• phpSec is a PHP5 library that provides you as a developer with a set of commonly (and some that should be) used methods, protecting your application against various attacks.

• XSS filter.
• CSRF protection.
• Password hashing helper functions.
• Logging functions.
• Data encryption.
• Enhanced session security.
• Session encryption.
• Random data generator.
• Yubikey integration.

For more information on installation and usage, please check out the phpSec manual.

PHP 5.3.0 or greater with the following extensions is required to use phpSec:

• Mcrypt
• Hash

If you need any help with using phpSec or need to report a bug/security issue or you want to request a new feature please use the phpSec issues. Make sure you label the issue with a appropriate label.