PHPackages                             oneup/contao-security-checker-bundle - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. oneup/contao-security-checker-bundle

AbandonedArchivedContao-bundle[Security](/categories/security)

oneup/contao-security-checker-bundle
====================================

This check works by comparing the composer.lock against an open vulnerability database. A clean check does not mean there are absolutely no security problems whatsoever.

0.4.9(6y ago)94.1k1[3 issues](https://github.com/1up-lab/ContaoSecurityCheckerBundle/issues)MITPHPPHP ^7.1

Since May 20Pushed 5y ago3 watchersCompare

[ Source](https://github.com/1up-lab/ContaoSecurityCheckerBundle)[ Packagist](https://packagist.org/packages/oneup/contao-security-checker-bundle)[ Docs](http://1up.io)[ RSS](/packages/oneup-contao-security-checker-bundle/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependencies (11)Versions (20)Used By (0)

WARNING:
========

[](#warning)

Don't use this piece of software anymore as the underlying web service will stop working at the end of January 2021. Instead, use the [Open-Source CLI tool](https://github.com/fabpot/local-php-security-checker) that does the same locally, or use the [Symfony CLI](https://symfony.com/download) tool.

---

Contao Security Checker Bundle
==============================

[](#contao-security-checker-bundle)

This extension provides a way to automatically or manually check your installed vendor extensions and the Contao core against the open vulnerability database at [FriendsOfPHP/security-advisories](https://github.com/FriendsOfPHP/security-advisories).

[![Author](https://camo.githubusercontent.com/a1ca831710cc70c5c356e8dbc27e1212ed4d41a3ad0c6d9f7afbb02d78250cf4/687474703a2f2f696d672e736869656c64732e696f2f62616467652f617574686f722d40317570676d62682d626c75652e7376673f7374796c653d666c61742d737175617265)](https://twitter.com/1upgmbh)[![Software License](https://camo.githubusercontent.com/30597ff9a350144f03bffdd9183e16468e0b3ca1193e1d08591d992622738d55/687474703a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4d49542d627269676874677265656e2e7376673f7374796c653d666c61742d737175617265)](LICENSE)[![Total Downloads](https://camo.githubusercontent.com/5ecb7283eddb07a0aa679594e94b142ed2f4a2bcec988b7b3f94825fc1fa94e7/687474703a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f6f6e6575702f636f6e74616f2d73656375726974792d636865636b65722d62756e646c652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/oneup/contao-security-checker-bundle)

\--

Features included:

- Perform the check regularly.
- Get an E-Mail if the audit failed in any way. (Or always get an email if a check was performed. Your choice.)
- Start the check manually.
- Suppress notifications for manually started checks.

\--

[![Screenshot](https://cloud.githubusercontent.com/assets/754921/15356457/11e74f6e-1cf9-11e6-9d63-a13de0ef31b3.png)](https://cloud.githubusercontent.com/assets/754921/15356457/11e74f6e-1cf9-11e6-9d63-a13de0ef31b3.png)

**Note**: A clean check does not imply that there are no security problems present, it just means that the test against the underlying database reveiled nothing.

Documentation
-------------

[](#documentation)

Installation
------------

[](#installation)

Perform the following steps to install and use the basic functionality of the OneupUploaderBundle:

- Download the ContaoSecurityCheckerBundle using Composer
- Enable the bundle
- Configure the bundle

### Step 1: Download the ContaoSecurityCheckerBundle

[](#step-1-download-the-contaosecuritycheckerbundle)

Add OneupUploaderBundle to your composer.json using the following construct:

```
$ composer require oneup/contao-security-checker-bundle "^0.4"

```

Composer will install the bundle to your project's `vendor/oneup/contao-security-checker-bundle` directory.

### Step 2: Enable the bundle

[](#step-2-enable-the-bundle)

Enable the bundle in the kernel:

```