PHP static security scanner: php-security-scanner

PHP static security scanner: php-security-scanner, which can detect unsafe variables passed to insecure function parameters.

Usage:

Bin/php-security-allow scan path/to/files

It will search for all file security issues.

Example

Given the following code:

Running the operation on this file will identify like 4 as an error, with the message:

Possible SQL Injection found in call to foo () argument number 1

Supported vulnerability scanners:

Currently, onlymysql_queryis supported, and only in limited situations.

Project homepage:Http://www.open-open.com/lib/view/home/1438239170863