Posts
-
Howdah 1.3: phar, SSRF, and closing the PHP 5.x gap
Opt-in phar:// and SSRF guards, and include/eval now active on PHP 5.x. Both new guards are off by default and log first; the post lists what they do not catch.
-
Howdah 1.2: guarding what PHP is about to do
Layer 3 arrives — sink hardening. It guards command execution and unserialize on every supported PHP, and include/eval on PHP 7.0+. It detects and logs, and does not block by default.
-
Howdah 1.1: watching what comes in
Layer 2 arrives — input inspection that detects and logs SQL injection, path traversal and command-injection patterns in request values. It does not block by default.
-
Howdah 1.0: a defensive firewall inside PHP
The first full release — apt/yum repositories, an install picker, a browser demo, and Layer-1 protection complete, on PHP 5.4 through 8.5.
-
PHP2Shell, explained plainly
What the PHP2Shell upload-flood class is, why only a PHP extension can stop it, and exactly what Howdah does and does not verify.