Michal Špaček

hashes. Magic hashes – PHP hash "collisions"

phpstan-disallowed-calls. PHPStan rules to detect disallowed method & function calls, constant, namespace, attribute, keyword & superglobal usages, with powerful rules to re-allow a call or a usage in places where it should be allowed.

oprah-proxy. Generate credentials for Opera's "browser VPN"

domains. Unofficial and incomplete lists of various domain names

vat-calculator. EOL, do not use this, use driesvints/vat-calculator or Stripe Checkout instead

jakobejitblokaci.cz. www.jakobejitblokaci.cz

letsgetacert. Let's get cert – a Certbot wrapper

encrypt-hash-password-php. Example of an encrypted password hash storage in PHP

upc_keys-lambda. Peter "blasty" Geissler's upc_keys.c with custom prefix support and Lambda sauce

csp-config. Build Content Security Policy from a config file

webtop100. Dokumenty k hodnocení soutěže WebTop100

phpinfo. Extract phpinfo() into a variable and move CSS to external file, sanitize sensitive info

michalspacek.cz. michalspacek.cz + michalspacek.com + subdomains source code because why not

security-txt. security.txt (RFC 9116) generator, parser, validator

exploited.cz. https://exploited.cz

nonce-generator. Content Security Policy Nonce Generator

ebabis.cz. A v březnu někdo přišel s tím matematickým modelem A v srpnu někdo, sice byl to ten stejný člověk, ale už přišel v nějakém čase A ty, který měli přijít, nepřišli

canhas.report. Reporting API demos, learn all about CSP & other reports (Network Error Logging/NEL, Crash, Deprecation, Intervention, Mixed Content & more) in this interactive app.

phpstan-stripe. Stripe SDK extension for PHPStan

cotel. Company Intel, data and proof-of-concept quick-and-dirty code for an bookmarking app. Abandoned.

hash_extender-openssl3.0. This is a fork of iagox86/hash_extender by Ron Bowes with a simple patch to compile with OpenSSL 3.0

fa-extract. A tool to extract only used icons from Font Awesome JS/SVG icons sets (PRE-ALPHA, I use it but YMMV)

emulated-prepared-statements. SQL Injection using Emulated Prepared Statements (the default) in PHP PDO_MYSQL in GBK

sri-macros. Subresource Integrity macros for Latte template engine

mysql-session-handler. Custom PHP session handler for Nette Framework that uses MySQL database for (possibly encrypted) storage

feed-exports. Atom feed Response and related objects for Nette framework

svg-icons-latte. SVG Icons Custom Tag for Latte Templating System

bez-komentare. Filtry odstraňující komentáře, jejich počet, notifikace z českých stránek

stupid-git-deploy. Shell

libini-djgpp. LibINI is a C library for DJGPP and Linux for reading, updating and writing Windows-like INI files. I wrote this back in 1999.

nepovolenainternetovahazardnihra.cz. nepovolenainternetovahazardnihra.cz + jakobejitblokaci.cz = BFF ❤

coding-standard. PHP Code Sniffer rules

reveal-input-details. Chrome JS snippet to reveal hidden inputs and input details

common-config. Configuration wants to be shared

phpcs-phar. PHP_CodeSniffer phar releases, automated and always up-to-date

phpstan-disallowed-calls-nette.

webleed. We Bleed scanner tools

encryption. Encryption helpers

svnwcdump. Dumps Subversion working copy located at a website and accessible using HTTP