-
$data
-
-
$data_age
-
-
$data_size
-
-
$dbh
-
Holds a reference to the SQL Database
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$description
-
-
$description
-
-
$description
-
Description of this plugin (what it looks for, why it's important, how to remediate.
-
destructor
-
This function is called to de-allocate as much of the object as possible.
-
DetailedReport
-
DetailedReport Class
This class renders scan results in a very detailed, one-page-per-issue format.
-
dir_recursive
-
Recursive directory listing. at $start_dir.
-
DetailedReport.php
-
-
$event_callback_list
-
Holds the event array for callbacks
-
$executable
-
-
$executable
-
-
$executable
-
-
$executable
-
-
$executable
-
-
$ext_classes
-
-
ellipsize
-
-
endsWith
-
-
evict
-
-
execute
-
-
execute
-
Executes PHPLint on each file.
-
execute
-
Executes the PMD function. process output comes back here.
-
execute
-
Executes the Pixy function. process output comes back here.
-
execute
-
This function should not be called, since this class is abstract. should be overridden by child classes.
-
execute
-
The execute function renders the particular report. is an abstract class, this function should never actually be called, but should be overriden by a subclass.
-
execute
-
-
execute
-
-
execute
-
-
execute
-
-
execute
-
-
execute
-
Executes an XMLReport, with output going to $options['output']
-
execute
-
-
execute
-
-
execute
-
-
execute
-
-
execute
-
Executes a SQLLiteReport, to the output file $options['output'] or .
-
execute
-
-
execute
-
-
execute
-
-
execute
-
Executes the PMD function. process output comes back here.
-
execute
-
Executes a CSVReport, with output going to $options['output']
-
execute
-
Executes the plugin to scan a particular file.
-
execute
-
-
execute
-
-
execute
-
-
execute
-
-
execute
-
Executes a DetailedReport, with output going to $options['output']
-
execute
-
Executes the plugin to scan a particular file.
-
execute
-
-
execute
-
-
execute
-
Executes this plugin, scanning for files, placing them into an attachment.
-
execute
-
-
execute
-
-
execute
-
Executes an HTMLReport, with output going to $options['output']
-
execute
-
-
execute
-
Executes the scanning function. process output comes back here.
-
execute
-
-
execute
-
Executes an HTMLReport, with output going to $options['output']
-
execute_callback
-
Executes callbacks for a particular event.
-
$pattern_list
-
-
$plugin_file_list
-
-
$plugin_list
-
The list of available plugin functions.
-
$plugin_name
-
-
$preprocess
-
-
$pre_grep
-
-
$progress_callback
-
-
$proposed_fix
-
-
Plugin.php
-
-
PreProcessors.php
-
-
parse_command_line_arguments
-
Parses the command line arguments (argc, argv).
-
parse_ignore_file
-
-
Plugin
-
Plugin Class
This (abstract) class is the parent of all plugin classes.
-
Plugin
-
Creates a new generic Plugin.
-
PHPLint.php
-
-
Pixy.php
-
-
PMD.php
-
-
Plugin_AllTargetsFinder
-
This class looks for all scanned files, placing them in an attachment.
-
Plugin_Antic
-
The Antic Plugin uses Antic to discover potential vulnerabilities in Java or C/C++ files.
-
Plugin_authentication_weak
-
This class looks for weak authentication values, such as:
-
Plugin_BasicSummaryGrid
-
This plugin creates a basic summary grids and adds it as an attachment to the report.
-
Plugin_codequality_function_returns_pointer_to_stack
-
This class looks for code quality issues like:
-
Plugin_code_quality_javascript_obfuscated
-
This class looks for obfuscated JavaScript.
-
Plugin_code_quality_null_redundant
-
This class looks for cases in code like this:
-
Plugin_code_quality_resource_leak_getmain
-
This class looks for GETMAIN/FREEMAIN resource leaks in COBOL source code.
-
Plugin_CppCheck
-
The PMD Plugin uses PMD to discover potential vulnerabilities in .
-
Plugin_cwe_redirect_without_exit
-
This class looks for places where Response.
-
Plugin_error_handling_catch_empty
-
This class looks for empty catch blocks: try { .
-
Plugin_file_system_non_current_libraries
-
This class looks for library files (. version, or not known at all.
-
Plugin_file_system_temporary_files
-
This class looks for temporary files.
-
Plugin_FindBugs
-
The FindBugs Plugin uses the open source tool FindBugs to discover potential vulnerabilities in compiled Java code.
-
Plugin_Grep
-
The Grep Plugin is a special plugin that faciliates . are just files in the PLUGINS directory that contain necessary information to scan the target files.
-
Plugin_injection_xss_aspx
-
This class looks for XSS vulnerabilities of the form: foo = Request. foo = Request. foo = Request. foo = Request("bar") .
-
Plugin_injection_xss_jsp
-
This class looks for XSS vulnerabilities of the form: String foo = request. .
-
Plugin_injection_xss_println
-
This class looks for XSS vulnerabilities of the form: String foo = request. .
-
Plugin_JavaScriptLint
-
The JavaScriptLint Plugin uses JavaScript Lint to discover potential bugs or vulnerabilities JavaScript .
-
Plugin_JLint
-
The JLint Plugin uses JLint to discover potential vulnerabilities in .
-
Plugin_Lint4J
-
The Lint4J Plugin uses Lint4J to discover potential vulnerabilities in .
-
Plugin_logging_logviewer
-
This class looks for Java source code that might indicate an online log viewer.
-
Plugin_PHPLint
-
The PHPLint Plugin uses PHPLint to discover potential vulnerabilities in .
-
Plugin_Pixy
-
The Pixy Plugin uses Pixy to discover potential vulnerabilities in PHP 4 files.
-
Plugin_PMD
-
The PMD Plugin uses PMD to discover potential vulnerabilities in .
-
Plugin_replaceAsWithBs
-
This class looks for weak authentication values, where *.
-
Plugin_StringFinder
-
This class looks for all strings located in the source code.
-
Plugin_StrutsValidator
-
This class looks finds all calls to request. all of the variable names, and puts them in a spreadsheet.
-
Plugin_struts_membernotreset
-
This class looks for ActionMapping classes that do not reset all member variables.
-
Plugin_struts_noresetfunction
-
This class looks for ActionMapping classes that do not have reset() functions.
-
Plugin_URLFinder
-
This class looks for all URLs located in the source code.
-
put
-
-
put_file_contents
-