A simple, security-focused web framework for Apache servers running PHP 5
-
Simple to install
- Upload the Nephtali directory.
- Configure the directory that will be using Nephtali.
-
Simple to secure
- Integrated input validation.
- Automatic output escaping, with the ability to add whitelist items.
-
Simple to craft your markup
XHTML, RSS, & ATOM files all contain just XML.
-
Simple to program PHP
- A simple, small codebase that's easy to extend/alter.
- The framework-specific jargon is limited and the framework offers the freedom to implement the conventions/patterns you prefer.
- Easily integrates with other established PHP frameworks and component libraries that employ a PEAR-style class naming convention.
-
Simple to 2.0
- Built-in HTML fragment and XML doc generation of dynamic regions so you can progressively enhance to your applications with AJAX using RESTful URL's.
- View the HTML fragment automatically generated for the announcements region of this page:
http://nephtaliproject.com/index.php?nmode=htmlfrag&npipe=announcements - View the XML document automatically generated for the announcements region of this page:
http://nephtaliproject.com/index.php?nmode=xml&npipe=announcements
Download Nephtali version 0.3.0 from Google Code
SHA1 Checksum: SHA1 Checksum: ecc82e9d9743c04e609562d0e14520f69efeeb04
Announcements
Encryption added to security features
The most recent release of Nephtali (0.1.8) includes encryption capabilities for ports, and adds methods for setting encrypted sessions and cookies.
SANS Institute highlights PHP vulnerability
The SANS Institute 2007 update on the top 20 security risks points specifically to PHP web applications that enable the PHP setting 'allow_url_fopen.' Nephtali now turns that setting off by default (along with 'magic_quotes_gpc.')
Data regions make adding headers and footers easy
In pipe regions in your pages, you can now signal which markup is to be repeated by tagging it as a 'data' region. Any content outside of the data region is only rendered once, making it easy to render headers or footers in your markup.
Sites using Nephtali
-
nephtaliproject.com
The site for information regarding the Nephtali web framework. Yep, we eat our own dogfood and love it :)