processwire-security

To secure your ProcessWire site before production, you should configure strict file permissions, harden the admin panel, enable HTTPS, and implement input sanitization. This Skill provides configuration advice and code examples to prevent common web exploits.

The best way to prevent XSS and selector injection in ProcessWire is by using the `$sanitizer` API for input validation and following secure template coding practices. This Skill details how to implement these sanitization techniques effectively.

You can implement CSRF protection in ProcessWire by integrating CSRF tokens into your forms to prevent cross-site request forgery attacks. This Skill provides practical code examples and configuration advice for adding these security tokens.

Secure file permissions for a ProcessWire installation involve configuring directories and files with restrictive access levels to prevent unauthorized modifications. This Skill recommends and demonstrates the exact secure file and directory permissions required.

You can harden the ProcessWire admin panel by enabling two-factor authentication, enforcing strong passwords, and monitoring login activity. This Skill offers specific methods to secure admin access and protect against unauthorized entry.

Handling insecure file uploads in ProcessWire requires strict input validation and secure configuration to prevent malicious file execution. This Skill addresses common vulnerabilities like insecure file uploads and offers practical coding defenses.