I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to an extremely huge financial loss.
I guess the best way would be to lock the access SFTP to a specific IP/IP range using firewall rules. But since my IP changes every few days this option isn't viable. Which method would you recommend?
Is SFTP open to any IP better than let's say cPanel using 2FA?
strict_types
is an incomplete patch - but also both the standard library (full of functions that will do anything - including returning any one of many different values - rather than throw an exception) and the developer ecosystem show a concerning lack of concern for security. Like I said, you CAN write secure code in PHP, just like you can in C or Perl, but I recommend against all of those for a highly secure system.