KislayPHP Core takes security seriously. As a high-performance PHP extension handling HTTP traffic, we are committed to ensuring the security of our users and their applications.
If you discover a security vulnerability in KislayPHP Core, please help us by reporting it responsibly.
Please do NOT report security vulnerabilities through public GitHub issues.
Instead, please report security vulnerabilities by emailing:
You can expect:
- A response within 48 hours acknowledging receipt of your report
- Regular updates on our progress in addressing the issue
- Credit in our security advisory (if you choose to be credited)
When reporting a security vulnerability, please include:
- A clear description of the vulnerability
- Steps to reproduce the issue
- Potential impact and severity
- Any suggested fixes or mitigations
- Your contact information for follow-up
- Keep KislayPHP Core updated to the latest version
- Use HTTPS in production environments
- Implement proper input validation in your applications
- Monitor for unusual activity in server logs
- Use firewalls and other network security measures
- Follow secure coding practices
- Validate all inputs and outputs
- Use safe memory management techniques
- Implement proper error handling
- Review code for potential security issues
KislayPHP Core includes several security features:
- HTTPS Support: Built-in SSL/TLS encryption
- Input Validation: Request sanitization and validation
- Memory Safety: Safe memory management in C++ code
- Access Controls: Configurable request filtering
- Audit Logging: Comprehensive request/response logging
We will publish security advisories for confirmed vulnerabilities on:
- Our GitHub Security Advisories page
- Our website at https://kislayphp.com/security
- Mailing list announcements
We maintain a Security Hall of Fame to recognize researchers who have helped improve our security. If you'd like to be included, please let us know when you report a vulnerability.
For security-related questions or concerns:
- Email: security@kislayphp.com
- General inquiries: hello@kislayphp.com
Thank you for helping keep KislayPHP Core secure! 🛡️