8ef284e7f",
 239 |                 "reference": "e157ef3f3124bbf6fe7ce0ffd109e8a8ef284e7f",
 240 |                 "shasum": ""
 241 |             },
 242 |             "require": {
 243 |                 "doctrine/lexer": "^2 || ^3",
 244 |                 "ext-tokenizer": "*",
 245 |                 "php": "^7.2 || ^8.0",
 246 |                 "psr/cache": "^1 || ^2 || ^3"
 247 |             },
 248 |             "require-dev": {
 249 |                 "doctrine/cache": "^2.0",
 250 |                 "doctrine/coding-standard": "^10",
 251 |                 "phpstan/phpstan": "^1.8.0",
 252 |                 "phpunit/phpunit": "^7.5 || ^8.5 || ^9.5",
 253 |                 "symfony/cache": "^5.4 || ^6",
 254 |                 "vimeo/psalm": "^4.10"
 255 |             },
 256 |             "suggest": {
 257 |                 "php": "PHP 8.0 or higher comes with attributes, a native replacement for annotations"
 258 |             },
 259 |             "type": "library",
 260 |             "autoload": {
 261 |                 "psr-4": {
 262 |                     "Doctrine\\Common\\Annotations\\": "lib/Doctrine/Common/Annotations"
 263 |                 }
 264 |             },
 265 |             "notification-url": "https://packagist.org/downloads/",
 266 |             "license": [
 267 |                 "MIT"
 268 |             ],
 269 |             "authors": [
 270 |                 {
 271 |                     "name": "Guilherme Blanco",
 272 |                     "email": "guilhermeblanco@gmail.com"
 273 |                 },
 274 |                 {
 275 |                     "name": "Roman Borschel",
 276 |                     "email": "roman@code-factory.org"
 277 |                 },
 278 |                 {
 279 |                     "name": "Benjamin Eberlei",
 280 |                     "email": "kontakt@beberlei.de"
 281 |                 },
 282 |                 {
 283 |                     "name": "Jonathan Wage",
 284 |                     "email": "jonwage@gmail.com"
 285 |                 },
 286 |                 {
 287 |                     "name": "Johannes Schmitt",
 288 |                     "email": "schmittjoh@gmail.com"
 289 |                 }
 290 |             ],
 291 |             "description": "Docblock Annotations Parser",
 292 |             "homepage": "https://www.doctrine-project.org/projects/annotations.html",
 293 |             "keywords": [
 294 |                 "annotations",
 295 |                 "docblock",
 296 |                 "parser"
 297 |             ],
 298 |             "support": {
 299 |                 "issues": "https://github.com/doctrine/annotations/issues",
 300 |                 "source": "https://github.com/doctrine/annotations/tree/2.0.1"
 301 |             },
 302 |             "time": "2023-02-02T22:02:53+00:00"
 303 |         },
 304 |         {
 305 |             "name": "doctrine/lexer",
 306 |             "version": "3.0.0",
 307 |             "source": {
 308 |                 "type": "git",
 309 |                 "url": "https://github.com/doctrine/lexer.git",
 310 |                 "reference": "84a527db05647743d50373e0ec53a152f2cde568"
 311 |             },
 312 |             "dist": {
 313 |                 "type": "zip",
 314 |                 "url": "https://api.github.com/repos/doctrine/lexer/zipball/84a527db05647743d50373e0ec53a152f2cde568",
 315 |                 "reference": "84a527db05647743d50373e0ec53a152f2cde568",
 316 |                 "shasum": ""
 317 |             },
 318 |             "require": {
 319 |                 "php": "^8.1"
 320 |             },
 321 |             "require-dev": {
 322 |                 "doctrine/coding-standard": "^10",
 323 |                 "phpstan/phpstan": "^1.9",
 324 |                 "phpunit/phpunit": "^9.5",
 325 |                 "psalm/plugin-phpunit": "^0.18.3",
 326 |                 "vimeo/psalm": "^5.0"
 327 |             },
 328 |             "type": "library",
 329 |             "autoload": {
 330 |                 "psr-4": {
 331 |                     "Doctrine\\Common\\Lexer\\": "src"
 332 |                 }
 333 |             },
 334 |             "notification-url": "https://packagist.org/downloads/",
 335 |             "license": [
 336 |                 "MIT"
 337 |             ],
 338 |             "authors": [
 339 |                 {
 340 |                     "name": "Guilherme Blanco",
 341 |                     "email": "guilhermeblanco@gmail.com"
 342 |                 },
 343 |                 {
 344 |                     "name": "Roman Borschel",
 345 |                     "email": "roman@code-factory.org"
 346 |                 },
 347 |                 {
 348 |                     "name": "Johannes Schmitt",
 349 |                     "email": "schmittjoh@gmail.com"
 350 |                 }
 351 |             ],
 352 |             "description": "PHP Doctrine Lexer parser library that can be used in Top-Down, Recursive Descent Parsers.",
 353 |             "homepage": "https://www.doctrine-project.org/projects/lexer.html",
 354 |             "keywords": [
 355 |                 "annotations",
 356 |                 "docblock",
 357 |                 "lexer",
 358 |                 "parser",
 359 |                 "php"
 360 |             ],
 361 |             "support": {
 362 |                 "issues": "https://github.com/doctrine/lexer/issues",
 363 |                 "source": "https://github.com/doctrine/lexer/tree/3.0.0"
 364 |             },
 365 |             "funding": [
 366 |                 {
 367 |                     "url": "https://www.doctrine-project.org/sponsorship.html",
 368 |                     "type": "custom"
 369 |                 },
 370 |                 {
 371 |                     "url": "https://www.patreon.com/phpdoctrine",
 372 |                     "type": "patreon"
 373 |                 },
 374 |                 {
 375 |                     "url": "https://tidelift.com/funding/github/packagist/doctrine%2Flexer",
 376 |                     "type": "tidelift"
 377 |                 }
 378 |             ],
 379 |             "time": "2022-12-15T16:57:16+00:00"
 380 |         },
 381 |         {
 382 |             "name": "friendsofphp/php-cs-fixer",
 383 |             "version": "v3.15.1",
 384 |             "source": {
 385 |                 "type": "git",
 386 |                 "url": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer.git",
 387 |                 "reference": "d48755372a113bddb99f749e34805d83f3acfe04"
 388 |             },
 389 |             "dist": {
 390 |                 "type": "zip",
 391 |                 "url": "https://api.github.com/repos/PHP-CS-Fixer/PHP-CS-Fixer/zipball/d48755372a113bddb99f749e34805d83f3acfe04",
 392 |                 "reference": "d48755372a113bddb99f749e34805d83f3acfe04",
 393 |                 "shasum": ""
 394 |             },
 395 |             "require": {
 396 |                 "composer/semver": "^3.3",
 397 |                 "composer/xdebug-handler": "^3.0.3",
 398 |                 "doctrine/annotations": "^2",
 399 |                 "doctrine/lexer": "^2 || ^3",
 400 |                 "ext-json": "*",
 401 |                 "ext-tokenizer": "*",
 402 |                 "php": "^7.4 || ^8.0",
 403 |                 "sebastian/diff": "^4.0 || ^5.0",
 404 |                 "symfony/console": "^5.4 || ^6.0",
 405 |                 "symfony/event-dispatcher": "^5.4 || ^6.0",
 406 |                 "symfony/filesystem": "^5.4 || ^6.0",
 407 |                 "symfony/finder": "^5.4 || ^6.0",
 408 |                 "symfony/options-resolver": "^5.4 || ^6.0",
 409 |                 "symfony/polyfill-mbstring": "^1.27",
 410 |                 "symfony/polyfill-php80": "^1.27",
 411 |                 "symfony/polyfill-php81": "^1.27",
 412 |                 "symfony/process": "^5.4 || ^6.0",
 413 |                 "symfony/stopwatch": "^5.4 || ^6.0"
 414 |             },
 415 |             "require-dev": {
 416 |                 "justinrainbow/json-schema": "^5.2",
 417 |                 "keradus/cli-executor": "^2.0",
 418 |                 "mikey179/vfsstream": "^1.6.11",
 419 |                 "php-coveralls/php-coveralls": "^2.5.3",
 420 |                 "php-cs-fixer/accessible-object": "^1.1",
 421 |                 "php-cs-fixer/phpunit-constraint-isidenticalstring": "^1.2",
 422 |                 "php-cs-fixer/phpunit-constraint-xmlmatchesxsd": "^1.2.1",
 423 |                 "phpspec/prophecy": "^1.16",
 424 |                 "phpspec/prophecy-phpunit": "^2.0",
 425 |                 "phpunit/phpunit": "^9.5",
 426 |                 "phpunitgoodpractices/polyfill": "^1.6",
 427 |                 "phpunitgoodpractices/traits": "^1.9.2",
 428 |                 "symfony/phpunit-bridge": "^6.2.3",
 429 |                 "symfony/yaml": "^5.4 || ^6.0"
 430 |             },
 431 |             "suggest": {
 432 |                 "ext-dom": "For handling output formats in XML",
 433 |                 "ext-mbstring": "For handling non-UTF8 characters."
 434 |             },
 435 |             "bin": [
 436 |                 "php-cs-fixer"
 437 |             ],
 438 |             "type": "application",
 439 |             "autoload": {
 440 |                 "psr-4": {
 441 |                     "PhpCsFixer\\": "src/"
 442 |                 }
 443 |             },
 444 |             "notification-url": "https://packagist.org/downloads/",
 445 |             "license": [
 446 |                 "MIT"
 447 |             ],
 448 |             "authors": [
 449 |                 {
 450 |                     "name": "Fabien Potencier",
 451 |                     "email": "fabien@symfony.com"
 452 |                 },
 453 |                 {
 454 |                     "name": "Dariusz Rumiński",
 455 |                     "email": "dariusz.ruminski@gmail.com"
 456 |                 }
 457 |             ],
 458 |             "description": "A tool to automatically fix PHP code style",
 459 |             "keywords": [
 460 |                 "Static code analysis",
 461 |                 "fixer",
 462 |                 "standards",
 463 |                 "static analysis"
 464 |             ],
 465 |             "support": {
 466 |                 "issues": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues",
 467 |                 "source": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/tree/v3.15.1"
 468 |             },
 469 |             "funding": [
 470 |                 {
 471 |                     "url": "https://github.com/keradus",
 472 |                     "type": "github"
 473 |                 }
 474 |             ],
 475 |             "time": "2023-03-13T23:26:30+00:00"
 476 |         },
 477 |         {
 478 |             "name": "psr/cache",
 479 |             "version": "3.0.0",
 480 |             "source": {
 481 |                 "type": "git",
 482 |                 "url": "https://github.com/php-fig/cache.git",
 483 |                 "reference": "aa5030cfa5405eccfdcb1083ce040c2cb8d253bf"
 484 |             },
 485 |             "dist": {
 486 |                 "type": "zip",
 487 |                 "url": "https://api.github.com/repos/php-fig/cache/zipball/aa5030cfa5405eccfdcb1083ce040c2cb8d253bf",
 488 |                 "reference": "aa5030cfa5405eccfdcb1083ce040c2cb8d253bf",
 489 |                 "shasum": ""
 490 |             },
 491 |             "require": {
 492 |                 "php": ">=8.0.0"
 493 |             },
 494 |             "type": "library",
 495 |             "extra": {
 496 |                 "branch-alias": {
 497 |                     "dev-master": "1.0.x-dev"
 498 |                 }
 499 |             },
 500 |             "autoload": {
 501 |                 "psr-4": {
 502 |                     "Psr\\Cache\\": "src/"
 503 |                 }
 504 |             },
 505 |             "notification-url": "https://packagist.org/downloads/",
 506 |             "license": [
 507 |                 "MIT"
 508 |             ],
 509 |             "authors": [
 510 |                 {
 511 |                     "name": "PHP-FIG",
 512 |                     "homepage": "https://www.php-fig.org/"
 513 |                 }
 514 |             ],
 515 |             "description": "Common interface for caching libraries",
 516 |             "keywords": [
 517 |                 "cache",
 518 |                 "psr",
 519 |                 "psr-6"
 520 |             ],
 521 |             "support": {
 522 |                 "source": "https://github.com/php-fig/cache/tree/3.0.0"
 523 |             },
 524 |             "time": "2021-02-03T23:26:27+00:00"
 525 |         },
 526 |         {
 527 |             "name": "psr/container",
 528 |             "version": "2.0.2",
 529 |             "source": {
 530 |                 "type": "git",
 531 |                 "url": "https://github.com/php-fig/container.git",
 532 |                 "reference": "c71ecc56dfe541dbd90c5360474fbc405f8d5963"
 533 |             },
 534 |             "dist": {
 535 |                 "type": "zip",
 536 |                 "url": "https://api.github.com/repos/php-fig/container/zipball/c71ecc56dfe541dbd90c5360474fbc405f8d5963",
 537 |                 "reference": "c71ecc56dfe541dbd90c5360474fbc405f8d5963",
 538 |                 "shasum": ""
 539 |             },
 540 |             "require": {
 541 |                 "php": ">=7.4.0"
 542 |             },
 543 |             "type": "library",
 544 |             "extra": {
 545 |                 "branch-alias": {
 546 |                     "dev-master": "2.0.x-dev"
 547 |                 }
 548 |             },
 549 |             "autoload": {
 550 |                 "psr-4": {
 551 |                     "Psr\\Container\\": "src/"
 552 |                 }
 553 |             },
 554 |             "notification-url": "https://packagist.org/downloads/",
 555 |             "license": [
 556 |                 "MIT"
 557 |             ],
 558 |             "authors": [
 559 |                 {
 560 |                     "name": "PHP-FIG",
 561 |                     "homepage": "https://www.php-fig.org/"
 562 |                 }
 563 |             ],
 564 |             "description": "Common Container Interface (PHP FIG PSR-11)",
 565 |             "homepage": "https://github.com/php-fig/container",
 566 |             "keywords": [
 567 |                 "PSR-11",
 568 |                 "container",
 569 |                 "container-interface",
 570 |                 "container-interop",
 571 |                 "psr"
 572 |             ],
 573 |             "support": {
 574 |                 "issues": "https://github.com/php-fig/container/issues",
 575 |                 "source": "https://github.com/php-fig/container/tree/2.0.2"
 576 |             },
 577 |             "time": "2021-11-05T16:47:00+00:00"
 578 |         },
 579 |         {
 580 |             "name": "psr/event-dispatcher",
 581 |             "version": "1.0.0",
 582 |             "source": {
 583 |                 "type": "git",
 584 |                 "url": "https://github.com/php-fig/event-dispatcher.git",
 585 |                 "reference": "dbefd12671e8a14ec7f180cab83036ed26714bb0"
 586 |             },
 587 |             "dist": {
 588 |                 "type": "zip",
 589 |                 "url": "https://api.github.com/repos/php-fig/event-dispatcher/zipball/dbefd12671e8a14ec7f180cab83036ed26714bb0",
 590 |                 "reference": "dbefd12671e8a14ec7f180cab83036ed26714bb0",
 591 |                 "shasum": ""
 592 |             },
 593 |             "require": {
 594 |                 "php": ">=7.2.0"
 595 |             },
 596 |             "type": "library",
 597 |             "extra": {
 598 |                 "branch-alias": {
 599 |                     "dev-master": "1.0.x-dev"
 600 |                 }
 601 |             },
 602 |             "autoload": {
 603 |                 "psr-4": {
 604 |                     "Psr\\EventDispatcher\\": "src/"
 605 |                 }
 606 |             },
 607 |             "notification-url": "https://packagist.org/downloads/",
 608 |             "license": [
 609 |                 "MIT"
 610 |             ],
 611 |             "authors": [
 612 |                 {
 613 |                     "name": "PHP-FIG",
 614 |                     "homepage": "http://www.php-fig.org/"
 615 |                 }
 616 |             ],
 617 |             "description": "Standard interfaces for event handling.",
 618 |             "keywords": [
 619 |                 "events",
 620 |                 "psr",
 621 |                 "psr-14"
 622 |             ],
 623 |             "support": {
 624 |                 "issues": "https://github.com/php-fig/event-dispatcher/issues",
 625 |                 "source": "https://github.com/php-fig/event-dispatcher/tree/1.0.0"
 626 |             },
 627 |             "time": "2019-01-08T18:20:26+00:00"
 628 |         },
 629 |         {
 630 |             "name": "psr/log",
 631 |             "version": "3.0.0",
 632 |             "source": {
 633 |                 "type": "git",
 634 |                 "url": "https://github.com/php-fig/log.git",
 635 |                 "reference": "fe5ea303b0887d5caefd3d431c3e61ad47037001"
 636 |             },
 637 |             "dist": {
 638 |                 "type": "zip",
 639 |                 "url": "https://api.github.com/repos/php-fig/log/zipball/fe5ea303b0887d5caefd3d431c3e61ad47037001",
 640 |                 "reference": "fe5ea303b0887d5caefd3d431c3e61ad47037001",
 641 |                 "shasum": ""
 642 |             },
 643 |             "require": {
 644 |                 "php": ">=8.0.0"
 645 |             },
 646 |             "type": "library",
 647 |             "extra": {
 648 |                 "branch-alias": {
 649 |                     "dev-master": "3.x-dev"
 650 |                 }
 651 |             },
 652 |             "autoload": {
 653 |                 "psr-4": {
 654 |                     "Psr\\Log\\": "src"
 655 |                 }
 656 |             },
 657 |             "notification-url": "https://packagist.org/downloads/",
 658 |             "license": [
 659 |                 "MIT"
 660 |             ],
 661 |             "authors": [
 662 |                 {
 663 |                     "name": "PHP-FIG",
 664 |                     "homepage": "https://www.php-fig.org/"
 665 |                 }
 666 |             ],
 667 |             "description": "Common interface for logging libraries",
 668 |             "homepage": "https://github.com/php-fig/log",
 669 |             "keywords": [
 670 |                 "log",
 671 |                 "psr",
 672 |                 "psr-3"
 673 |             ],
 674 |             "support": {
 675 |                 "source": "https://github.com/php-fig/log/tree/3.0.0"
 676 |             },
 677 |             "time": "2021-07-14T16:46:02+00:00"
 678 |         },
 679 |         {
 680 |             "name": "sebastian/diff",
 681 |             "version": "5.0.0",
 682 |             "source": {
 683 |                 "type": "git",
 684 |                 "url": "https://github.com/sebastianbergmann/diff.git",
 685 |                 "reference": "70dd1b20bc198da394ad542e988381b44e64e39f"
 686 |             },
 687 |             "dist": {
 688 |                 "type": "zip",
 689 |                 "url": "https://api.github.com/repos/sebastianbergmann/diff/zipball/70dd1b20bc198da394ad542e988381b44e64e39f",
 690 |                 "reference": "70dd1b20bc198da394ad542e988381b44e64e39f",
 691 |                 "shasum": ""
 692 |             },
 693 |             "require": {
 694 |                 "php": ">=8.1"
 695 |             },
 696 |             "require-dev": {
 697 |                 "phpunit/phpunit": "^10.0",
 698 |                 "symfony/process": "^4.2 || ^5"
 699 |             },
 700 |             "type": "library",
 701 |             "extra": {
 702 |                 "branch-alias": {
 703 |                     "dev-main": "5.0-dev"
 704 |                 }
 705 |             },
 706 |             "autoload": {
 707 |                 "classmap": [
 708 |                     "src/"
 709 |                 ]
 710 |             },
 711 |             "notification-url": "https://packagist.org/downloads/",
 712 |             "license": [
 713 |                 "BSD-3-Clause"
 714 |             ],
 715 |             "authors": [
 716 |                 {
 717 |                     "name": "Sebastian Bergmann",
 718 |                     "email": "sebastian@phpunit.de"
 719 |                 },
 720 |                 {
 721 |                     "name": "Kore Nordmann",
 722 |                     "email": "mail@kore-nordmann.de"
 723 |                 }
 724 |             ],
 725 |             "description": "Diff implementation",
 726 |             "homepage": "https://github.com/sebastianbergmann/diff",
 727 |             "keywords": [
 728 |                 "diff",
 729 |                 "udiff",
 730 |                 "unidiff",
 731 |                 "unified diff"
 732 |             ],
 733 |             "support": {
 734 |                 "issues": "https://github.com/sebastianbergmann/diff/issues",
 735 |                 "source": "https://github.com/sebastianbergmann/diff/tree/5.0.0"
 736 |             },
 737 |             "funding": [
 738 |                 {
 739 |                     "url": "https://github.com/sebastianbergmann",
 740 |                     "type": "github"
 741 |                 }
 742 |             ],
 743 |             "time": "2023-02-03T07:00:31+00:00"
 744 |         },
 745 |         {
 746 |             "name": "symfony/console",
 747 |             "version": "v6.2.7",
 748 |             "source": {
 749 |                 "type": "git",
 750 |                 "url": "https://github.com/symfony/console.git",
 751 |                 "reference": "cbad09eb8925b6ad4fb721c7a179344dc4a19d45"
 752 |             },
 753 |             "dist": {
 754 |                 "type": "zip",
 755 |                 "url": "https://api.github.com/repos/symfony/console/zipball/cbad09eb8925b6ad4fb721c7a179344dc4a19d45",
 756 |                 "reference": "cbad09eb8925b6ad4fb721c7a179344dc4a19d45",
 757 |                 "shasum": ""
 758 |             },
 759 |             "require": {
 760 |                 "php": ">=8.1",
 761 |                 "symfony/deprecation-contracts": "^2.1|^3",
 762 |                 "symfony/polyfill-mbstring": "~1.0",
 763 |                 "symfony/service-contracts": "^1.1|^2|^3",
 764 |                 "symfony/string": "^5.4|^6.0"
 765 |             },
 766 |             "conflict": {
 767 |                 "symfony/dependency-injection": "<5.4",
 768 |                 "symfony/dotenv": "<5.4",
 769 |                 "symfony/event-dispatcher": "<5.4",
 770 |                 "symfony/lock": "<5.4",
 771 |                 "symfony/process": "<5.4"
 772 |             },
 773 |             "provide": {
 774 |                 "psr/log-implementation": "1.0|2.0|3.0"
 775 |             },
 776 |             "require-dev": {
 777 |                 "psr/log": "^1|^2|^3",
 778 |                 "symfony/config": "^5.4|^6.0",
 779 |                 "symfony/dependency-injection": "^5.4|^6.0",
 780 |                 "symfony/event-dispatcher": "^5.4|^6.0",
 781 |                 "symfony/lock": "^5.4|^6.0",
 782 |                 "symfony/process": "^5.4|^6.0",
 783 |                 "symfony/var-dumper": "^5.4|^6.0"
 784 |             },
 785 |             "suggest": {
 786 |                 "psr/log": "For using the console logger",
 787 |                 "symfony/event-dispatcher": "",
 788 |                 "symfony/lock": "",
 789 |                 "symfony/process": ""
 790 |             },
 791 |             "type": "library",
 792 |             "autoload": {
 793 |                 "psr-4": {
 794 |                     "Symfony\\Component\\Console\\": ""
 795 |                 },
 796 |                 "exclude-from-classmap": [
 797 |                     "/Tests/"
 798 |                 ]
 799 |             },
 800 |             "notification-url": "https://packagist.org/downloads/",
 801 |             "license": [
 802 |                 "MIT"
 803 |             ],
 804 |             "authors": [
 805 |                 {
 806 |                     "name": "Fabien Potencier",
 807 |                     "email": "fabien@symfony.com"
 808 |                 },
 809 |                 {
 810 |                     "name": "Symfony Community",
 811 |                     "homepage": "https://symfony.com/contributors"
 812 |                 }
 813 |             ],
 814 |             "description": "Eases the creation of beautiful and testable command line interfaces",
 815 |             "homepage": "https://symfony.com",
 816 |             "keywords": [
 817 |                 "cli",
 818 |                 "command line",
 819 |                 "console",
 820 |                 "terminal"
 821 |             ],
 822 |             "support": {
 823 |                 "source": "https://github.com/symfony/console/tree/v6.2.7"
 824 |             },
 825 |             "funding": [
 826 |                 {
 827 |                     "url": "https://symfony.com/sponsor",
 828 |                     "type": "custom"
 829 |                 },
 830 |                 {
 831 |                     "url": "https://github.com/fabpot",
 832 |                     "type": "github"
 833 |                 },
 834 |                 {
 835 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
 836 |                     "type": "tidelift"
 837 |                 }
 838 |             ],
 839 |             "time": "2023-02-25T17:00:03+00:00"
 840 |         },
 841 |         {
 842 |             "name": "symfony/deprecation-contracts",
 843 |             "version": "v3.2.1",
 844 |             "source": {
 845 |                 "type": "git",
 846 |                 "url": "https://github.com/symfony/deprecation-contracts.git",
 847 |                 "reference": "e2d1534420bd723d0ef5aec58a22c5fe60ce6f5e"
 848 |             },
 849 |             "dist": {
 850 |                 "type": "zip",
 851 |                 "url": "https://api.github.com/repos/symfony/deprecation-contracts/zipball/e2d1534420bd723d0ef5aec58a22c5fe60ce6f5e",
 852 |                 "reference": "e2d1534420bd723d0ef5aec58a22c5fe60ce6f5e",
 853 |                 "shasum": ""
 854 |             },
 855 |             "require": {
 856 |                 "php": ">=8.1"
 857 |             },
 858 |             "type": "library",
 859 |             "extra": {
 860 |                 "branch-alias": {
 861 |                     "dev-main": "3.3-dev"
 862 |                 },
 863 |                 "thanks": {
 864 |                     "name": "symfony/contracts",
 865 |                     "url": "https://github.com/symfony/contracts"
 866 |                 }
 867 |             },
 868 |             "autoload": {
 869 |                 "files": [
 870 |                     "function.php"
 871 |                 ]
 872 |             },
 873 |             "notification-url": "https://packagist.org/downloads/",
 874 |             "license": [
 875 |                 "MIT"
 876 |             ],
 877 |             "authors": [
 878 |                 {
 879 |                     "name": "Nicolas Grekas",
 880 |                     "email": "p@tchwork.com"
 881 |                 },
 882 |                 {
 883 |                     "name": "Symfony Community",
 884 |                     "homepage": "https://symfony.com/contributors"
 885 |                 }
 886 |             ],
 887 |             "description": "A generic function and convention to trigger deprecation notices",
 888 |             "homepage": "https://symfony.com",
 889 |             "support": {
 890 |                 "source": "https://github.com/symfony/deprecation-contracts/tree/v3.2.1"
 891 |             },
 892 |             "funding": [
 893 |                 {
 894 |                     "url": "https://symfony.com/sponsor",
 895 |                     "type": "custom"
 896 |                 },
 897 |                 {
 898 |                     "url": "https://github.com/fabpot",
 899 |                     "type": "github"
 900 |                 },
 901 |                 {
 902 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
 903 |                     "type": "tidelift"
 904 |                 }
 905 |             ],
 906 |             "time": "2023-03-01T10:25:55+00:00"
 907 |         },
 908 |         {
 909 |             "name": "symfony/event-dispatcher",
 910 |             "version": "v6.2.7",
 911 |             "source": {
 912 |                 "type": "git",
 913 |                 "url": "https://github.com/symfony/event-dispatcher.git",
 914 |                 "reference": "404b307de426c1c488e5afad64403e5f145e82a5"
 915 |             },
 916 |             "dist": {
 917 |                 "type": "zip",
 918 |                 "url": "https://api.github.com/repos/symfony/event-dispatcher/zipball/404b307de426c1c488e5afad64403e5f145e82a5",
 919 |                 "reference": "404b307de426c1c488e5afad64403e5f145e82a5",
 920 |                 "shasum": ""
 921 |             },
 922 |             "require": {
 923 |                 "php": ">=8.1",
 924 |                 "symfony/event-dispatcher-contracts": "^2|^3"
 925 |             },
 926 |             "conflict": {
 927 |                 "symfony/dependency-injection": "<5.4"
 928 |             },
 929 |             "provide": {
 930 |                 "psr/event-dispatcher-implementation": "1.0",
 931 |                 "symfony/event-dispatcher-implementation": "2.0|3.0"
 932 |             },
 933 |             "require-dev": {
 934 |                 "psr/log": "^1|^2|^3",
 935 |                 "symfony/config": "^5.4|^6.0",
 936 |                 "symfony/dependency-injection": "^5.4|^6.0",
 937 |                 "symfony/error-handler": "^5.4|^6.0",
 938 |                 "symfony/expression-language": "^5.4|^6.0",
 939 |                 "symfony/http-foundation": "^5.4|^6.0",
 940 |                 "symfony/service-contracts": "^1.1|^2|^3",
 941 |                 "symfony/stopwatch": "^5.4|^6.0"
 942 |             },
 943 |             "suggest": {
 944 |                 "symfony/dependency-injection": "",
 945 |                 "symfony/http-kernel": ""
 946 |             },
 947 |             "type": "library",
 948 |             "autoload": {
 949 |                 "psr-4": {
 950 |                     "Symfony\\Component\\EventDispatcher\\": ""
 951 |                 },
 952 |                 "exclude-from-classmap": [
 953 |                     "/Tests/"
 954 |                 ]
 955 |             },
 956 |             "notification-url": "https://packagist.org/downloads/",
 957 |             "license": [
 958 |                 "MIT"
 959 |             ],
 960 |             "authors": [
 961 |                 {
 962 |                     "name": "Fabien Potencier",
 963 |                     "email": "fabien@symfony.com"
 964 |                 },
 965 |                 {
 966 |                     "name": "Symfony Community",
 967 |                     "homepage": "https://symfony.com/contributors"
 968 |                 }
 969 |             ],
 970 |             "description": "Provides tools that allow your application components to communicate with each other by dispatching events and listening to them",
 971 |             "homepage": "https://symfony.com",
 972 |             "support": {
 973 |                 "source": "https://github.com/symfony/event-dispatcher/tree/v6.2.7"
 974 |             },
 975 |             "funding": [
 976 |                 {
 977 |                     "url": "https://symfony.com/sponsor",
 978 |                     "type": "custom"
 979 |                 },
 980 |                 {
 981 |                     "url": "https://github.com/fabpot",
 982 |                     "type": "github"
 983 |                 },
 984 |                 {
 985 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
 986 |                     "type": "tidelift"
 987 |                 }
 988 |             ],
 989 |             "time": "2023-02-14T08:44:56+00:00"
 990 |         },
 991 |         {
 992 |             "name": "symfony/event-dispatcher-contracts",
 993 |             "version": "v3.2.1",
 994 |             "source": {
 995 |                 "type": "git",
 996 |                 "url": "https://github.com/symfony/event-dispatcher-contracts.git",
 997 |                 "reference": "0ad3b6f1e4e2da5690fefe075cd53a238646d8dd"
 998 |             },
 999 |             "dist": {
1000 |                 "type": "zip",
1001 |                 "url": "https://api.github.com/repos/symfony/event-dispatcher-contracts/zipball/0ad3b6f1e4e2da5690fefe075cd53a238646d8dd",
1002 |                 "reference": "0ad3b6f1e4e2da5690fefe075cd53a238646d8dd",
1003 |                 "shasum": ""
1004 |             },
1005 |             "require": {
1006 |                 "php": ">=8.1",
1007 |                 "psr/event-dispatcher": "^1"
1008 |             },
1009 |             "suggest": {
1010 |                 "symfony/event-dispatcher-implementation": ""
1011 |             },
1012 |             "type": "library",
1013 |             "extra": {
1014 |                 "branch-alias": {
1015 |                     "dev-main": "3.3-dev"
1016 |                 },
1017 |                 "thanks": {
1018 |                     "name": "symfony/contracts",
1019 |                     "url": "https://github.com/symfony/contracts"
1020 |                 }
1021 |             },
1022 |             "autoload": {
1023 |                 "psr-4": {
1024 |                     "Symfony\\Contracts\\EventDispatcher\\": ""
1025 |                 }
1026 |             },
1027 |             "notification-url": "https://packagist.org/downloads/",
1028 |             "license": [
1029 |                 "MIT"
1030 |             ],
1031 |             "authors": [
1032 |                 {
1033 |                     "name": "Nicolas Grekas",
1034 |                     "email": "p@tchwork.com"
1035 |                 },
1036 |                 {
1037 |                     "name": "Symfony Community",
1038 |                     "homepage": "https://symfony.com/contributors"
1039 |                 }
1040 |             ],
1041 |             "description": "Generic abstractions related to dispatching event",
1042 |             "homepage": "https://symfony.com",
1043 |             "keywords": [
1044 |                 "abstractions",
1045 |                 "contracts",
1046 |                 "decoupling",
1047 |                 "interfaces",
1048 |                 "interoperability",
1049 |                 "standards"
1050 |             ],
1051 |             "support": {
1052 |                 "source": "https://github.com/symfony/event-dispatcher-contracts/tree/v3.2.1"
1053 |             },
1054 |             "funding": [
1055 |                 {
1056 |                     "url": "https://symfony.com/sponsor",
1057 |                     "type": "custom"
1058 |                 },
1059 |                 {
1060 |                     "url": "https://github.com/fabpot",
1061 |                     "type": "github"
1062 |                 },
1063 |                 {
1064 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1065 |                     "type": "tidelift"
1066 |                 }
1067 |             ],
1068 |             "time": "2023-03-01T10:32:47+00:00"
1069 |         },
1070 |         {
1071 |             "name": "symfony/filesystem",
1072 |             "version": "v6.2.7",
1073 |             "source": {
1074 |                 "type": "git",
1075 |                 "url": "https://github.com/symfony/filesystem.git",
1076 |                 "reference": "82b6c62b959f642d000456f08c6d219d749215b3"
1077 |             },
1078 |             "dist": {
1079 |                 "type": "zip",
1080 |                 "url": "https://api.github.com/repos/symfony/filesystem/zipball/82b6c62b959f642d000456f08c6d219d749215b3",
1081 |                 "reference": "82b6c62b959f642d000456f08c6d219d749215b3",
1082 |                 "shasum": ""
1083 |             },
1084 |             "require": {
1085 |                 "php": ">=8.1",
1086 |                 "symfony/polyfill-ctype": "~1.8",
1087 |                 "symfony/polyfill-mbstring": "~1.8"
1088 |             },
1089 |             "type": "library",
1090 |             "autoload": {
1091 |                 "psr-4": {
1092 |                     "Symfony\\Component\\Filesystem\\": ""
1093 |                 },
1094 |                 "exclude-from-classmap": [
1095 |                     "/Tests/"
1096 |                 ]
1097 |             },
1098 |             "notification-url": "https://packagist.org/downloads/",
1099 |             "license": [
1100 |                 "MIT"
1101 |             ],
1102 |             "authors": [
1103 |                 {
1104 |                     "name": "Fabien Potencier",
1105 |                     "email": "fabien@symfony.com"
1106 |                 },
1107 |                 {
1108 |                     "name": "Symfony Community",
1109 |                     "homepage": "https://symfony.com/contributors"
1110 |                 }
1111 |             ],
1112 |             "description": "Provides basic utilities for the filesystem",
1113 |             "homepage": "https://symfony.com",
1114 |             "support": {
1115 |                 "source": "https://github.com/symfony/filesystem/tree/v6.2.7"
1116 |             },
1117 |             "funding": [
1118 |                 {
1119 |                     "url": "https://symfony.com/sponsor",
1120 |                     "type": "custom"
1121 |                 },
1122 |                 {
1123 |                     "url": "https://github.com/fabpot",
1124 |                     "type": "github"
1125 |                 },
1126 |                 {
1127 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1128 |                     "type": "tidelift"
1129 |                 }
1130 |             ],
1131 |             "time": "2023-02-14T08:44:56+00:00"
1132 |         },
1133 |         {
1134 |             "name": "symfony/finder",
1135 |             "version": "v6.2.7",
1136 |             "source": {
1137 |                 "type": "git",
1138 |                 "url": "https://github.com/symfony/finder.git",
1139 |                 "reference": "20808dc6631aecafbe67c186af5dcb370be3a0eb"
1140 |             },
1141 |             "dist": {
1142 |                 "type": "zip",
1143 |                 "url": "https://api.github.com/repos/symfony/finder/zipball/20808dc6631aecafbe67c186af5dcb370be3a0eb",
1144 |                 "reference": "20808dc6631aecafbe67c186af5dcb370be3a0eb",
1145 |                 "shasum": ""
1146 |             },
1147 |             "require": {
1148 |                 "php": ">=8.1"
1149 |             },
1150 |             "require-dev": {
1151 |                 "symfony/filesystem": "^6.0"
1152 |             },
1153 |             "type": "library",
1154 |             "autoload": {
1155 |                 "psr-4": {
1156 |                     "Symfony\\Component\\Finder\\": ""
1157 |                 },
1158 |                 "exclude-from-classmap": [
1159 |                     "/Tests/"
1160 |                 ]
1161 |             },
1162 |             "notification-url": "https://packagist.org/downloads/",
1163 |             "license": [
1164 |                 "MIT"
1165 |             ],
1166 |             "authors": [
1167 |                 {
1168 |                     "name": "Fabien Potencier",
1169 |                     "email": "fabien@symfony.com"
1170 |                 },
1171 |                 {
1172 |                     "name": "Symfony Community",
1173 |                     "homepage": "https://symfony.com/contributors"
1174 |                 }
1175 |             ],
1176 |             "description": "Finds files and directories via an intuitive fluent interface",
1177 |             "homepage": "https://symfony.com",
1178 |             "support": {
1179 |                 "source": "https://github.com/symfony/finder/tree/v6.2.7"
1180 |             },
1181 |             "funding": [
1182 |                 {
1183 |                     "url": "https://symfony.com/sponsor",
1184 |                     "type": "custom"
1185 |                 },
1186 |                 {
1187 |                     "url": "https://github.com/fabpot",
1188 |                     "type": "github"
1189 |                 },
1190 |                 {
1191 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1192 |                     "type": "tidelift"
1193 |                 }
1194 |             ],
1195 |             "time": "2023-02-16T09:57:23+00:00"
1196 |         },
1197 |         {
1198 |             "name": "symfony/options-resolver",
1199 |             "version": "v6.2.7",
1200 |             "source": {
1201 |                 "type": "git",
1202 |                 "url": "https://github.com/symfony/options-resolver.git",
1203 |                 "reference": "aa0e85b53bbb2b4951960efd61d295907eacd629"
1204 |             },
1205 |             "dist": {
1206 |                 "type": "zip",
1207 |                 "url": "https://api.github.com/repos/symfony/options-resolver/zipball/aa0e85b53bbb2b4951960efd61d295907eacd629",
1208 |                 "reference": "aa0e85b53bbb2b4951960efd61d295907eacd629",
1209 |                 "shasum": ""
1210 |             },
1211 |             "require": {
1212 |                 "php": ">=8.1",
1213 |                 "symfony/deprecation-contracts": "^2.1|^3"
1214 |             },
1215 |             "type": "library",
1216 |             "autoload": {
1217 |                 "psr-4": {
1218 |                     "Symfony\\Component\\OptionsResolver\\": ""
1219 |                 },
1220 |                 "exclude-from-classmap": [
1221 |                     "/Tests/"
1222 |                 ]
1223 |             },
1224 |             "notification-url": "https://packagist.org/downloads/",
1225 |             "license": [
1226 |                 "MIT"
1227 |             ],
1228 |             "authors": [
1229 |                 {
1230 |                     "name": "Fabien Potencier",
1231 |                     "email": "fabien@symfony.com"
1232 |                 },
1233 |                 {
1234 |                     "name": "Symfony Community",
1235 |                     "homepage": "https://symfony.com/contributors"
1236 |                 }
1237 |             ],
1238 |             "description": "Provides an improved replacement for the array_replace PHP function",
1239 |             "homepage": "https://symfony.com",
1240 |             "keywords": [
1241 |                 "config",
1242 |                 "configuration",
1243 |                 "options"
1244 |             ],
1245 |             "support": {
1246 |                 "source": "https://github.com/symfony/options-resolver/tree/v6.2.7"
1247 |             },
1248 |             "funding": [
1249 |                 {
1250 |                     "url": "https://symfony.com/sponsor",
1251 |                     "type": "custom"
1252 |                 },
1253 |                 {
1254 |                     "url": "https://github.com/fabpot",
1255 |                     "type": "github"
1256 |                 },
1257 |                 {
1258 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1259 |                     "type": "tidelift"
1260 |                 }
1261 |             ],
1262 |             "time": "2023-02-14T08:44:56+00:00"
1263 |         },
1264 |         {
1265 |             "name": "symfony/polyfill-ctype",
1266 |             "version": "v1.27.0",
1267 |             "source": {
1268 |                 "type": "git",
1269 |                 "url": "https://github.com/symfony/polyfill-ctype.git",
1270 |                 "reference": "5bbc823adecdae860bb64756d639ecfec17b050a"
1271 |             },
1272 |             "dist": {
1273 |                 "type": "zip",
1274 |                 "url": "https://api.github.com/repos/symfony/polyfill-ctype/zipball/5bbc823adecdae860bb64756d639ecfec17b050a",
1275 |                 "reference": "5bbc823adecdae860bb64756d639ecfec17b050a",
1276 |                 "shasum": ""
1277 |             },
1278 |             "require": {
1279 |                 "php": ">=7.1"
1280 |             },
1281 |             "provide": {
1282 |                 "ext-ctype": "*"
1283 |             },
1284 |             "suggest": {
1285 |                 "ext-ctype": "For best performance"
1286 |             },
1287 |             "type": "library",
1288 |             "extra": {
1289 |                 "branch-alias": {
1290 |                     "dev-main": "1.27-dev"
1291 |                 },
1292 |                 "thanks": {
1293 |                     "name": "symfony/polyfill",
1294 |                     "url": "https://github.com/symfony/polyfill"
1295 |                 }
1296 |             },
1297 |             "autoload": {
1298 |                 "files": [
1299 |                     "bootstrap.php"
1300 |                 ],
1301 |                 "psr-4": {
1302 |                     "Symfony\\Polyfill\\Ctype\\": ""
1303 |                 }
1304 |             },
1305 |             "notification-url": "https://packagist.org/downloads/",
1306 |             "license": [
1307 |                 "MIT"
1308 |             ],
1309 |             "authors": [
1310 |                 {
1311 |                     "name": "Gert de Pagter",
1312 |                     "email": "BackEndTea@gmail.com"
1313 |                 },
1314 |                 {
1315 |                     "name": "Symfony Community",
1316 |                     "homepage": "https://symfony.com/contributors"
1317 |                 }
1318 |             ],
1319 |             "description": "Symfony polyfill for ctype functions",
1320 |             "homepage": "https://symfony.com",
1321 |             "keywords": [
1322 |                 "compatibility",
1323 |                 "ctype",
1324 |                 "polyfill",
1325 |                 "portable"
1326 |             ],
1327 |             "support": {
1328 |                 "source": "https://github.com/symfony/polyfill-ctype/tree/v1.27.0"
1329 |             },
1330 |             "funding": [
1331 |                 {
1332 |                     "url": "https://symfony.com/sponsor",
1333 |                     "type": "custom"
1334 |                 },
1335 |                 {
1336 |                     "url": "https://github.com/fabpot",
1337 |                     "type": "github"
1338 |                 },
1339 |                 {
1340 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1341 |                     "type": "tidelift"
1342 |                 }
1343 |             ],
1344 |             "time": "2022-11-03T14:55:06+00:00"
1345 |         },
1346 |         {
1347 |             "name": "symfony/polyfill-intl-grapheme",
1348 |             "version": "v1.27.0",
1349 |             "source": {
1350 |                 "type": "git",
1351 |                 "url": "https://github.com/symfony/polyfill-intl-grapheme.git",
1352 |                 "reference": "511a08c03c1960e08a883f4cffcacd219b758354"
1353 |             },
1354 |             "dist": {
1355 |                 "type": "zip",
1356 |                 "url": "https://api.github.com/repos/symfony/polyfill-intl-grapheme/zipball/511a08c03c1960e08a883f4cffcacd219b758354",
1357 |                 "reference": "511a08c03c1960e08a883f4cffcacd219b758354",
1358 |                 "shasum": ""
1359 |             },
1360 |             "require": {
1361 |                 "php": ">=7.1"
1362 |             },
1363 |             "suggest": {
1364 |                 "ext-intl": "For best performance"
1365 |             },
1366 |             "type": "library",
1367 |             "extra": {
1368 |                 "branch-alias": {
1369 |                     "dev-main": "1.27-dev"
1370 |                 },
1371 |                 "thanks": {
1372 |                     "name": "symfony/polyfill",
1373 |                     "url": "https://github.com/symfony/polyfill"
1374 |                 }
1375 |             },
1376 |             "autoload": {
1377 |                 "files": [
1378 |                     "bootstrap.php"
1379 |                 ],
1380 |                 "psr-4": {
1381 |                     "Symfony\\Polyfill\\Intl\\Grapheme\\": ""
1382 |                 }
1383 |             },
1384 |             "notification-url": "https://packagist.org/downloads/",
1385 |             "license": [
1386 |                 "MIT"
1387 |             ],
1388 |             "authors": [
1389 |                 {
1390 |                     "name": "Nicolas Grekas",
1391 |                     "email": "p@tchwork.com"
1392 |                 },
1393 |                 {
1394 |                     "name": "Symfony Community",
1395 |                     "homepage": "https://symfony.com/contributors"
1396 |                 }
1397 |             ],
1398 |             "description": "Symfony polyfill for intl's grapheme_* functions",
1399 |             "homepage": "https://symfony.com",
1400 |             "keywords": [
1401 |                 "compatibility",
1402 |                 "grapheme",
1403 |                 "intl",
1404 |                 "polyfill",
1405 |                 "portable",
1406 |                 "shim"
1407 |             ],
1408 |             "support": {
1409 |                 "source": "https://github.com/symfony/polyfill-intl-grapheme/tree/v1.27.0"
1410 |             },
1411 |             "funding": [
1412 |                 {
1413 |                     "url": "https://symfony.com/sponsor",
1414 |                     "type": "custom"
1415 |                 },
1416 |                 {
1417 |                     "url": "https://github.com/fabpot",
1418 |                     "type": "github"
1419 |                 },
1420 |                 {
1421 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1422 |                     "type": "tidelift"
1423 |                 }
1424 |             ],
1425 |             "time": "2022-11-03T14:55:06+00:00"
1426 |         },
1427 |         {
1428 |             "name": "symfony/polyfill-intl-normalizer",
1429 |             "version": "v1.27.0",
1430 |             "source": {
1431 |                 "type": "git",
1432 |                 "url": "https://github.com/symfony/polyfill-intl-normalizer.git",
1433 |                 "reference": "19bd1e4fcd5b91116f14d8533c57831ed00571b6"
1434 |             },
1435 |             "dist": {
1436 |                 "type": "zip",
1437 |                 "url": "https://api.github.com/repos/symfony/polyfill-intl-normalizer/zipball/19bd1e4fcd5b91116f14d8533c57831ed00571b6",
1438 |                 "reference": "19bd1e4fcd5b91116f14d8533c57831ed00571b6",
1439 |                 "shasum": ""
1440 |             },
1441 |             "require": {
1442 |                 "php": ">=7.1"
1443 |             },
1444 |             "suggest": {
1445 |                 "ext-intl": "For best performance"
1446 |             },
1447 |             "type": "library",
1448 |             "extra": {
1449 |                 "branch-alias": {
1450 |                     "dev-main": "1.27-dev"
1451 |                 },
1452 |                 "thanks": {
1453 |                     "name": "symfony/polyfill",
1454 |                     "url": "https://github.com/symfony/polyfill"
1455 |                 }
1456 |             },
1457 |             "autoload": {
1458 |                 "files": [
1459 |                     "bootstrap.php"
1460 |                 ],
1461 |                 "psr-4": {
1462 |                     "Symfony\\Polyfill\\Intl\\Normalizer\\": ""
1463 |                 },
1464 |                 "classmap": [
1465 |                     "Resources/stubs"
1466 |                 ]
1467 |             },
1468 |             "notification-url": "https://packagist.org/downloads/",
1469 |             "license": [
1470 |                 "MIT"
1471 |             ],
1472 |             "authors": [
1473 |                 {
1474 |                     "name": "Nicolas Grekas",
1475 |                     "email": "p@tchwork.com"
1476 |                 },
1477 |                 {
1478 |                     "name": "Symfony Community",
1479 |                     "homepage": "https://symfony.com/contributors"
1480 |                 }
1481 |             ],
1482 |             "description": "Symfony polyfill for intl's Normalizer class and related functions",
1483 |             "homepage": "https://symfony.com",
1484 |             "keywords": [
1485 |                 "compatibility",
1486 |                 "intl",
1487 |                 "normalizer",
1488 |                 "polyfill",
1489 |                 "portable",
1490 |                 "shim"
1491 |             ],
1492 |             "support": {
1493 |                 "source": "https://github.com/symfony/polyfill-intl-normalizer/tree/v1.27.0"
1494 |             },
1495 |             "funding": [
1496 |                 {
1497 |                     "url": "https://symfony.com/sponsor",
1498 |                     "type": "custom"
1499 |                 },
1500 |                 {
1501 |                     "url": "https://github.com/fabpot",
1502 |                     "type": "github"
1503 |                 },
1504 |                 {
1505 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1506 |                     "type": "tidelift"
1507 |                 }
1508 |             ],
1509 |             "time": "2022-11-03T14:55:06+00:00"
1510 |         },
1511 |         {
1512 |             "name": "symfony/polyfill-mbstring",
1513 |             "version": "v1.27.0",
1514 |             "source": {
1515 |                 "type": "git",
1516 |                 "url": "https://github.com/symfony/polyfill-mbstring.git",
1517 |                 "reference": "8ad114f6b39e2c98a8b0e3bd907732c207c2b534"
1518 |             },
1519 |             "dist": {
1520 |                 "type": "zip",
1521 |                 "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/8ad114f6b39e2c98a8b0e3bd907732c207c2b534",
1522 |                 "reference": "8ad114f6b39e2c98a8b0e3bd907732c207c2b534",
1523 |                 "shasum": ""
1524 |             },
1525 |             "require": {
1526 |                 "php": ">=7.1"
1527 |             },
1528 |             "provide": {
1529 |                 "ext-mbstring": "*"
1530 |             },
1531 |             "suggest": {
1532 |                 "ext-mbstring": "For best performance"
1533 |             },
1534 |             "type": "library",
1535 |             "extra": {
1536 |                 "branch-alias": {
1537 |                     "dev-main": "1.27-dev"
1538 |                 },
1539 |                 "thanks": {
1540 |                     "name": "symfony/polyfill",
1541 |                     "url": "https://github.com/symfony/polyfill"
1542 |                 }
1543 |             },
1544 |             "autoload": {
1545 |                 "files": [
1546 |                     "bootstrap.php"
1547 |                 ],
1548 |                 "psr-4": {
1549 |                     "Symfony\\Polyfill\\Mbstring\\": ""
1550 |                 }
1551 |             },
1552 |             "notification-url": "https://packagist.org/downloads/",
1553 |             "license": [
1554 |                 "MIT"
1555 |             ],
1556 |             "authors": [
1557 |                 {
1558 |                     "name": "Nicolas Grekas",
1559 |                     "email": "p@tchwork.com"
1560 |                 },
1561 |                 {
1562 |                     "name": "Symfony Community",
1563 |                     "homepage": "https://symfony.com/contributors"
1564 |                 }
1565 |             ],
1566 |             "description": "Symfony polyfill for the Mbstring extension",
1567 |             "homepage": "https://symfony.com",
1568 |             "keywords": [
1569 |                 "compatibility",
1570 |                 "mbstring",
1571 |                 "polyfill",
1572 |                 "portable",
1573 |                 "shim"
1574 |             ],
1575 |             "support": {
1576 |                 "source": "https://github.com/symfony/polyfill-mbstring/tree/v1.27.0"
1577 |             },
1578 |             "funding": [
1579 |                 {
1580 |                     "url": "https://symfony.com/sponsor",
1581 |                     "type": "custom"
1582 |                 },
1583 |                 {
1584 |                     "url": "https://github.com/fabpot",
1585 |                     "type": "github"
1586 |                 },
1587 |                 {
1588 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1589 |                     "type": "tidelift"
1590 |                 }
1591 |             ],
1592 |             "time": "2022-11-03T14:55:06+00:00"
1593 |         },
1594 |         {
1595 |             "name": "symfony/polyfill-php80",
1596 |             "version": "v1.27.0",
1597 |             "source": {
1598 |                 "type": "git",
1599 |                 "url": "https://github.com/symfony/polyfill-php80.git",
1600 |                 "reference": "7a6ff3f1959bb01aefccb463a0f2cd3d3d2fd936"
1601 |             },
1602 |             "dist": {
1603 |                 "type": "zip",
1604 |                 "url": "https://api.github.com/repos/symfony/polyfill-php80/zipball/7a6ff3f1959bb01aefccb463a0f2cd3d3d2fd936",
1605 |                 "reference": "7a6ff3f1959bb01aefccb463a0f2cd3d3d2fd936",
1606 |                 "shasum": ""
1607 |             },
1608 |             "require": {
1609 |                 "php": ">=7.1"
1610 |             },
1611 |             "type": "library",
1612 |             "extra": {
1613 |                 "branch-alias": {
1614 |                     "dev-main": "1.27-dev"
1615 |                 },
1616 |                 "thanks": {
1617 |                     "name": "symfony/polyfill",
1618 |                     "url": "https://github.com/symfony/polyfill"
1619 |                 }
1620 |             },
1621 |             "autoload": {
1622 |                 "files": [
1623 |                     "bootstrap.php"
1624 |                 ],
1625 |                 "psr-4": {
1626 |                     "Symfony\\Polyfill\\Php80\\": ""
1627 |                 },
1628 |                 "classmap": [
1629 |                     "Resources/stubs"
1630 |                 ]
1631 |             },
1632 |             "notification-url": "https://packagist.org/downloads/",
1633 |             "license": [
1634 |                 "MIT"
1635 |             ],
1636 |             "authors": [
1637 |                 {
1638 |                     "name": "Ion Bazan",
1639 |                     "email": "ion.bazan@gmail.com"
1640 |                 },
1641 |                 {
1642 |                     "name": "Nicolas Grekas",
1643 |                     "email": "p@tchwork.com"
1644 |                 },
1645 |                 {
1646 |                     "name": "Symfony Community",
1647 |                     "homepage": "https://symfony.com/contributors"
1648 |                 }
1649 |             ],
1650 |             "description": "Symfony polyfill backporting some PHP 8.0+ features to lower PHP versions",
1651 |             "homepage": "https://symfony.com",
1652 |             "keywords": [
1653 |                 "compatibility",
1654 |                 "polyfill",
1655 |                 "portable",
1656 |                 "shim"
1657 |             ],
1658 |             "support": {
1659 |                 "source": "https://github.com/symfony/polyfill-php80/tree/v1.27.0"
1660 |             },
1661 |             "funding": [
1662 |                 {
1663 |                     "url": "https://symfony.com/sponsor",
1664 |                     "type": "custom"
1665 |                 },
1666 |                 {
1667 |                     "url": "https://github.com/fabpot",
1668 |                     "type": "github"
1669 |                 },
1670 |                 {
1671 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1672 |                     "type": "tidelift"
1673 |                 }
1674 |             ],
1675 |             "time": "2022-11-03T14:55:06+00:00"
1676 |         },
1677 |         {
1678 |             "name": "symfony/polyfill-php81",
1679 |             "version": "v1.27.0",
1680 |             "source": {
1681 |                 "type": "git",
1682 |                 "url": "https://github.com/symfony/polyfill-php81.git",
1683 |                 "reference": "707403074c8ea6e2edaf8794b0157a0bfa52157a"
1684 |             },
1685 |             "dist": {
1686 |                 "type": "zip",
1687 |                 "url": "https://api.github.com/repos/symfony/polyfill-php81/zipball/707403074c8ea6e2edaf8794b0157a0bfa52157a",
1688 |                 "reference": "707403074c8ea6e2edaf8794b0157a0bfa52157a",
1689 |                 "shasum": ""
1690 |             },
1691 |             "require": {
1692 |                 "php": ">=7.1"
1693 |             },
1694 |             "type": "library",
1695 |             "extra": {
1696 |                 "branch-alias": {
1697 |                     "dev-main": "1.27-dev"
1698 |                 },
1699 |                 "thanks": {
1700 |                     "name": "symfony/polyfill",
1701 |                     "url": "https://github.com/symfony/polyfill"
1702 |                 }
1703 |             },
1704 |             "autoload": {
1705 |                 "files": [
1706 |                     "bootstrap.php"
1707 |                 ],
1708 |                 "psr-4": {
1709 |                     "Symfony\\Polyfill\\Php81\\": ""
1710 |                 },
1711 |                 "classmap": [
1712 |                     "Resources/stubs"
1713 |                 ]
1714 |             },
1715 |             "notification-url": "https://packagist.org/downloads/",
1716 |             "license": [
1717 |                 "MIT"
1718 |             ],
1719 |             "authors": [
1720 |                 {
1721 |                     "name": "Nicolas Grekas",
1722 |                     "email": "p@tchwork.com"
1723 |                 },
1724 |                 {
1725 |                     "name": "Symfony Community",
1726 |                     "homepage": "https://symfony.com/contributors"
1727 |                 }
1728 |             ],
1729 |             "description": "Symfony polyfill backporting some PHP 8.1+ features to lower PHP versions",
1730 |             "homepage": "https://symfony.com",
1731 |             "keywords": [
1732 |                 "compatibility",
1733 |                 "polyfill",
1734 |                 "portable",
1735 |                 "shim"
1736 |             ],
1737 |             "support": {
1738 |                 "source": "https://github.com/symfony/polyfill-php81/tree/v1.27.0"
1739 |             },
1740 |             "funding": [
1741 |                 {
1742 |                     "url": "https://symfony.com/sponsor",
1743 |                     "type": "custom"
1744 |                 },
1745 |                 {
1746 |                     "url": "https://github.com/fabpot",
1747 |                     "type": "github"
1748 |                 },
1749 |                 {
1750 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1751 |                     "type": "tidelift"
1752 |                 }
1753 |             ],
1754 |             "time": "2022-11-03T14:55:06+00:00"
1755 |         },
1756 |         {
1757 |             "name": "symfony/process",
1758 |             "version": "v6.2.7",
1759 |             "source": {
1760 |                 "type": "git",
1761 |                 "url": "https://github.com/symfony/process.git",
1762 |                 "reference": "680e8a2ea6b3f87aecc07a6a65a203ae573d1902"
1763 |             },
1764 |             "dist": {
1765 |                 "type": "zip",
1766 |                 "url": "https://api.github.com/repos/symfony/process/zipball/680e8a2ea6b3f87aecc07a6a65a203ae573d1902",
1767 |                 "reference": "680e8a2ea6b3f87aecc07a6a65a203ae573d1902",
1768 |                 "shasum": ""
1769 |             },
1770 |             "require": {
1771 |                 "php": ">=8.1"
1772 |             },
1773 |             "type": "library",
1774 |             "autoload": {
1775 |                 "psr-4": {
1776 |                     "Symfony\\Component\\Process\\": ""
1777 |                 },
1778 |                 "exclude-from-classmap": [
1779 |                     "/Tests/"
1780 |                 ]
1781 |             },
1782 |             "notification-url": "https://packagist.org/downloads/",
1783 |             "license": [
1784 |                 "MIT"
1785 |             ],
1786 |             "authors": [
1787 |                 {
1788 |                     "name": "Fabien Potencier",
1789 |                     "email": "fabien@symfony.com"
1790 |                 },
1791 |                 {
1792 |                     "name": "Symfony Community",
1793 |                     "homepage": "https://symfony.com/contributors"
1794 |                 }
1795 |             ],
1796 |             "description": "Executes commands in sub-processes",
1797 |             "homepage": "https://symfony.com",
1798 |             "support": {
1799 |                 "source": "https://github.com/symfony/process/tree/v6.2.7"
1800 |             },
1801 |             "funding": [
1802 |                 {
1803 |                     "url": "https://symfony.com/sponsor",
1804 |                     "type": "custom"
1805 |                 },
1806 |                 {
1807 |                     "url": "https://github.com/fabpot",
1808 |                     "type": "github"
1809 |                 },
1810 |                 {
1811 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1812 |                     "type": "tidelift"
1813 |                 }
1814 |             ],
1815 |             "time": "2023-02-24T10:42:00+00:00"
1816 |         },
1817 |         {
1818 |             "name": "symfony/service-contracts",
1819 |             "version": "v3.2.1",
1820 |             "source": {
1821 |                 "type": "git",
1822 |                 "url": "https://github.com/symfony/service-contracts.git",
1823 |                 "reference": "a8c9cedf55f314f3a186041d19537303766df09a"
1824 |             },
1825 |             "dist": {
1826 |                 "type": "zip",
1827 |                 "url": "https://api.github.com/repos/symfony/service-contracts/zipball/a8c9cedf55f314f3a186041d19537303766df09a",
1828 |                 "reference": "a8c9cedf55f314f3a186041d19537303766df09a",
1829 |                 "shasum": ""
1830 |             },
1831 |             "require": {
1832 |                 "php": ">=8.1",
1833 |                 "psr/container": "^2.0"
1834 |             },
1835 |             "conflict": {
1836 |                 "ext-psr": "<1.1|>=2"
1837 |             },
1838 |             "suggest": {
1839 |                 "symfony/service-implementation": ""
1840 |             },
1841 |             "type": "library",
1842 |             "extra": {
1843 |                 "branch-alias": {
1844 |                     "dev-main": "3.3-dev"
1845 |                 },
1846 |                 "thanks": {
1847 |                     "name": "symfony/contracts",
1848 |                     "url": "https://github.com/symfony/contracts"
1849 |                 }
1850 |             },
1851 |             "autoload": {
1852 |                 "psr-4": {
1853 |                     "Symfony\\Contracts\\Service\\": ""
1854 |                 },
1855 |                 "exclude-from-classmap": [
1856 |                     "/Test/"
1857 |                 ]
1858 |             },
1859 |             "notification-url": "https://packagist.org/downloads/",
1860 |             "license": [
1861 |                 "MIT"
1862 |             ],
1863 |             "authors": [
1864 |                 {
1865 |                     "name": "Nicolas Grekas",
1866 |                     "email": "p@tchwork.com"
1867 |                 },
1868 |                 {
1869 |                     "name": "Symfony Community",
1870 |                     "homepage": "https://symfony.com/contributors"
1871 |                 }
1872 |             ],
1873 |             "description": "Generic abstractions related to writing services",
1874 |             "homepage": "https://symfony.com",
1875 |             "keywords": [
1876 |                 "abstractions",
1877 |                 "contracts",
1878 |                 "decoupling",
1879 |                 "interfaces",
1880 |                 "interoperability",
1881 |                 "standards"
1882 |             ],
1883 |             "support": {
1884 |                 "source": "https://github.com/symfony/service-contracts/tree/v3.2.1"
1885 |             },
1886 |             "funding": [
1887 |                 {
1888 |                     "url": "https://symfony.com/sponsor",
1889 |                     "type": "custom"
1890 |                 },
1891 |                 {
1892 |                     "url": "https://github.com/fabpot",
1893 |                     "type": "github"
1894 |                 },
1895 |                 {
1896 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1897 |                     "type": "tidelift"
1898 |                 }
1899 |             ],
1900 |             "time": "2023-03-01T10:32:47+00:00"
1901 |         },
1902 |         {
1903 |             "name": "symfony/stopwatch",
1904 |             "version": "v6.2.7",
1905 |             "source": {
1906 |                 "type": "git",
1907 |                 "url": "https://github.com/symfony/stopwatch.git",
1908 |                 "reference": "f3adc98c1061875dd2edcd45e5b04e63d0e29f8f"
1909 |             },
1910 |             "dist": {
1911 |                 "type": "zip",
1912 |                 "url": "https://api.github.com/repos/symfony/stopwatch/zipball/f3adc98c1061875dd2edcd45e5b04e63d0e29f8f",
1913 |                 "reference": "f3adc98c1061875dd2edcd45e5b04e63d0e29f8f",
1914 |                 "shasum": ""
1915 |             },
1916 |             "require": {
1917 |                 "php": ">=8.1",
1918 |                 "symfony/service-contracts": "^1|^2|^3"
1919 |             },
1920 |             "type": "library",
1921 |             "autoload": {
1922 |                 "psr-4": {
1923 |                     "Symfony\\Component\\Stopwatch\\": ""
1924 |                 },
1925 |                 "exclude-from-classmap": [
1926 |                     "/Tests/"
1927 |                 ]
1928 |             },
1929 |             "notification-url": "https://packagist.org/downloads/",
1930 |             "license": [
1931 |                 "MIT"
1932 |             ],
1933 |             "authors": [
1934 |                 {
1935 |                     "name": "Fabien Potencier",
1936 |                     "email": "fabien@symfony.com"
1937 |                 },
1938 |                 {
1939 |                     "name": "Symfony Community",
1940 |                     "homepage": "https://symfony.com/contributors"
1941 |                 }
1942 |             ],
1943 |             "description": "Provides a way to profile code",
1944 |             "homepage": "https://symfony.com",
1945 |             "support": {
1946 |                 "source": "https://github.com/symfony/stopwatch/tree/v6.2.7"
1947 |             },
1948 |             "funding": [
1949 |                 {
1950 |                     "url": "https://symfony.com/sponsor",
1951 |                     "type": "custom"
1952 |                 },
1953 |                 {
1954 |                     "url": "https://github.com/fabpot",
1955 |                     "type": "github"
1956 |                 },
1957 |                 {
1958 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
1959 |                     "type": "tidelift"
1960 |                 }
1961 |             ],
1962 |             "time": "2023-02-14T08:44:56+00:00"
1963 |         },
1964 |         {
1965 |             "name": "symfony/string",
1966 |             "version": "v6.2.7",
1967 |             "source": {
1968 |                 "type": "git",
1969 |                 "url": "https://github.com/symfony/string.git",
1970 |                 "reference": "67b8c1eec78296b85dc1c7d9743830160218993d"
1971 |             },
1972 |             "dist": {
1973 |                 "type": "zip",
1974 |                 "url": "https://api.github.com/repos/symfony/string/zipball/67b8c1eec78296b85dc1c7d9743830160218993d",
1975 |                 "reference": "67b8c1eec78296b85dc1c7d9743830160218993d",
1976 |                 "shasum": ""
1977 |             },
1978 |             "require": {
1979 |                 "php": ">=8.1",
1980 |                 "symfony/polyfill-ctype": "~1.8",
1981 |                 "symfony/polyfill-intl-grapheme": "~1.0",
1982 |                 "symfony/polyfill-intl-normalizer": "~1.0",
1983 |                 "symfony/polyfill-mbstring": "~1.0"
1984 |             },
1985 |             "conflict": {
1986 |                 "symfony/translation-contracts": "<2.0"
1987 |             },
1988 |             "require-dev": {
1989 |                 "symfony/error-handler": "^5.4|^6.0",
1990 |                 "symfony/http-client": "^5.4|^6.0",
1991 |                 "symfony/intl": "^6.2",
1992 |                 "symfony/translation-contracts": "^2.0|^3.0",
1993 |                 "symfony/var-exporter": "^5.4|^6.0"
1994 |             },
1995 |             "type": "library",
1996 |             "autoload": {
1997 |                 "files": [
1998 |                     "Resources/functions.php"
1999 |                 ],
2000 |                 "psr-4": {
2001 |                     "Symfony\\Component\\String\\": ""
2002 |                 },
2003 |                 "exclude-from-classmap": [
2004 |                     "/Tests/"
2005 |                 ]
2006 |             },
2007 |             "notification-url": "https://packagist.org/downloads/",
2008 |             "license": [
2009 |                 "MIT"
2010 |             ],
2011 |             "authors": [
2012 |                 {
2013 |                     "name": "Nicolas Grekas",
2014 |                     "email": "p@tchwork.com"
2015 |                 },
2016 |                 {
2017 |                     "name": "Symfony Community",
2018 |                     "homepage": "https://symfony.com/contributors"
2019 |                 }
2020 |             ],
2021 |             "description": "Provides an object-oriented API to strings and deals with bytes, UTF-8 code points and grapheme clusters in a unified way",
2022 |             "homepage": "https://symfony.com",
2023 |             "keywords": [
2024 |                 "grapheme",
2025 |                 "i18n",
2026 |                 "string",
2027 |                 "unicode",
2028 |                 "utf-8",
2029 |                 "utf8"
2030 |             ],
2031 |             "support": {
2032 |                 "source": "https://github.com/symfony/string/tree/v6.2.7"
2033 |             },
2034 |             "funding": [
2035 |                 {
2036 |                     "url": "https://symfony.com/sponsor",
2037 |                     "type": "custom"
2038 |                 },
2039 |                 {
2040 |                     "url": "https://github.com/fabpot",
2041 |                     "type": "github"
2042 |                 },
2043 |                 {
2044 |                     "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
2045 |                     "type": "tidelift"
2046 |                 }
2047 |             ],
2048 |             "time": "2023-02-24T10:42:00+00:00"
2049 |         }
2050 |     ],
2051 |     "aliases": [],
2052 |     "minimum-stability": "stable",
2053 |     "stability-flags": [],
2054 |     "prefer-stable": false,
2055 |     "prefer-lowest": false,
2056 |     "platform": {
2057 |         "php": ">=7.0",
2058 |         "ext-dom": "*",
2059 |         "ext-libxml": "*",
2060 |         "ext-gd": "*",
2061 |         "ext-fileinfo": "*",
2062 |         "ext-openssl": "*",
2063 |         "ext-json": "*",
2064 |         "ext-pdo": "*"
2065 |     },
2066 |     "platform-dev": [],
2067 |     "plugin-api-version": "2.3.0"
2068 | }
2069 | 


--------------------------------------------------------------------------------
/rector.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use Rector\Core\Configuration\Option;
 6 | use Rector\Php74\Rector\Property\TypedPropertyRector;
 7 | use Rector\Set\ValueObject\SetList;
 8 | use Rector\Core\ValueObject\PhpVersion;
 9 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
10 | 
11 | return static function (ContainerConfigurator $containerConfigurator): void {
12 |     // get parameters
13 |     $parameters = $containerConfigurator->parameters();
14 |     $parameters->set(Option::PATHS, [
15 |         __DIR__ . '/src'
16 |     ]);
17 | 
18 |     // Define what rule sets will be applied
19 |     $parameters->set(Option::PHP_VERSION_FEATURES, PhpVersion::PHP_70);
20 |     $containerConfigurator->import(SetList::DEAD_CODE);
21 |     $containerConfigurator->import(SetList::CODE_QUALITY);
22 |     $containerConfigurator->import(SetList::PHP_52);
23 |     $containerConfigurator->import(SetList::PHP_53);
24 |     $containerConfigurator->import(SetList::PHP_54);
25 |     $containerConfigurator->import(SetList::PHP_55);
26 |     $containerConfigurator->import(SetList::PHP_56);
27 |     $containerConfigurator->import(SetList::PHP_70);
28 | 
29 |     // get services (needed for register a single rule)
30 |     $services = $containerConfigurator->services();
31 | 
32 |     // register a single rule
33 |     $services->set(TypedPropertyRector::class);
34 | };
35 | 


--------------------------------------------------------------------------------
/renovate.json:
--------------------------------------------------------------------------------
1 | {
2 |   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
3 |   "extends": [
4 |     "config:base"
5 |   ]
6 | }
7 | 


--------------------------------------------------------------------------------
/screenshots/amwscan_1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/marcocesarato/PHP-AIO-Security/45dd099cd57525c833382426738a4bde6da13e82/screenshots/amwscan_1.png


--------------------------------------------------------------------------------
/screenshots/amwscan_2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/marcocesarato/PHP-AIO-Security/45dd099cd57525c833382426738a4bde6da13e82/screenshots/amwscan_2.png


--------------------------------------------------------------------------------
/screenshots/xssblock_screen.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/marcocesarato/PHP-AIO-Security/45dd099cd57525c833382426738a4bde6da13e82/screenshots/xssblock_screen.png


--------------------------------------------------------------------------------
/tests/captcha.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | require_once '../src/Security.php';
4 | use marcocesarato\security\Security;
5 | 
6 | Security::secureSession();
7 | Security::captcha();
8 | 


--------------------------------------------------------------------------------
/tests/captcha_test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once '../src/Security.php';
 4 | use marcocesarato\security\Security;
 5 | 
 6 | Security::putInSafety();
 7 | Security::cleanGlobals();
 8 | 
 9 | $old_captcha_code = Security::captchaCode();
10 | $verify_captcha = Security::captchaVerify(); // PS: call before Security::printCaptcha() / Security::captcha()
11 | $captcha = Security::captchaPrint('captcha');
12 | $new_captcha_code = Security::captchaCode();
13 | 
14 | ob_start();
15 | 
16 | echo <<<HTML
17 | <!DOCTYPE html>
18 | <html>
19 | <head>
20 |   <title>Captcha Test</title>
21 |   <style>
22 |   .captcha {
23 |     height: 25px;
24 |     box-sizing: border-box;
25 |     float: left;
26 |   }
27 |   .clear {
28 |     clear: both;
29 |   }
30 | </style>
31 | </head>
32 | <body>
33 |   <h1>Captcha Test</h1>
34 |   <h3>From here is possible test output security, CSRF, WAF (Firewall) and Captcha protection</h3>
35 |   <p><b>PS: call Security::secureCaptcha(); before Security::printCaptcha() / Security::captcha()</b></p>
36 |   <form action="#" method="POST">
37 |     <label>Username</lable>
38 |     <input type="text" name="username"><br>
39 |     <label>Password</lable>
40 |     <input type="password" name="password"><br>
41 |     <br>
42 |     <label>Captcha</lable><br><br>
43 |     $captcha<br>
44 |     <div class="clear"></div><br>
45 |     <button name="submit" type="submit">Login</button>
46 |   </form>
47 | </body>
48 | </html>
49 | HTML;
50 | 
51 | if (isset($_POST['submit'])) {
52 |     echo '<h3>Result</h3>';
53 |     echo 'VERIFY CAPTCHA:<br>';
54 |     echo '<pre>';
55 |     var_dump($verify_captcha);
56 |     echo '</pre>';
57 |     echo 'FORM DATA:<br>';
58 |     echo '<pre>';
59 |     var_dump($_POST);
60 |     echo '</pre>';
61 |     echo 'OLD CAPTCHA CODE: ' . $old_captcha_code . '<br>';
62 |     echo 'NEW CAPTCHA CODE: ' . $new_captcha_code;
63 | }
64 | 
65 | $output = Security::output(ob_get_clean());
66 | echo $output;
67 | 


--------------------------------------------------------------------------------
/tests/cookies_test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once '../src/Security.php';
 4 | use marcocesarato\security\Security;
 5 | 
 6 | Security::putInSafety();
 7 | 
 8 | if (!isset($_COOKIE['TEST'])) {
 9 |     Security::setCookie('TEST', 'Test Message');
10 | }
11 | 
12 | echo '<h1>Cookies Test</h1>';
13 | echo "Check on your browser the real value of the cookies through a plugin as <a href='https://chrome.google.com/webstore/detail/cookie-inspector/jgbbilmfbammlbbhmmgaagdkbkepnijn'>Cookie Inspector</a> (chrome) or <a href='https://addons.mozilla.org/en-US/firefox/addon/cookies-manager-plus/'>Cookie Manager</a> (firefox)";
14 | echo '<pre>';
15 | var_dump($_COOKIE);
16 | echo '</pre>';
17 | 


--------------------------------------------------------------------------------
/tests/csrf_test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once '../src/Security.php';
 4 | use marcocesarato\security\Security;
 5 | 
 6 | ob_start();
 7 | 
 8 | Security::putInSafety();
 9 | Security::cleanGlobals();
10 | 
11 | ?>
12 |     <!DOCTYPE html>
13 |     <html>
14 |     <head>
15 |         <title>Form</title>
16 |     </head>
17 | 
18 |     <body>
19 | 
20 | 
21 |     <h1>Form</h1>
22 |     <form action="#" method="POST">
23 |         <div>
24 |             <label>Author:</label>
25 |             <input type="text" name="author" placeholder="Author's Name" />
26 |         </div>
27 | 
28 |         <input type="submit" name="submit" value="Submit">
29 |     </form>
30 | 
31 |     <h2>Response</h2>
32 |     <?php
33 |     if (isset($_POST['submit'])) {
34 |         echo $_POST['author'];
35 |     }
36 |     ?>
37 | 
38 |     </body>
39 |     </html>
40 | 
41 | <?php
42 | 
43 | exit(Security::output(ob_get_clean()));
44 | 


--------------------------------------------------------------------------------
/tests/dos_test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once '../src/Security.php';
 4 | use marcocesarato\security\Security;
 5 | 
 6 | Security::putInSafety();
 7 | 
 8 | $attempts = $_SESSION['DOS_ATTEMPTS'];
 9 | $attempts_timer = $_SESSION['DOS_ATTEMPTS_TIMER'];
10 | $timer = $_SESSION['DOS_TIMER'];
11 | $couter = $_SESSION['DOS_COUNTER'];
12 | 
13 | echo <<<HTML
14 | <h1>DOS Test</h1>
15 | ATTEMPTS: $attempts<br>
16 | ATTEMPTS TIMER: $attempts_timer<br>
17 | TIMER: $timer<br>
18 | COUNTER: $couter<br>
19 | HTML;
20 | 


--------------------------------------------------------------------------------
/tests/globals_test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once '../src/Security.php';
 4 | use marcocesarato\security\Security;
 5 | 
 6 | Security::putInSafety();
 7 | Security::cleanGlobals();
 8 | 
 9 | echo '<pre>';
10 | var_dump(Security::debugGlobals());
11 | echo '</pre>';
12 | 


--------------------------------------------------------------------------------
/tests/password_test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once '../src/Security.php';
 4 | use marcocesarato\security\Security;
 5 | 
 6 | $password = Security::generatePassword(15);
 7 | $guid = Security::generateGUID();
 8 | $uf_password = Security::generateFriendlyPassword('Marco Cesarato 2019', 1);
 9 | $enc_password = Security::passwordHash($password);
10 | $check = Security::passwordVerify($password, $enc_password);
11 | $wrong_password = Security::generatePassword(15);
12 | $check_false = Security::passwordVerify($wrong_password, $enc_password);
13 | 
14 | echo <<<HTML
15 | <h1>Password Tests</h1>
16 | <h2>GUID Generation</h2>
17 | <pre>$guid</pre>
18 | <h2>Password Generation</h2>
19 | <pre>Security::generatePassword(15) = "$password"</pre>
20 | <h2>Password Friendly Generation</h2>
21 | <pre>Security::generateFriendlyPassword('Marco Cesarato 2019', 1) = "$uf_password"</pre>
22 | <h2>Password Encryption</h2>
23 | <pre>Security::passwordHash("$password") = "$enc_password"</pre>
24 | <h2>Password Verify</h2>
25 | <pre>
26 | HTML;
27 | var_dump($check);
28 | echo <<<HTML
29 | </pre>
30 | <h2>Password Verify (Miss Match)</h2>
31 | <pre>
32 | HTML;
33 | var_dump($check_false);
34 | echo '</pre>';
35 | 


--------------------------------------------------------------------------------
/tests/securehtml_test.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | require_once '../src/Security.php';
  4 | use marcocesarato\security\Security;
  5 | 
  6 | ob_start();
  7 | 
  8 | Security::putInSafety();
  9 | Security::cleanGlobals();
 10 | 
 11 | ?>
 12 | <!DOCTYPE html>
 13 | <html lang="en">
 14 | 
 15 | <head>
 16 | 
 17 | 	<meta charset="utf-8">
 18 | 	<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
 19 | 	<meta name="description" content="">
 20 | 	<meta name="author" content="">
 21 | 
 22 | 	<title>Scrolling Nav - Start Bootstrap Template</title>
 23 | 
 24 | 	<!-- Bootstrap core CSS -->
 25 | 	<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
 26 | 
 27 | </head>
 28 | 
 29 | <body id="page-top">
 30 | 
 31 | <!-- Navigation -->
 32 | <nav class="navbar navbar-expand-lg navbar-dark bg-dark" id="mainNav">
 33 | 	<div class="container">
 34 | 		<a class="navbar-brand js-scroll-trigger" href="#page-top">Start Bootstrap</a>
 35 | 		<button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false" aria-label="Toggle navigation">
 36 | 			<span class="navbar-toggler-icon"></span>
 37 | 		</button>
 38 | 		<div class="collapse navbar-collapse" id="navbarResponsive">
 39 | 			<ul class="navbar-nav ml-auto">
 40 | 				<li class="nav-item">
 41 | 					<a class="nav-link js-scroll-trigger" href="#about">About</a>
 42 | 				</li>
 43 | 				<li class="nav-item">
 44 | 					<a class="nav-link js-scroll-trigger" href="#services">Services</a>
 45 | 				</li>
 46 | 				<li class="nav-item">
 47 | 					<a class="nav-link js-scroll-trigger" href="#contact">Contact</a>
 48 | 				</li>
 49 | 			</ul>
 50 | 		</div>
 51 | 	</div>
 52 | </nav>
 53 | 
 54 | <header class="bg-primary text-white">
 55 | 	<div class="container text-center">
 56 | 		<h1>Welcome to Scrolling Nav</h1>
 57 | 		<p class="lead">A landing page template freshly redesigned for Bootstrap 4</p>
 58 | 	</div>
 59 | </header>
 60 | 
 61 | <section id="about">
 62 | 	<div class="container">
 63 | 		<div class="row">
 64 | 			<div class="col-lg-8 mx-auto">
 65 | 				<h2>About this page</h2>
 66 | 				<p class="lead">This is a great place to talk about your webpage. This template is purposefully unstyled so you can use it as a boilerplate or starting point for you own landing page designs! This template features:</p>
 67 | 				<ul>
 68 | 					<li>Clickable nav links that smooth scroll to page sections</li>
 69 | 					<li>Responsive behavior when clicking nav links perfect for a one page website</li>
 70 | 					<li>Bootstrap's scrollspy feature which highlights which section of the page you're on in the navbar</li>
 71 | 					<li>Minimal custom CSS so you are free to explore your own unique design options</li>
 72 | 				</ul>
 73 | 			</div>
 74 | 		</div>
 75 | 	</div>
 76 | </section>
 77 | 
 78 | <section id="services" class="bg-light">
 79 | 	<div class="container">
 80 | 		<div class="row">
 81 | 			<div class="col-lg-8 mx-auto">
 82 | 				<h2>Services we offer</h2>
 83 | 				<p class="lead">Lorem ipsum dolor sit amet, consectetur adipisicing elit. Aut optio velit inventore, expedita quo laboriosam possimus ea consequatur vitae, doloribus consequuntur ex. Nemo assumenda laborum vel, labore ut velit dignissimos.</p>
 84 | 				 <h1>Form</h1>
 85 | 				 <form action="#" method="POST">
 86 | 				        <label>Author:</label>
 87 | 				        <input type="text" class="form-control" name="author" placeholder="Author's Name" />
 88 | 				        <input type="submit" class="form-control" name="submit" value="Submit">
 89 | 				 </form>
 90 | 				 <br>
 91 | 			</div>
 92 | 		</div>
 93 | 	</div>
 94 | </section>
 95 | 
 96 | <section id="contact">
 97 | 	<div class="container">
 98 | 		<div class="row">
 99 | 			<div class="col-lg-8 mx-auto">
100 | 				<h2>Contact us</h2>
101 | 				<p class="lead">Lorem ipsum dolor sit amet, consectetur adipisicing elit. Vero odio fugiat voluptatem dolor, provident officiis, id iusto! Obcaecati incidunt, qui nihil beatae magnam et repudiandae ipsa exercitationem, in, quo totam.</p>
102 | 			</div>
103 | 		</div>
104 | 	</div>
105 | </section>
106 | 
107 | <!-- Footer -->
108 | <footer class="py-5 bg-dark">
109 | 	<div class="container">
110 | 		<p class="m-0 text-center text-white">Copyright &copy; Your Website 2019</p>
111 | 	</div>
112 | 	<!-- /.container -->
113 | </footer>
114 | 
115 | <!-- Bootstrap core JavaScript -->
116 | <script src="https://code.jquery.com/jquery-3.3.1.slim.min.js" integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo" crossorigin="anonymous"></script>
117 | <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js" integrity="sha384-UO2eT0CpHqdSJQ6hJty5KVphtPhzWj9WO1clHTMGa3JDZwrnQq4sF86dIHNDz0W1" crossorigin="anonymous"></script>
118 | <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js" integrity="sha384-JjSmVgyd0p3pXB1rRibZUAYoIIy6OrQ6VrjIEaFf/nJGzIxFDsf4x0xIM+B07jRM" crossorigin="anonymous"></script>
119 | 
120 | </body>
121 | 
122 | </html>
123 | 
124 | 
125 | <?php
126 | 
127 | exit(Security::output(ob_get_clean()));
128 | 


--------------------------------------------------------------------------------
/tests/security_test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once '../src/Security.php';
 4 | use marcocesarato\security\Security;
 5 | 
 6 | Security::putInSafety();
 7 | Security::cleanGlobals();
 8 | 
 9 | ob_start();
10 | 
11 | echo <<<HTML
12 | <!DOCTYPE html>
13 | <html>
14 | <head>
15 |   <title>Globals Test</title>
16 | </head>
17 | <body>
18 |   <h1>Security Test</h1>
19 |   <h3>From here is possible test output security, CSRF, WAF (Firewall) and external form request protection</h3>
20 |   <h3>You can also test the AntiDOS refreshing the page many times (hold pressed F5)</h3>
21 |   <form action="#" method="POST">
22 |     <label>Username</lable>
23 |     <input type="text" name="username"><br>
24 |     <label>Password</lable>
25 |     <input type="password" name="password"><br>
26 |     <button name="submit" type="submit">Login</button>
27 |   </form>
28 | </body>
29 | </html>
30 | HTML;
31 | 
32 | if (isset($_POST['submit'])) {
33 |     echo '<h3>Result</h3>';
34 |     echo '<pre>';
35 |     var_dump($_POST);
36 |     echo '</pre>';
37 | }
38 | 
39 | $output = Security::output(ob_get_clean());
40 | echo $output;
41 | 


--------------------------------------------------------------------------------
/tests/xss_test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once '../src/Security.php';
 4 | use marcocesarato\security\Security;
 5 | 
 6 | Security::putInSafety();
 7 | Security::cleanGlobals();
 8 | 
 9 | $debug = var_export(Security::debugGlobals(), true);
10 | 
11 | echo <<<HTML
12 | <h1>Security XSS Test</h1>
13 | PS: On \$_GET & \$_COOKIE html is not permitted<br><br>
14 | <pre>
15 | $debug
16 | </pre>
17 | HTML;
18 | 


--------------------------------------------------------------------------------