RE: [PHP] Sanity checker?
| From: | Ezra Nugroho | Date: | Fri, 07 Jul 2006 21:55:00 +0000 |
| Subject: | RE: [PHP] Sanity checker? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-239211@lists.php.net to get a copy of this message | ||
Php experts everywhere,
This is a response to an old thread about a php audit tool.
I just want to announce a simple tool for that. It is not super smart
yet, but it is easily extensible.
Please check it out, and provide me with suggestions.
http://developer.spikesource.com/projects/phpsecaudit
I need a lot of help identifying function calls that need to be handled
with cautions.
Thank you
--
Ezra Nugroho
http://ez.spikesource.com
On Thu, 2006-05-04 at 14:44 -0500, Jay Blanchard wrote:
> [snip]
> Have you ever seen things like
>
> for ($i = 0; $i < count($some_array); $i++) {
> //do stuff
> }
>
> Do you know how slow it is if $some_array gets big compared to
>
> $array_count = count($some_array);
> for ($i = 0; $i < $array_count; $i++) {
> //do stuff
> }
> [/snip]
>
> The thing is this; there are lots of cases such as the one above that
> someone would have to code in order to make the tool worthwhile. It
> sounds like a good project for a large group of folks. We have headed
> down the road a couple of times on things like this and the problem
> always comes down to manpower. Start a project at SF or FM that maybe
> does a couple of basic things and hope that it grows from there.