After using xZeroProtect across several projects, I kept running into the same friction points — default rules that blocked legitimate API clients, a .php extension rule that silently broke non-routed apps, and an auto-ban threshold that was a little too eager. Version 1.1.1 fixes all of that, and adds something new.
What is xZeroProtect?
A lightweight, file-based PHP 8 firewall library. No database, no Redis, no external service. Drop it into any PHP project, call run(), and it handles the rest — rate limiting, IP banning, payload scanning, bot detection, and crawler verification.
composer require webrium/xzeroprotect
Enter fullscreen mode
