This class implements a generic code scanner.
Located in /lib/Yasca.php (line 22)
Adjusted information for various plugins. Used so we don't have to modify the original plugins.
This list contains all attachment references to the general cache
Holds the event array for callbacks
The general_cache array contains arrays of data to be cached. Read-Write by anyone.
Options parsed from the command line.
The list of available plugin functions.
The results of the scan.
The target list of files to scan.
Gets the singleton instance of the Yasca object
This is the main error log and event log for the application. Depending on
whether the application is running in GUI or console mode, the output is directed appropriately. The severity value is one of the following: E_USER_ERROR, E_USER_WARNING, and E_USER_NOTICE. The function works as following: If --verbose is set, then everything is shown. Otherwise only E_USER_ERROR and E_USER_WARNING. If the silent flag is set, then nothing is shown at all. If the Yasca object is not defined, then this will do a simple print().
Compares results to sort them by severity.
Creates a new Yasca scanner object using the options passed in.
Adds an attachment to the attachment list. Only allows attachment that are represented in the general cache.
Signs a piece of data using a hash. Uses SHA-1 to hash the data.
Recursive directory listing. Returns all files starting at $start_dir.
Executes callbacks for a particular event.
Attempts to find a target that matches the relative name supplied.
Gets the adjusted alternate name for a specific plugin.
Gets the adjusted description of the finding.
Gets the adjusted severity for a specific plugin.
Retrieves a specific adjustment.
Finds the actual extension to be used for the report chosen. Includes the period (.).
Returns the help message (used in console mode.
Finds and includes all plugins.
Instantiates a new Report object based on the data passed in.
Loads all of the adjustments from resources/adjustments.xml.
Parses the command line arguments (argc, argv).
Registers a callback function to be executed at some time. Valid events are:
pre-scan - executes before the scan takes place post-scan - executes after scan() completes pre-report - executes before the reporting occurs post-report - executes after the reporting occurs
This function initiaates the scan. After checking various things, it passes execution along to each of the plugins available, on each of the target files available.
Validates whether a report content has a valid hash.
Validates if a signature has been tampered with. Uses calculate_signature() to re-calculate the signature.
Documentation generated on Mon, 28 Apr 2008 12:52:08 -0400 by phpDocumentor 1.4.0a2