v1.2.0

PHPeek now protects people who don't own any crypto too. A hacked store doesn't just serve wallet drainers: it copies cards at checkout and leaks passwords.

💳 Card Guard

• Anti-skimmer: type your card number and PHPeek recognises it if a hidden script tries to send it anywhere other than the store or a payment provider (Stripe, PayPal, Adyen…). The request fails and you're told where it was going.
• Clicked Pay and the form sends your card to an unknown site? PHPeek asks first.
• On 🔴 exposed stores: a heads-up at the card field. Pay with PayPal / Apple Pay / Google Pay instead.

🔑 Password Guard

On 🔴 exposed sites, a heads-up before you type your password: PHP2Shell can leak server memory. Unique password + 2FA.

🔎 Check any site

Type an address in the popup and check a store before you even open it. This is the only time PHPeek contacts a site: one page, no cookies.

Honest limits

Skimmers that encrypt the card, send it from a later page, or post it back to the hacked store's own server can get through. See the README's threat model.

Full list in CHANGELOG.md. Tested in real Chromium against skimmer techniques, independently reviewed.

SHA-256

• phpeek-chrome-1.2.0.zip: fe6d30a5b04a0514b515371026b6c286ed152b5cb62dbaf91b640eb6e6e8360d
• phpeek-firefox-1.2.0.zip: e1c297de68903978bfa094693ebf19ea1c1863df3408f7a58732a92c60691864