php-crlf-audit

Detect CRLF injection vulnerabilities in PHP by tracing user-controlled data into HTTP response headers, cookies, or header-like outputs to identify injection vectors and generate remediation guidance.

HTTP response splitting in PHP web applications allows attackers to manipulate response headers and cookies using CRLF characters, leading to header injection, cache poisoning, or unauthorized redirects.

Audit PHP frameworks for HTTP header injection risks by analyzing header construction, output encoding, and detecting CRLF-related anomalies across the source code to pinpoint user-controlled data entering headers.

Yes, you can generate a proof-of-concept for CRLF vulnerabilities during a PHP security audit to demonstrate header manipulation risks and receive explicit remediation recommendations with structured evidence points.

Find cookie injection vectors in PHP by tracing untrusted user input into cookie construction functions and analyzing line breaks and encoding to detect CRLF anomalies and response splitting risks.

User input causes CRLF anomalies in PHP response headers when untrusted data containing line break characters is directly inserted into header construction without proper output encoding or normalization.