This is the code and documentation repository for the OWASP PHP Security Project.

OWASP PHP Security Project is an effort by a group of PHP developers in securing PHP web applications, using a collection of decoupled flexible secure PHP libraries, as well as a collection of PHP tools.

On top of a collection of libraries and tools, PHPSEC contains a sample framework to demonstrate proper usage of the tools and libraries, as well as guidelining new PHP projects. It can also be easily merged with existing PHP code, because it is both decoupled and flexible. Proper usage of PHPSEC will result in the target system being much more secure.

PHPSEC is suitable for three group of developers:

• Framework developers can use the libraries and tools to strengthen their framework security.
• PHP application developers can use the library and tools to enhance their application security.
• Novice PHP developers can use the tools and libraries to create secure applications from scratch.

• Official Website: phpsec.owasp.org
• Official Wiki page: owasp.org/phpsec

• Rahul Chaudhary
• Abbas Naderi
• Abhishek Das
• Shivam Dixit
• Achim
• Zaki Akhmad
• A V Minhaz
• Paulo Guerreiro