Building a Security-First PHP Baseline for Web Applications

When starting a PHP project, developers often rebuild the same security foundations again and again.

Things like:

CSRF protection

secure sessions

security headers

authentication structure

I created a small open-source project called Secure Web Baseline that provides a clean starting point for building secure PHP applications.

The project includes:

• CSRF protection
• Content Security Policy headers
• Secure session management
• Authentication system
• MVC project structure
• Security-focused architecture

The idea is simple: start secure by default.

Instead of rebuilding these pieces every time, developers can start from a ready and secure baseline.

GitHub repository:
https://github.com/salah23222/secure-web-baseline

I would really appreciate feedback from the community.