php.ini-production github.com ↗
PHP's recommended production configuration file shipped in the php-src repository.
OtherSecurity & privacyphpconfigurationhardening
Recommended in 1 thread
Chained PHP2Shell exploit roots 25 servers, including US Government serversdreamgroup.com ·
Suggested as a baseline for locking down PHP on exposed admin pages, though others noted it doesn't address this bug.
Similar tools
- 1 thread
- 1 thread
- Privacy Guides ↗Security & privacy1 thread
A community website recommending privacy tools, including VPN providers.
- 1 thread
- 1 thread
- Remi's RPM repository ↗DevOps & CI1 thread
A third-party repository providing PHP packages for Red Hat-derived distributions.
- sandbox-runtime ↗Security & privacy1 thread
Anthropic's lightweight sandbox for restricting filesystem and network access of processes.
- Certificate Transparency ↗Security & privacy1 thread
A public logging framework that records issued TLS certificates so misissuance can be detected.
Also in Security & privacy
- Tor3 threads
An anonymity network that routes traffic through volunteer relays.
- 2 threads
- 2 threads
- Convergence ↗2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
- Ente Photos2 threads
An end-to-end encrypted photo storage service.
- Lockdown Mode ↗2 threads
An optional iOS hardening mode that restricts attachments, web features and connections.
- Paranoid Crypto ↗2 threads
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
- 2 threads
- YubiKey2 threads
A hardware security key supporting FIDO2, PIV and OpenPGP.
- 1Password ↗1 thread
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
- ACME Renewal Information1 thread
An ACME extension that lets CAs tell clients when to renew certificates early.
- AWS WAF1 thread
Amazon's managed web application firewall service.
Link from a commenter, not checked or endorsed by us: ↗ https://github.com/php/php-src