mirror of
https://github.com/Karaka-Management/Build.git
synced 2026-01-11 11:48:40 +00:00
51 lines
1.6 KiB
Bash
51 lines
1.6 KiB
Bash
#!/bin/bash
|
|
|
|
. $(dirname "$0")/../../config.sh
|
|
|
|
echo "Start php security inspection\n"
|
|
|
|
# PHP code inspection
|
|
CODE[0]="file_get_content"
|
|
CODE[1]="fopen"
|
|
CODE[2]="include"
|
|
CODE[3]="require"
|
|
CODE[4]="file_put_content"
|
|
CODE[5]="fread"
|
|
CODE[6]="fwrite"
|
|
CODE[7]="fget"
|
|
CODE[8]="fput"
|
|
CODE[9]="chmod"
|
|
CODE[10]="eval"
|
|
CODE[11]="delete"
|
|
CODE[12]="mkdir"
|
|
CODE[13]="move_uploaded_file"
|
|
CODE[14]="mkdir"
|
|
CODE[15]="copy"
|
|
CODE[16]="chown"
|
|
CODE[17]="touch"
|
|
CODE[18]="exec"
|
|
CODE[19]="_GET"
|
|
CODE[20]="_POST"
|
|
CODE[21]="_SESSION"
|
|
CODE[22]="_REQUEST"
|
|
CODE[23]="_SERVER"
|
|
CODE[24]="_COOKIE"
|
|
CODE[25]="_FILES"
|
|
CODE[26]="unlink"
|
|
CODE[27]="action=\""
|
|
CODE[28]="ReflectionClass"
|
|
CODE[29]="TestUtils"
|
|
|
|
for i in "${CODE[@]}"
|
|
do
|
|
grep -rlni "$i" --include \*.php ${ROOT_PATH}/phpOMS >> ${INSPECTION_PATH}/Framework/critical_php.log
|
|
grep -rlni "$i" --include \*.php ${ROOT_PATH}/Modules >> ${INSPECTION_PATH}/Modules/citical_php.log
|
|
grep -rlni "$i" --include \*.php ${ROOT_PATH}/Model >> ${INSPECTION_PATH}/Model/citical_php.log
|
|
grep -rlni "$i" --include \*.php ${ROOT_PATH}/Web >> ${INSPECTION_PATH}/Web/citical_php.log
|
|
done
|
|
|
|
# PHP strict type
|
|
grep -r -L "declare\(\ *strict_types\ *=\ *1\ *\);" --include=*.php ${ROOT_PATH}/phpOMS > ${INSPECTION_PATH}/Framework/strict_missing_php.log
|
|
grep -r -L "declare\(\ *strict_types\ *=\ *1\ *\);" --include=*.php ${ROOT_PATH}/Modules > ${INSPECTION_PATH}/Modules/strict_missing_php.log
|
|
grep -r -L "declare\(\ *strict_types\ *=\ *1\ *\);" --include=*.php ${ROOT_PATH}/Model > ${INSPECTION_PATH}/Model/strict_missing_php.log
|
|
grep -r -L "declare\(\ *strict_types\ *=\ *1\ *\);" --include=*.php ${ROOT_PATH}/Web > ${INSPECTION_PATH}/Web/strict_missing_php.log |