A considered approach to websites, stores and content platforms.
Explore ServicesPractical craft for people building for the web.
Explore DevelopmentLearn something. Find a tool. Meet your next collaborator.
Practical ideas for your next build.
Find useful software and free utilities.
Meet makers and find expert help.
Finding your next read
Tag
Everything we have published about Security: practical ways to evaluate, choose, and work with it.
Remove common EXIF, GPS, and embedded text metadata from JPG, PNG, or WebP files, then verify the cleaned copy before sharing it.
Read the guide
Learn how to create a long, unique password or memorable random passphrase, estimate its strength, and store it safely without reusing secrets.
Respond to a suspected PHP website compromise with evidence preservation, containment, verified patching, trustworthy recovery and credential revocation.
Remove untrusted PHP object deserialization, define a bounded JSON contract and plan legacy migration without preserving an unsafe parser fallback.
Review PHP session ownership, cookie policy, identifier rotation, expiry and CSRF validation with an original token helper and practical integration checks.
Validate PHP uploads, bound file size, generate server-owned names and plan private storage and authorized downloads. Includes a focused validation helper.
Use PDO value parameters, fixed sorting and tenant authorization together. Review an original query example and a practical SQL security test matrix.
Understand what Composer audit, platform checks and PHP runtime updates each prove, then connect dependency evidence to the artifact actually deployed.
Learn why php -v can differ from your website. Trace the web handler, verify serving workers and document the real PHP build without a public phpinfo dump.
Related topics
Turn browsing into a useful plan. Follow a focused reading path, or start with the guide closest to the problem in front of you.
Explore Security through published how-to articles.
Explore Security through published update guide articles.
Remove common EXIF, GPS, and embedded text metadata from JPG, PNG, or WebP files, then verify the cleaned copy before sharing it.
Read the guideExplore the topics connected to this topic. Each collection points to the published guides behind it.
Simple resources to make your next website decision easier. Editable files, ready to adapt to your own workflow.
Subscribe to FinderPress for practical web guides and ideas. Confirm by email, and unsubscribe whenever you like.
Make the most of the Security collection.
Our editorial approach ↗Choose a reading path that matches your next task. For a wider overview, browse the Security archive above and use its topic filters.
Use “Search in this archive” above. You can also change the filters, sort order or grid/list view without leaving this topic.
Yes. The checklists and worksheets linked below are editable files with no account required. Adapt them to your own project.
Check the article date, its scope and any linked sources. Test a change with representative content before applying it to a live project.
Yes. Use the contact page to suggest a topic, or read the contributor guidelines if you would like to pitch an original guide.