vishalxtyagi/php-ghost-wall

A package for monitoring code integrity, alerting on tampering, and sending server information on boot.

Maintainers

Package info

github.com/vishalxtyagi/php-ghost-wall

pkg:composer/vishalxtyagi/php-ghost-wall

Transparency log

Statistics

Installs: 8

Dependents: 0

Suggesters: 0

Stars: 0

Open Issues: 0

Security

Advisories: 0

Aikido package health analysis

v1.0.0 2024-08-26 03:23 UTC

MIT a03d97f9edf09c61a37b9306ee862b8a1e3a786a

  • Vishal Tyagi <vishaltyagi.sde.woop@gmail.com>

Published on Packagist.org on 2024-08-26 03:27 UTC

This package is auto-updated.

Last update: 2026-07-30 02:52:30 UTC

README

PHP Ghost Wall

Stars License Last Commit Status: Working Laravel PHP

Laravel package that monitors your application's file integrity, alerts when code is tampered with, and sends server diagnostic information on boot. Drop it in and get tamper detection without building it from scratch.

Showcase: vt-php-ghost-wall.pages.dev

What it does

App boots → GhostWall checksums all source files
                │
                ├─ If files unchanged → silent pass
                │
                └─ If file modified/added/deleted → alert (log / email / webhook)

GhostWall computes a hash tree of your application source on first run and stores it. On every subsequent boot it re-hashes and compares. Any deviation triggers a configurable alert — useful for detecting unauthorized changes in production.

Install

composer require vishalxtyagi/php-ghost-wall
// config/app.php — providers array
Vishalxtyagi\PhpGhostWall\GhostWallServiceProvider::class,
php artisan vendor:publish --provider="Vishalxtyagi\PhpGhostWall\GhostWallServiceProvider"
php artisan ghostwall:init   # compute initial hash tree

Configuration (config/ghostwall.php)

return [
    'enabled'    => env('GHOSTWALL_ENABLED', true),
    'alert_via'  => ['log', 'email'],        // 'log' | 'email' | 'webhook'
    'ignore'     => ['storage/', '.env'],    // paths excluded from monitoring
    'webhook'    => env('GHOSTWALL_WEBHOOK_URL', ''),
];

Artisan commands

php artisan ghostwall:init      # build initial hash tree
php artisan ghostwall:check     # manual integrity check
php artisan ghostwall:reset     # accept current state as new baseline

What's next

  • CI verification integration — fail the pipeline if production hash tree doesn't match
  • GPG-signing option for the hash tree file itself
  • Admin dashboard panel for visual integrity status

Built by Vishal Tyagi · Showcase · Tech debt tracker