security-patterns

Prevent SQL injection and XSS in PHP by replacing unsafe code with prepared statements for database access and applying proper output escaping for user input. This Skill provides code examples for both security patterns to protect your application.

Implement CSRF tokens and password hashing in PHP by enabling password_hash-based authentication and integrating CSRF protection mechanisms. This Skill consolidates these security patterns into a single reference for defending user accounts and sessions.

Yes, this PHP security guidance works with Laravel, Symfony, and CakePHP. It provides framework-agnostic guidance that applies to any PHP project across these frameworks for preventing common vulnerabilities during development and code reviews.

Validate user input and sanitize data in PHP by applying input validation patterns that reject invalid or malicious user input. This Skill codifies these requirements and provides code examples to secure your application during development.

Use secure session configuration and safe file upload patterns to protect your PHP application. This Skill codifies these security patterns alongside path traversal prevention and error handling to ensure comprehensive vulnerability protection.