The script runs a series of tests to identify potential security issues and offer suggestions.

It can be reached easily by calling the "index.php" files after uploading the project folder.

PHP Security Consortium also has a PHP security guide which you may want to check out.

P.S. PhpSecInfo is definitely not a replacement for secure coding practices & doesn’t audit PHP code.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• Zimplit: Easiest CMS For Simple Websites
• Wiki-Like Project Management Tool: Streber
• Web-Based PHP FTP Application: phpWebFtp
• Web-Based MySQL Management With Only 1 File: Adminer
• Web Server That Runs On CD-Rom: Server2Go

It aims to be a more user-friendly solution as text-based captchas can sometimes be so hard to read for humans besides bots.

VidoopCaptcha is a hosted service & have plugins for WordPress, Ruby on Rails, and Drupal. Also, there are libraries for programming languages such as PHP, Python, and .NET.

It offers some customization options like category, number of grid squares, color & grid size. For a demo of this security resource, click here.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• OpenInviter: Open Source Contact Importer (From E-mail Providers, Social Networks..)
• Installing Popular Web Applications In Minutes With Bitnami
• Wordpress QuickAdmin Plugin By WRD
• WooThemes Launches With New Themes
• Wappalyzer: Find Out Apps. Used On A Website

jCryption is a jQuery plugin for encrypting POST/GET data submitted by forms.

It uses public-key algorithm of RSA for the encryption & has a PHP file for handling the decryption of data.

Some features of jCryption:

• encryption up to 2048 bit
• AjaxSubmit supported
• doesn’t block the browser on calculations

The plugin is easy to install, use and extend. Calling the jCryption function:

$("#formID").jCryption();

and handling the data with the ready-to-use PHP function is enough.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• Zoom Script With A Smart Interface: TJPzoom
• YUI Slideshow: Customizable And Animated Slideshows
• Winners Of SSLmatic – 5 RapidSSL Certificates Giveaway
• What You See Is What You Ajax: WaveMaker
• wForms: Easy JavaScript Form Controls

Such virtual keyboards are generally used in bank websites or forms that require extra security. They are a step for preventing keyloggers (but may not be an absolute solution as keyloggers are getting smarter).

It is very easy to add new characters to the keyboard if needed & the keyboard can be dragged to anywhere on the screen.

To check the demo, click here.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• Zoom Script With A Smart Interface: TJPzoom
• YUI Slideshow: Customizable And Animated Slideshows
• What You See Is What You Ajax: WaveMaker
• wForms: Easy JavaScript Form Controls
• Web Based FTP Client Similar To Windows Explorer

It lets you define all the variables of the captcha including the distortion level, color, Flash effect & more.

The configuration wizard created the necessary JavaScript and ASP / PHP files and shows how to install this captcha script step by step.

One nice feature of Internet Captcha is, it shows you the security level of the captcha you designed.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• Share And Find Codes You Need With Snipplr
• Free Flash Charts From FusionCharts
• Event Calendar With ASP-PHP-ASP.NET Support
• Convert HTML To ASP, PHP Or JSP
• 11 Syntax Highlighters To Beautify Code Presentation

It is developed by HP Web Security Research Group in coordination with Microsoft Security Response Center.

Scrawlr crawls a website while simultaneously analyzing the parameters of each individual web page for SQL Injection vulnerabilities.

After the scanning process, if it can find, it even shows your database table names as a proof of the possible SQL injection vulnerabilities.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• SQLServerPedia: A Wiki On SQL Server
• More Accurate Star Rating: AJAX Star Rating.js
• htmlSQL: Query HTML Elements Like SQL
• Free To Use IP-To-Country/City-Database & API
• Free IP / Geolocation Database And API: WIPmania

Web application firewalls are used to create an external security layer to improve security, detection, and prevention of attacks before they hit web applications.

Web servers are well-equipped to log traffic for marketing analyses, but they are not good when it comes to logging of traffic to web applications.

ModSecurity is a web application firewall for Apache which makes full HTTP transaction logging possible, allowing complete requests and responses to be logged.

This web application firewall has an easy to use rule engine which creates the core of the system.

ModSecurity can monitor the HTTP traffic in real time, has other features like parallel text matching, Geo IP resolution, credit card number detection, support for content injection, automated rule updates, scripting & more.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• Web Server That Runs On CD-Rom: Server2Go
• Open Source E-Commerce Software: CRE Loaded PCI CE
• Free And Ajaxed IMAP Client: Xuheki
• Brilliant Team Collaboration App.: Mindquarry
• .htaccess Examples Library

It can be easily installed and very well documented.

Different than the famous reCAPTCHA, which is web-based, Securimage is a downloadable solution that requires PHP and GD library to work.

Some feature of this captcha solution:

• Show an image in just 3 lines of code
• Validate submitted entries in less than 6 lines of code
• Customizable code length
• Choose the character set
• TTF font support
• Use custom GD fonts when TTF is not available
• Easily add background images
• Multi colored, angled, and transparent text options
• Arched lines through text
• Generates audible CAPTCHA files in wav format
• Use a word list for creating CAPTCHA codes

You can find a demo of the captcha here.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• Zimplit: Easiest CMS For Simple Websites
• Wiki-Like Project Management Tool: Streber
• Web-Based PHP FTP Application: phpWebFtp
• Web-Based MySQL Management With Only 1 File: Adminer
• Web Server That Runs On CD-Rom: Server2Go

HTML Purifier is a well documented, standards-compliant HTML filter library written in PHP. It simply:

• Removes all malicious code (better known as XSS) with an audited, secure yet permissive whitelist.
• Makes sure your documents are standards compliant. 

HTML Purifier requires PHP 5  (PHP 4 versions are not supported any more but can be downloaded). It saves so much time while developing & offers much more expertise than most of the self-coded data-handling libraries as HTML Purifier is concentrated only in this area.

This open source secure data handling solution also has a comparison chart wih other HTML filters.

Some community-written plugins for CMS softwares, WYSIWYG editors can be found in the HTML Purifier website.

Special Downloads:
Ajaxed Add-To-Basket Scenarios With jQuery And PHP
Free Admin Template For Web Applications
jQuery Dynamic Drag’n Drop
ScheduledTweets

Advertisements:
SSLmatic – Cheap SSL Certificates (from $19.99/year)
Follow WebResourcesDepot At Twitter And Get More Resources!

Related posts

• Convert HTML To ASP, PHP Or JSP
• Zimplit: Easiest CMS For Simple Websites
• Wiki-Like Project Management Tool: Streber
• Wiki System With One HTML File: TiddlyWiki
• Web-Based PHP FTP Application: phpWebFtp