PHP static security scanner: Php-security-scanner

It is able to detect passed unsafe variables to unsafe function parameters.

Usage:

Bin/php-security-scanner Scan Path/to/files

It will search for security issues for all files.

Example

Given the following code:

Running the scanner on this file would identify like 4 as a error, with the message:

Possible SQL injection found in call to Foo () argument number 1

Supported vulnerability scanners:

Currently, Onlymysql_queryis supported, and only in limited situations.

Project home:http://www.open-open.com/lib/view/home/1438239170863

