session-security

Full Stack Restaurant Website developed with HTML , CSS , JavaScript , PHP and Composer.

Device Bound Session Credentials (DBSC) for Node.js — middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.

SecurePHP est une bibliothèque PHP légère qui sécurise vos applications web contre XSS, CSRF et attaques de session, avec des helpers pour sécuriser les fichiers et les requêtes. Simple à intégrer et à tester, elle renforce la sécurité de vos formulaires et sessions.

AI-powered continuous authentication that prevents session hijacking using behavioral biometrics with zero user friction.

Async trusted-device management and session security for FastAPI.

✦ Preact session security manager with device trust, risk review, activity history, evidence export, and remote sign-out controls.

Parse Set-Cookie flags — detect missing Secure, HttpOnly, SameSite and cookie security misconfigurations for AppSec reviews.

Sign and verify URLs and cookies to add a layer of protection to publicly accessible routes

A security-focused PHP 8 and MySQL authentication starter with CSRF protection, session hardening and role-based access control.

A lightweight PHP security middleware implementing session protection, CSRF defense, rate limiting, and secure headers.

Refresh token rotation that tells a retried request from a stolen token by whether the successor was consumed

离线的第三方服务凭证与交付风险核验清单，含结构化规则、CLI 和自动测试

Login anomaly detection: impossible travel, fail bursts, and device churn (Python + TypeScript)

Web application security assessment focused on Session ID and Cookie vulnerabilities, session management risks, and mitigation strategies using DVWA.is, risk assessment, and mitigation strategies.