PHP Curl Security Hardening

Good post — with accompanying code — on PHP.Watch on how to tighten the almighty curl:

1. Limit Curl Protocols
2. Do not enable automatic redirects unless absolutely necessary
3. If redirects are enabled enabled, limit allowed protocols (if different from #1 above)
4. If redirects are enabled, set a strict limit
5. Set a strict time-out
6. Do not disable certification validation, or enforce it
7. Disable insecure SSL and TLS versions

PHP Curl Security Hardening →