PHP Safe Guard 0.1.0

First public release of PHP Safe Guard, the open-source engine behind https://phpsafe.cloud

Shield

• Request inspection for SQL injection, XSS, path traversal and code injection
• Blocks known attack-tool user agents (sqlmap, nikto, wpscan, nuclei, ...)
• Rejects executable uploads and PHP code hidden inside uploads
• Safe default security headers and login rate limiting
• block and log modes, JSON-lines log, block page in English, Korean, Chinese and Japanese

Scanner

• Static analysis with PHP's own tokenizer (code is never executed), 18 rules
• phpsafe scan CLI with text and JSON output and --fail-on for CI
• Messages in 4 languages and // phpsafe-ignore inline suppression

Helpers

• Csrf, Escape, Upload, plus e() and csrf_field() shortcuts

Requires PHP 8.1+. Zero dependencies. MIT license.