Security

Featured

Sylvain Julé
Bouncer

Restrict access of a user role to a specific page (and its children) in the Panel.

Staff picks

Johann Schopplich
Headless

Kirby, but headless only – KQL with bearer token, Express-esque middlewares & more
Markus Denhoff
OAuth 2.0

Interface to use OAuth 2.0 providers for user authentication

Kirby 4 plugins

Password Guard Password Guard is a simple password protection for your Kirby website. It allows you to set a password that needs to be entered in order to … K4
Patrol An easy and customizable way to manage access to website pages according to the roles assigned to users within the Kirby panel interface. K4
Impersonate Impersonate Panel users using a button on the profile page. K4

Env Store project credentials and variables in a .env file and access them in Kirby K4 K3


return [
    'bnomei.securityheaders.headers' => [
        'X-Frame-Options'        => 'SAMEORIGIN',
        'X-XSS-Protection'       => '1; mode=block',
        'X-Content-Type-Options' => 'nosniff',
        ...
    ]
];

Content Security Policy Simplify the content security policy headers setup for your website K4 K3

<form action="<?= $page->url() ?>" method="post">
    <!-- ... -->

    <?= csrf_field() ?>
    <?= turnstileField() ?>
    <input type="submit" value="Submit">
</form>
<?= turnstileScript() ?>

Turnstile for Uniform A plugin for the Uniform plugin implementing the Cloudflare Turnstile protection (sort of a captcha-successor). K4 K3

Featured

Bouncer

Staff picks

Headless

OAuth 2.0

Kirby 4 plugins

Kirby 3 plugins

Related topics