Enforce PHP security standards for database access, password handling, and input validation.
npx skills add https://github.com/Mte90/dotfiles --skill php-security
Please help me install this Agent Skill. Skill: PHP Security Source: https://github.com/Mte90/dotfiles/tree/main/.config/opencode/skills/php/security Command: npx skills add https://github.com/Mte90/dotfiles --skill php-security
This Skill helps developers write more secure PHP code by enforcing best practices for database interactions, password management, and input validation, preventing common vulnerabilities like SQL injection and XSS.
Apply PHP security standards to the provided code snippet.
High-intent search queries and answers about installing and using this skill.
To prevent SQL injection in PHP, use PDO prepared statements instead of raw SQL concatenation. Prepared statements separate SQL logic from data input, ensuring user-supplied values are treated strictly as data and cannot execute malicious database commands.
The best way to hash passwords in PHP is using Argon2id hashing. This modern algorithm provides robust protection against brute-force attacks by utilizing memory-hard computations, ensuring sensitive credentials remain securely encrypted during storage and verification.
To protect against cross-site scripting (XSS) in PHP, apply strict input validation and proper output escaping. Sanitizing user inputs ensures data integrity, while escaping output prevents malicious scripts from executing in the browser.
Yes, this PHP security approach works with existing legacy codebases by auditing snippets for security flaws. It identifies insecure anti-patterns like raw SQL concatenation and weak hashing, guiding developers to refactor and enforce modern standards.
You should avoid raw SQL concatenation in PHP database queries because it directly exposes your application to SQL injection vulnerabilities. Using PDO prepared statements safely separates query structure from data, neutralizing malicious database manipulation attempts.
sk8metalmeConfigure secure PHP development environments for Slim, PDO, and Composer projects.
yunmengyaScan composer.lock files to identify known PHP dependency vulnerabilities.
appliedailearnerTroubleshoot, configure, and securely deploy Azure Fluid Relay workflows.
LucasdoreacSecure MutuaPIX login flows across Laravel Sanctum and Next.js.
