How to Integrate Shieldon WAF with a PHP Framework for Better App Security

·57 views

A Web Application Firewall (WAF) operates at the application layer of the OSI model, acting as a security barrier between HTTP requests and a web server to block threats like SQL injection, XSS, and cross-site forgery. WAFs function through allow-list and block-list policies that filter incoming traffic based on predefined rules. They come in three deployment types — host-based, network-based, and cloud-based — each with distinct trade-offs in cost, complexity, and customization. Shieldon is an open-source PHP-based WAF that detects and blocks suspicious activity, often using CAPTCHA challenges for verification. The integration guide walks developers through setting up Shieldon on a Slim PHP application using Composer and MySQL, and configuring it via the Shieldon control panel.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

OnePassApps' Ask Sam panel opens apps by command and works without an account

A developer working on OnePassApps examined the "Ask Sam" button found on every page of the app suite. The panel appears beside the page and offers a text composer, with chips that pre-fill a command rather than submitting it. Typing "Open" followed by an app name, such as "Open Image Studio", navigates straight to that app, and this works while signed out. Free-form requests receive a fixed guidance message explaining the command syntax instead of an AI-generated answer. Network logging during an app command showed only the app's own configuration fetch, with no chat request sent.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SoundHound to Report Q3 Results November 5, With Options Pricing About a 12.5% Move

SoundHound AI (SOUN) is scheduled to report its third-quarter results on November 5, with its investor call at 5 p.m. Eastern. Analyst consensus as of October 29 called for revenue of about $62.2 million and a per-share loss of $0.05. The company's 2026 revenue guidance of $230 million to $260 million was set in August, but its September 4 acquisition of LivePerson, which booked $52.5 million of revenue in the second quarter, is not reflected in that consensus. Options pricing implies a move of roughly 12.5% around the report, and short interest stood at 170.8 million shares as of October 15.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Fine-Grained Password Policies: How to Set Them Up in Active Directory

This guide explains how to create Fine-Grained Password Policies (FGPP) in Active Directory, which allow different password and account lockout rules for specific users or groups within one domain. FGPPs can only be applied to user objects and global security groups, and the domain functional level must be Windows Server 2012 or later. Administrators need Domain Admins membership and either the Active Directory Administrative Center or the Active Directory PowerShell module. The article walks through creating a policy in the Password Settings Container, noting that lower precedence values take higher priority. Finally, it shows how to verify which policy applies to a user using the Get-ADUserResultantPasswordPolicy PowerShell command.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Hyperliquid Python bot's $25 order cap blocked every $25 test order

A developer tested an AI-generated Python starter for the Hyperliquid trading API, which was meant to place small testnet orders capped at $25. The live run on October 25 showed that reads, price rounding and the testnet-only guard worked as intended. However, the cap blocked all 892 test orders of $25 across testnet and mainnet. The cause was that size rounding pushed each order's notional value slightly above $25, and the check compared that figure directly to the cap. The rebuilt version separates the requested amount from the order's own notional value, allowing for one size step of rounding. The article notes this was one of four problems found, and the author says the prompt has been revised accordingly.

0 comments Read more at DEV Community