PHPackages                             shieldfy/normalizer - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. shieldfy/normalizer

ActiveLibrary[Security](/categories/security)

shieldfy/normalizer
===================

This package is useful for the input normalization, before running hardcore IDS/IPS rules. It normalize the inputs to fight against WAF Bypassing techniques using obfuscation or other techniques to hide payloads.

1.0.4(9y ago)81.4k1[1 issues](https://github.com/shieldfy/normalizer/issues)1MITPHPPHP &gt;=5.6

Since Nov 27Pushed 9y ago6 watchersCompare

[ Source](https://github.com/shieldfy/normalizer)[ Packagist](https://packagist.org/packages/shieldfy/normalizer)[ RSS](/packages/shieldfy-normalizer/feed)WikiDiscussions master Synced 2mo ago

READMEChangelog (5)Dependencies (1)Versions (6)Used By (1)

Shieldfy Normaizer
==================

[](#shieldfy-normaizer)

This package is useful for the input normalization, before running hardcore IDS/IPS rules. It normalize the inputs to fight against WAF Bypassing techniques using obfuscation or other techniques to hide payloads.

[![Packagist](https://camo.githubusercontent.com/758d722b5faa5cee060592b22423c7c845ed1302854366af1cfedd252ebe8f12/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f736869656c6466792f6e6f726d616c697a65722e7376673f6c6162656c3d5061636b6167697374267374796c653d666c61742d737175617265)](https://packagist.org/packages/shieldfy/normalizer)[![VersionEye Dependencies](https://camo.githubusercontent.com/3819fa7ee57676b0552aea1cba1641e009271e835abb3fe6cfe23c0b6b1b0d0e/68747470733a2f2f696d672e736869656c64732e696f2f76657273696f6e6579652f642f7068702f736869656c6466793a6e6f726d616c697a65722e7376673f6c6162656c3d446570656e64656e63696573267374796c653d666c61742d737175617265)](https://www.versioneye.com/php/shieldfy:normalizer/)[![Scrutinizer Code Quality](https://camo.githubusercontent.com/fccb12a734a83f1ec3dda4af5cd83ade2ddf21d7887c49127b9f3798f95e49f7/68747470733a2f2f696d672e736869656c64732e696f2f7363727574696e697a65722f672f736869656c6466792f6e6f726d616c697a65722e7376673f6c6162656c3d5363727574696e697a6572267374796c653d666c61742d737175617265)](https://scrutinizer-ci.com/g/shieldfy/normalizer/)[![Code Climate](https://camo.githubusercontent.com/79a9eae3ed9b9328962e43bbb014c846b4628ce267a98632c0da30c22cac0c6b/68747470733a2f2f696d672e736869656c64732e696f2f636f6465636c696d6174652f6769746875622f736869656c6466792f6e6f726d616c697a65722e7376673f6c6162656c3d436f6465436c696d617465267374796c653d666c61742d737175617265)](https://codeclimate.com/github/shieldfy/normalizer)[![License](https://camo.githubusercontent.com/6f47755877af86e5de3b7e176fabf9eed807f9977c14feb641f400ce367b6165/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f6c2f736869656c6466792f6e6f726d616c697a65722e7376673f6c6162656c3d4c6963656e7365267374796c653d666c61742d737175617265)](https://github.com/shieldfy/normalizer/blob/develop/LICENSE)

Table Of Contents
-----------------

[](#table-of-contents)

- [Usage](#usage)
- [Installation](#installation)
- [Changelog](#changelog)
- [Support](#support)
- [Contributing &amp; Protocols](#contributing--protocols)
- [Security Vulnerabilities](#security-vulnerabilities)
- [Credits](#credits)
- [License](#license)

Usage
-----

[](#usage)

Usage is pretty easy and straightforward:

```
$value = "select/*!from*/information_schema.columns/*!where*/column_name%20/*!like*/char(37,%20112,%2097,%20115,%20115,%2037)";

// Run all normalizers
$result = (new \Shieldfy\Normalizer\Normalizer($value))->runAll();
echo $result;
// select from information_schema.columns where column_name like char(37, 112, 97, 115, 115, 37) %pass%

// Run single normalizer
$result = (new \Shieldfy\Normalizer\Normalizer($value))->run('comments');
```

Installation
------------

[](#installation)

Install the package via composer:

```
composer require shieldfy/normalizer
```

### note about serialization

[](#note-about-serialization)

Serialize / Unserialize can be danger due to its ability to convert object and it can be used to preform object injection attack. So explicit normalization not allowed in php version before php 7 thats because php7 offered new options to prevent object serialization see [here](http://php.net/unserialize)

Changelog
---------

[](#changelog)

Refer to the [Changelog](CHANGELOG.md) for a full history of the project.

Support
-------

[](#support)

The following support channels are available at your fingertips:

- [Help on Email](mailto:team@shieldfy.com)

Contributing &amp; Protocols
----------------------------

[](#contributing--protocols)

Thank you for considering contributing to this project! The contribution guide can be found in [CONTRIBUTING.md](CONTRIBUTING.md).

Bug reports, feature requests, and pull requests are very welcome.

- [Versioning](CONTRIBUTING.md#versioning)
- [Pull Requests](CONTRIBUTING.md#pull-requests)
- [Coding Standards](CONTRIBUTING.md#coding-standards)

Security Vulnerabilities
------------------------

[](#security-vulnerabilities)

If you discover a security vulnerability within this project, please send an e-mail to [security@shieldfy.com](security@shieldfy.com). All security vulnerabilities will be promptly addressed.

Credits
-------

[](#credits)

This package is based on the original converters written by Mario Heiderich &amp; Christian Matthies the creators of [PHP IDS](https://github.com/PHPIDS/PHPIDS/) project with help from the generous security &amp; opensource community.

License
-------

[](#license)

This software is released under [The MIT License (MIT)](LICENSE).

(c) 2016 Shieldfy Inc, Some rights reserved.

###  Health Score

32

—

LowBetter than 72% of packages

Maintenance18

Infrequent updates — may be unmaintained

Popularity21

Limited adoption so far

Community16

Small or concentrated contributor base

Maturity62

Established project with proven stability

 Bus Factor1

Top contributor holds 69% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~34 days

Total

5

Last Release

3317d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/9817b8aec8f20a77d9b89f64e016bdd9c68eafee34fa70a8d09ffe0f35221768?d=identicon)[shieldfy](/maintainers/shieldfy)

---

Top Contributors

[![netcode](https://avatars.githubusercontent.com/u/286371?v=4)](https://github.com/netcode "netcode (20 commits)")[![Omranic](https://avatars.githubusercontent.com/u/406705?v=4)](https://github.com/Omranic "Omranic (8 commits)")[![harston](https://avatars.githubusercontent.com/u/7628524?v=4)](https://github.com/harston "harston (1 commits)")

---

Tags

normalizesecurityidsapplicationfirewalldetectionobfuscationbypassattackipsshieldfy

### Embed Badge

![Health badge](/badges/shieldfy-normalizer/health.svg)

```
[![Health](https://phpackages.com/badges/shieldfy-normalizer/health.svg)](https://phpackages.com/packages/shieldfy-normalizer)
```

###  Alternatives

[akaunting/laravel-firewall

Web Application Firewall (WAF) package for Laravel

999465.8k2](/packages/akaunting-laravel-firewall)[fuko-php/masked

Masks sensitive data: replaces blacklisted elements with redacted values

14094.5k](/packages/fuko-php-masked)[s1syphos/php-simple-captcha

Simple captcha generator

2737.8k6](/packages/s1syphos-php-simple-captcha)[bnomei/kirby3-redirects

Setup performant HTTP Status Code Redirects from within the Kirby Panel

269.1k](/packages/bnomei-kirby3-redirects)[ionut/sylar

Sylar it's the Intrusion Detection System(IDS) which you can trust!

252.6k](/packages/ionut-sylar)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
