PHP靜態安全掃描器：php-security-scanner

它能夠探測傳遞的不安全變數到不安全的函數參數。

用法:

bin/php-security-scanner scan path/to/files

它將搜尋所有檔案的安全問題。

樣本

Given the following code:

Running the scanner on this file will identify like 4 as an error, with the message:

Possible SQL Injection found in call to foo() argument number 1

Supported vulnerability scanners:

Currently, onlymysql_queryis supported, and only in limited situations.

項目首頁：http://www.open-open.com/lib/view/home/1438239170863

