Plans for PHPSecInfo mk2

PHP5-only

• PHP4 is inherently insecure. Do a simple detect on bootstrap for 4 and throw an error
• Base version should be PHP5.2. Anything lower lacks stuff like built-in filter extension. I wouldn’t trust it.
• Needs to pass E_STRICT

Extensibility

• It should be easy to add new user-defined tests to PHPSecInfo.

Localization

• We should support easy localization.

Themeability

• Overriding look and feel of output should be simple
  • Templating
• Overriding output FORMAT should be simple
  • data formats like JSON and XML

Function as a component

• It should be possible to use PHPSecInfo as a library for a larger application, where the app calls a PHPSecInfo method and retrieves the test results as a data structure

Still a single file

• This is important for accessibility/ease of installation
• probably built with some kind of packaging script, and/or a Phar file

PEAR repo

• Make it easy to update
• Pearfarm.org or Pearhub

New location for support materials and forums

• phpsec.org is kind of in limbo
  • move explanatory articles to some sort of KB system (tenderapp.com? locally hosted?)
  • Needs to be easier to update support info
  • Needs a better support system (tenderapp.com would be good interactive support too)