PHPackages                             w34u/ssp - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. w34u/ssp

ActiveLibrary[Authentication & Authorization](/categories/authentication)

w34u/ssp
========

Secure login system for php frameworks, applications and sites

v3.3.3(1mo ago)293[3 PRs](https://github.com/julesbl/ssp/pulls)MITPHPPHP ^7.4 || ^8.0

Since Jan 26Pushed 1mo ago3 watchersCompare

[ Source](https://github.com/julesbl/ssp)[ Packagist](https://packagist.org/packages/w34u/ssp)[ RSS](/packages/w34u-ssp/feed)WikiDiscussions master Synced 2w ago

READMEChangelogDependencies (21)Versions (56)Used By (0)

Simple Site Protection
======================

[](#simple-site-protection)

Secure login system for php frameworks, applications and sites

These set of php routines are designed to allow php developers to easily secure a site or an application.

Based on the ideas and information written about in \[Innocent Code\] (http:///[www.amazon.co.uk/Innocent-Code-Security-Wake-up-Programmers/dp/0470857447/ref=sr\_1\_1?ie=UTF8&s=books&qid=1266594625&sr=1-1](http://www.amazon.co.uk/Innocent-Code-Security-Wake-up-Programmers/dp/0470857447/ref=sr_1_1?ie=UTF8&s=books&qid=1266594625&sr=1-1)) by the security consultant \[Sverre H. Huseby\] () the code attempts to make the site resilient against most forms of attack.

Installation
------------

[](#installation)

composer require w34u/ssp

1. Move vendor/w34u/ssp/cfg to version controlled part of your project, preferably outside the browser viewable part of your project.
2. Rename vendor/w34u/ssp/cfg/Configuration.change.php to Configuration.php and assign values to all the properties to do the database connection and secure your site.
3. Add "autoload": { "psr-4": { "w34u\\\\ssp\\\\": "cfg/" } }, to composer.json so that the configurations load and then run 'composer dumpautoload' to refresh the loader.
4. Move vendor/w34u/ssp/cfg/sspadmin to a browser viewable area and ensure sspadmin/includeheader.php requires the composer autoloader in vendor.
5. Point your favourite browser at sspadmin/setup and follow the instructions to create the database and your first admin login.

\[Originally hosted on source forge for old versions\] ()

System requirements
-------------------

[](#system-requirements)

PHP >= 5.5 and up.

adodb/adodb-php >= 5.0

mbstring

mcrypt

Attacks hardened against are:
-----------------------------

[](#attacks-hardened-against-are)

- Sql injection.
- Invalid character injection in forms.
- Javascript injection in forms.
- Sesson theft.
- Session takeover.
- One forms out put being used into another.
- Designed to be used with ssl thus helping to prevent man in the middle type attacks.

Facilities provided by this set of libraries and routines:
----------------------------------------------------------

[](#facilities-provided-by-this-set-of-libraries-and-routines)

- Basic joinup routine.
- Password recovery.
- User admin.
- User self admin.
- Fully templated using fast simple template class.
- Powerful (and paranoid) form building class.
- Data checking class.
- Useful lister and html menu list generation classes
- Works with php 5.0 upwards
- Uses database abstraction to work with most databases, has been used with MySql, Access and MS Sql Server.
- Multi lingual capability with browser language checking.

Highly configurable session, login and debug:
---------------------------------------------

[](#highly-configurable-session-login-and-debug)

- Http or Https.
- Variable number of actals for ip checking.
- Fully configurable on types of checks to be done.
- Login by email or username.
- Extend the login for other user inputs.
- Error output either to screen or log file for live sites.

###  Health Score

52

—

FairBetter than 96% of packages

Maintenance91

Actively maintained with recent releases

Popularity12

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity82

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~77 days

Recently: every ~162 days

Total

50

Last Release

45d ago

PHP version history (2 changes)v3.0.0PHP ^5.5 || ^7.0

v3.2.28PHP ^7.4 || ^8.0

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/1729463?v=4)[Julian Blundell](/maintainers/julesbl)[@julesbl](https://github.com/julesbl)

---

Top Contributors

[![julesbl](https://avatars.githubusercontent.com/u/1729463?v=4)](https://github.com/julesbl "julesbl (125 commits)")

---

Tags

phpsecuritysession-managementsspwebsitesecurityauthauthenticate

###  Code Quality

TestsCodeception

### Embed Badge

![Health badge](/badges/w34u-ssp/health.svg)

```
[![Health](https://phpackages.com/badges/w34u-ssp/health.svg)](https://phpackages.com/packages/w34u-ssp)
```

###  Alternatives

[showdoc/showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online

12.8k7.1k](/packages/showdoc-showdoc)[matomo/matomo

Matomo is the leading Free/Libre open analytics platform

21.7k39.6k](/packages/matomo-matomo)[phlak/directory-lister

PHP directory lister

2.5k1.4k](/packages/phlak-directory-lister)[azuracast/azuracast

The AzuraCast self-hosted web radio station management suite.

4.0k27.9k](/packages/azuracast-azuracast)[matricali/akamai-token-auth

This library provides necessary logic to generate Akamai edge authorization token and signed URL.

111.2M](/packages/matricali-akamai-token-auth)[egroupware/openid

EGroupware OpenID Connect / OAuth2 server

1328.9k5](/packages/egroupware-openid)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)