componenta/http-csrf-middleware
CSRF token managers and PSR-15 middleware for Componenta
时间：2026-06-17 15:40
vercodea/auth-core
Enterprise-grade authentication system with rate limiting (IP + user), VPN/proxy detection, pipeline access locking, CSRF protection, secure session management, OTP verification, magic link recovery, password strength validation, common/reserved password blocklists, and SQL injection prevention.
时间：2026-06-15 21:51
docile/security
Authentication, authorization, CSRF, rate limiting and signed URLs for Docile
时间：2026-06-13 21:54
mnb/mnb-secure-core
mnb-secure-core v1.0 reusable no-framework PHP security core for custom applications.
时间：2026-06-12 15:20
ekumanov/flarum-ext-edge-cache
Cookieless guest page views + CSRF retry shim, enabling safe Cloudflare edge caching of guest HTML.
时间：2026-06-12 12:54
mandrael/contao-form-csrf-fix
Behebt das Problem "Ungültiges Anfrage-Token" (HTTP 400), auf das Erstbesucher beim Absenden eines Contao-Formulars stoßen können (contao/contao#2820). Rein serverseitig, ohne JavaScript.
时间：2026-06-11 00:28
oihana/php-middleware
Composable PHP middleware helpers — security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, X-Content-Type-Options), CORS with preflight, CSRF, request-id, maintenance mode, rate limiting. PSR-7 compatible, zero magic strings.
时间：2026-05-27 10:20
laramint/laravel-security-scanner
Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gap
时间：2026-05-15 01:29
vortos/vortos-security
Vortos enterprise security — HTTP headers, CORS, CSRF, IP filtering, request signing, encryption, secrets, and data masking
时间：2026-05-10 12:02
wttks/mailform
PHP メールフォームフレームワーク。CSRF / Honeypot / レート制限 / AI スパム判定の多段防御、確認画面フロー、マルチフォーム共通設定、リアルタイムバリデーションを内蔵。
时间：2026-04-30 03:24
impruthvi/agent-detector-laravel
Laravel companion for agent-detector: CSRF bypass, agent log channel, and session headers for AI coding agents.
时间：2026-04-26 07:18
enlivenapp/flight-csrf
CSRF protection middleware and helpers for FlightPHP
时间：2026-04-18 19:06
timefrontiers/php-session
Modern PHP session manager with authentication state, access control, and CSRF protection
时间：2026-04-14 23:40
phpdot/session
Secure session management with pluggable handlers, flash data, CSRF tokens, and PSR-15 middleware.
时间：2026-04-12 12:14