├── .devcontainer
    ├── Dockerfile
    └── devcontainer.json
├── .gitattributes
├── .github
    └── workflows
    │   └── main.yml
├── .gitignore
├── LICENSE
├── README.md
├── build.sh
├── composer.json
├── docs
    ├── API.md
    ├── CONTRIBUTING.md
    ├── CUSTOM_ANALYSIS.md
    ├── DEV.md
    ├── EXAMPLES.md
    ├── FALSE_POSITIVES.md
    ├── FAQ.md
    ├── INCLUDES.md
    ├── OUTPUT.md
    ├── SPECIFY_ANALYSIS.md
    ├── customcallgraph1.png
    └── dev
    │   └── STATES.md
├── grumphp.yml
├── package
    ├── composer.json
    └── src
    │   ├── progpilot
    │       ├── Analysis
    │       │   ├── AssertionAnalysis.php
    │       │   ├── CustomAnalysis.php
    │       │   ├── FuncAnalysis.php
    │       │   ├── IncludeAnalysis.php
    │       │   ├── ResolveDefs.php
    │       │   ├── SecurityAnalysis.php
    │       │   ├── TaintAnalysis.php
    │       │   └── VisitorAnalysis.php
    │       ├── Analyzer.php
    │       ├── CallVisitor.php
    │       ├── Code
    │       │   ├── MyCode.php
    │       │   ├── MyInstruction.php
    │       │   └── Opcodes.php
    │       ├── Command
    │       │   └── ProgpilotCommand.php
    │       ├── Console
    │       │   └── Application.php
    │       ├── Context.php
    │       ├── ContextInternalApi.php
    │       ├── Dataflow
    │       │   ├── ArrayMulti.php
    │       │   ├── Classes.php
    │       │   ├── Definitions.php
    │       │   ├── Functions.php
    │       │   ├── Objects.php
    │       │   └── VisitorDataflow.php
    │       ├── Helpers
    │       │   ├── Analysis.php
    │       │   ├── Callbacks.php
    │       │   └── State.php
    │       ├── Inputs
    │       │   ├── MyCustomFunction.php
    │       │   ├── MyCustomRule.php
    │       │   ├── MyCustomVariable.php
    │       │   ├── MyInclude.php
    │       │   ├── MyInputs.php
    │       │   ├── MyInputsInternalApi.php
    │       │   ├── MySanitizer.php
    │       │   ├── MySink.php
    │       │   ├── MySource.php
    │       │   ├── MySpecify.php
    │       │   ├── MyValidator.php
    │       │   └── MyVuln.php
    │       ├── Lang.php
    │       ├── Objects
    │       │   ├── MyAssertion.php
    │       │   ├── MyBlock.php
    │       │   ├── MyClass.php
    │       │   ├── MyDefOriginal.php
    │       │   ├── MyDefState.php
    │       │   ├── MyDefinition.php
    │       │   ├── MyFile.php
    │       │   ├── MyFunction.php
    │       │   ├── MyOp.php
    │       │   └── MyProperty.php
    │       ├── Outputs
    │       │   ├── MyOutputs.php
    │       │   ├── MyOutputsInternalApi.php
    │       │   ├── MyResult.php
    │       │   └── SarifOutput.php
    │       ├── Representations
    │       │   ├── AbstractSyntaxTree.php
    │       │   ├── Callgraph.php
    │       │   ├── ControlFlowGraph.php
    │       │   ├── DFSVisitor.php
    │       │   ├── DepthFirstSearch.php
    │       │   └── NodeCG.php
    │       ├── Transformations
    │       │   └── Php
    │       │   │   ├── Assign.php
    │       │   │   ├── Common.php
    │       │   │   ├── Expr.php
    │       │   │   ├── Exprs
    │       │   │       ├── ArrayFetch.php
    │       │   │       ├── CastFetch.php
    │       │   │       ├── ConcatFetch.php
    │       │   │       ├── ConstFetch.php
    │       │   │       ├── DimFetch.php
    │       │   │       ├── FunccallFetch.php
    │       │   │       ├── LiteralFetch.php
    │       │   │       ├── PropertyFetch.php
    │       │   │       ├── StaticPropertyFetch.php
    │       │   │       └── VariableFetch.php
    │       │   │   ├── FuncCall.php
    │       │   │   └── Transform.php
    │       └── Utils.php
    │   └── uptodate_data
    │       └── php
    │           ├── dev
    │               ├── rules.json
    │               ├── sanitizers.json
    │               ├── sinks.json
    │               ├── sources.json
    │               └── validators.json
    │           ├── frameworks
    │               ├── codeigniter
    │               │   ├── rules.json
    │               │   ├── sanitizers.json
    │               │   ├── sinks.json
    │               │   ├── sources.json
    │               │   └── validators.json
    │               ├── laravel
    │               │   ├── rules.json
    │               │   ├── sanitizers.json
    │               │   ├── sinks.json
    │               │   ├── sources.json
    │               │   └── validators.json
    │               ├── symfony
    │               │   ├── rules.json
    │               │   ├── sanitizers.json
    │               │   ├── sinks.json
    │               │   ├── sources.json
    │               │   └── validators.json
    │               └── wordpress
    │               │   ├── rules.json
    │               │   ├── sanitizers.json
    │               │   ├── sinks.json
    │               │   ├── sources.json
    │               │   └── validators.json
    │           ├── rules.json
    │           ├── sanitizers.json
    │           ├── sinks.json
    │           ├── sources.json
    │           └── validators.json
├── progpilot.yml
└── projects
    ├── example
        ├── composer.json
        ├── example1.php
        ├── example2.php
        └── source_code1.php
    ├── example_config
        ├── composer.json
        ├── configuration.yml
        ├── example.php
        └── example1.php
    ├── phar
        ├── composer.json
        └── progpilot
    └── tests
        ├── composer.json
        ├── conditionstest.php
        ├── config1.yml
        ├── config2.yml
        ├── config3.yml
        ├── config4.yml
        ├── config5.yml
        ├── config6.yml
        ├── config7.yml
        ├── configtest.php
        ├── customtest.php
        ├── datatest.php
        ├── false_positives.json
        ├── flowstest.php
        ├── folderexcludedtest.php
        ├── folderincludedtest.php
        ├── foldertest.php
        ├── frameworkstest.php
        ├── generictest.php
        ├── graphtest.php
        ├── include_files.json
        ├── includetest.php
        ├── negativetest.php
        ├── ooptest.php
        ├── optimizationstest.php
        ├── phpunit.xml.dist
        ├── phpwandertest.php
        ├── realtest.php
        ├── resolve_includes.json
        ├── resolved_includes.json
        ├── run_all.php
        ├── run_all_configurations.php
        ├── run_all_folders.php
        ├── run_config.php
        ├── run_exclude_files.php
        ├── run_file.php
        ├── run_flows.php
        ├── run_folder.php
        ├── run_include_files.php
        ├── storedtest.php
        ├── testarray.php
        ├── testcfg.php
        ├── testcode.php
        ├── testfalsepositives.php
        ├── testfile.php
        ├── testincludes.php
        ├── testonadd.php
        ├── testphpcfg.php
        ├── testphpparser.php
        ├── tests
            ├── conditions
            │   ├── condition1.php
            │   ├── condition2.php
            │   ├── condition3.php
            │   ├── condition4.php
            │   ├── condition5.php
            │   ├── condition6.php
            │   ├── condition7.php
            │   └── condition8.php
            ├── custom
            │   ├── cert1.php
            │   ├── cert2.php
            │   ├── cert3.php
            │   ├── cert4.php
            │   ├── cert5.php
            │   ├── conditionalvalues.php
            │   ├── cookies1.php
            │   ├── custom1.php
            │   ├── custom2.php
            │   ├── custom3.php
            │   ├── custom4.php
            │   ├── custom5.php
            │   ├── customcookieoptions.php
            │   └── unsetcookies.php
            ├── data
            │   ├── customvalidator1.php
            │   ├── customvalidator2.php
            │   ├── customvalidator3.php
            │   ├── customvalidator4.php
            │   ├── customvalidator5.php
            │   ├── sanitizer1.php
            │   ├── sanitizer10.php
            │   ├── sanitizer11.php
            │   ├── sanitizer2.php
            │   ├── sanitizer3.php
            │   ├── sanitizer4.php
            │   ├── sanitizer5.php
            │   ├── sanitizer6.php
            │   ├── sanitizer7.php
            │   ├── sanitizer8.php
            │   ├── sanitizer9.php
            │   ├── sink1.php
            │   ├── sink2.php
            │   ├── sink3.php
            │   ├── sink4.php
            │   ├── sink5.php
            │   ├── sink6.php
            │   ├── sink7.php
            │   ├── sink8.php
            │   ├── sink9.php
            │   ├── source1.php
            │   ├── source10.php
            │   ├── source11.php
            │   ├── source12.php
            │   ├── source13.php
            │   ├── source14.php
            │   ├── source15.php
            │   ├── source16.php
            │   ├── source17.php
            │   ├── source18.php
            │   ├── source19.php
            │   ├── source2.php
            │   ├── source20.php
            │   ├── source21.php
            │   ├── source22.php
            │   ├── source3.php
            │   ├── source4.php
            │   ├── source5.php
            │   ├── source6.php
            │   ├── source7.php
            │   ├── source8.php
            │   ├── source9.php
            │   ├── validator1.php
            │   ├── validator2.php
            │   ├── validator3.php
            │   ├── validator4.php
            │   ├── validator5.php
            │   └── validator6.php
            ├── flows
            │   ├── flow1.php
            │   ├── flow2.php
            │   ├── flow3.php
            │   ├── flow4.php
            │   └── incorrectflow.txt
            ├── folders
            │   ├── excludedbydefault1
            │   │   └── test1.php
            │   ├── excludedbydefault2
            │   │   ├── foo
            │   │   │   ├── node_modules
            │   │   │   │   └── test3.php
            │   │   │   └── test2.php
            │   │   └── test1.php
            │   ├── folder1
            │   │   ├── mix1.php
            │   │   ├── mix2.php
            │   │   └── mix3.php
            │   ├── folder2
            │   │   ├── mix3.php
            │   │   └── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   └── sub_folder2
            │   │   │       └── mix2.php
            │   ├── folder3
            │   │   ├── mix3.php
            │   │   └── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   └── sub_folder2
            │   │   │       └── mix2.php
            │   ├── folder4
            │   │   ├── mix3.php
            │   │   ├── onefileexcludedtest.php
            │   │   └── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtest.php
            │   │   │   └── onefolderexcludedtest
            │   │   │       ├── mix2.php
            │   │   │       └── onefileexcludedtest.php
            │   ├── folderconfig1
            │   │   ├── mix3.php
            │   │   ├── onefileexcludedtestconfig.php
            │   │   ├── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │   │   ├── mix2.php
            │   │   │   │   └── onefileexcludedtestconfig.php
            │   │   └── sub_folder2
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │       ├── mix2.php
            │   │   │       └── onefileexcludedtestconfig.php
            │   ├── folderconfig2
            │   │   ├── fileonly.php
            │   │   ├── node_modules
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │   │   ├── mix2.php
            │   │   │   │   └── onefileexcludedtestconfig.php
            │   │   ├── onefileexcludedtestconfig.php
            │   │   └── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │       ├── mix2.php
            │   │   │       └── onefileexcludedtestconfig.php
            │   ├── folderconfig3
            │   │   ├── mix3.php
            │   │   ├── onefileexcludedtestconfig.php
            │   │   ├── sources.json
            │   │   ├── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │   │   ├── mix2.php
            │   │   │   │   └── onefileexcludedtestconfig.php
            │   │   └── sub_folder2
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │       ├── mix2.php
            │   │   │       └── onefileexcludedtestconfig.php
            │   ├── folderconfig4
            │   │   ├── mix3.php
            │   │   ├── onefileexcludedtestconfig.php
            │   │   ├── sources.json
            │   │   ├── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │   │   ├── mix2.php
            │   │   │   │   └── onefileexcludedtestconfig.php
            │   │   └── sub_folder2
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │       ├── mix2.php
            │   │   │       └── onefileexcludedtestconfig.php
            │   ├── folderconfig5
            │   │   ├── false_positives.json
            │   │   ├── mix3.php
            │   │   ├── onefileexcludedtestconfig.php
            │   │   ├── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │   │   ├── mix2.php
            │   │   │   │   └── onefileexcludedtestconfig.php
            │   │   └── sub_folder2
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │       ├── mix2.php
            │   │   │       └── onefileexcludedtestconfig.php
            │   ├── folderconfig6
            │   │   ├── false_positives.json
            │   │   ├── mix3.php
            │   │   ├── onefileexcludedtestconfig.php
            │   │   ├── sub_folder1
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │   │   ├── mix2.php
            │   │   │   │   └── onefileexcludedtestconfig.php
            │   │   └── sub_folder2
            │   │   │   ├── mix1.php
            │   │   │   ├── onefileexcludedtestconfig.php
            │   │   │   └── onefolderexcludedtestconfig
            │   │   │       ├── mix2.php
            │   │   │       └── onefileexcludedtestconfig.php
            │   └── folderconfig7
            │   │   ├── include_failures.json
            │   │   ├── mix3.php
            │   │   ├── resolved_includes.json
            │   │   └── sub_folder1
            │   │       └── mix1.php
            ├── frameworks
            │   ├── codeigniter1.php
            │   ├── codeigniter2.php
            │   ├── codeigniter3.php
            │   └── symfony1.php
            ├── generic
            │   ├── alias1.php
            │   ├── alias2.php
            │   ├── alias3.php
            │   ├── alias4.php
            │   ├── alias5.php
            │   ├── arrays1.php
            │   ├── arrays10.php
            │   ├── arrays11.php
            │   ├── arrays12.php
            │   ├── arrays13.php
            │   ├── arrays14.php
            │   ├── arrays15.php
            │   ├── arrays16.php
            │   ├── arrays17.php
            │   ├── arrays18.php
            │   ├── arrays19.php
            │   ├── arrays2.php
            │   ├── arrays20.php
            │   ├── arrays3.php
            │   ├── arrays4.php
            │   ├── arrays5.php
            │   ├── arrays6.php
            │   ├── arrays7.php
            │   ├── arrays8.php
            │   ├── arrays9.php
            │   ├── arraysexpr1.php
            │   ├── arraysexpr2.php
            │   ├── arraysexpr3.php
            │   ├── arraysexpr4.php
            │   ├── arraysrec1.php
            │   ├── calluserfunc1.php
            │   ├── calluserfunc2.php
            │   ├── calluserfunc3.php
            │   ├── calluserfunc4.php
            │   ├── concat1.php
            │   ├── concat2.php
            │   ├── concat3.php
            │   ├── foreach1.php
            │   ├── functions1.php
            │   ├── functions10.php
            │   ├── functions11.php
            │   ├── functions12.php
            │   ├── functions13.php
            │   ├── functions14.php
            │   ├── functions15.php
            │   ├── functions16.php
            │   ├── functions17.php
            │   ├── functions18.php
            │   ├── functions19.php
            │   ├── functions2.php
            │   ├── functions20.php
            │   ├── functions21.php
            │   ├── functions22.php
            │   ├── functions23.php
            │   ├── functions3.php
            │   ├── functions4.php
            │   ├── functions5.php
            │   ├── functions6.php
            │   ├── functions7.php
            │   ├── functions8.php
            │   ├── functions9.php
            │   ├── functionsrec1.php
            │   ├── global1.php
            │   ├── global2.php
            │   ├── global3.php
            │   ├── global4.php
            │   ├── global5.php
            │   ├── loop1.php
            │   ├── loop2.php
            │   ├── loop3.php
            │   ├── loop4.php
            │   ├── mix1.php
            │   ├── mix2.php
            │   ├── mix3.php
            │   ├── namespace1.php
            │   ├── namespace2.php
            │   ├── simple1.php
            │   ├── simple10.php
            │   ├── simple2.php
            │   ├── simple3.php
            │   ├── simple4.php
            │   ├── simple5.php
            │   ├── simple6.php
            │   ├── simple7.php
            │   ├── simple8.php
            │   ├── simple9.php
            │   └── strings1.php
            ├── graphs
            │   └── functionsgraph1.php
            ├── includes
            │   ├── dvwa
            │   │   ├── dvwaPage.inc.php
            │   │   ├── high.php
            │   │   ├── impossible.php
            │   │   ├── low.php
            │   │   └── medium.php
            │   ├── resolved_includes_simple5.txt
            │   ├── simple1.php
            │   ├── simple10.php
            │   ├── simple10_include.php
            │   ├── simple11.php
            │   ├── simple11_include.php
            │   ├── simple12.php
            │   ├── simple12_include.php
            │   ├── simple13.php
            │   ├── simple13_include.php
            │   ├── simple14.php
            │   ├── simple14_include.php
            │   ├── simple14_include_ret.php
            │   ├── simple15_circular.php
            │   ├── simple15_include1.php
            │   ├── simple15_include2.php
            │   ├── simple16.php
            │   ├── simple16_include.php
            │   ├── simple17.php
            │   ├── simple17_include.php
            │   ├── simple18.php
            │   ├── simple18_include.php
            │   ├── simple19.php
            │   ├── simple1_include.php
            │   ├── simple2.php
            │   ├── simple20.php
            │   ├── simple20_include.php
            │   ├── simple20_subinclude.php
            │   ├── simple2_require.php
            │   ├── simple3.php
            │   ├── simple3_includeonce.php
            │   ├── simple4.php
            │   ├── simple4_requireonce.php
            │   ├── simple5.php
            │   ├── simple5_include.php
            │   ├── simple6.php
            │   ├── simple6_include.php
            │   ├── simple7.php
            │   ├── simple7_include1.php
            │   ├── simple7_include2.php
            │   ├── simple8.php
            │   ├── simple8_include.php
            │   └── simple9.php
            ├── negative
            │   ├── issue_13.php
            │   ├── missing_argument_func.php
            │   ├── parser_error1.php
            │   ├── parser_error2.php
            │   ├── parser_error3.php
            │   ├── undefined_class.php
            │   ├── undefined_func.php
            │   └── undefined_method.php
            ├── oop
            │   ├── chained1.php
            │   ├── chained2.php
            │   ├── simple1.php
            │   ├── simple10.php
            │   ├── simple11.php
            │   ├── simple12.php
            │   ├── simple13.php
            │   ├── simple14.php
            │   ├── simple15.php
            │   ├── simple16.php
            │   ├── simple17.php
            │   ├── simple18.php
            │   ├── simple19.php
            │   ├── simple2.php
            │   ├── simple20.php
            │   ├── simple21.php
            │   ├── simple22.php
            │   ├── simple23
            │   │   ├── a.php
            │   │   ├── b.php
            │   │   └── c.php
            │   ├── simple24.php
            │   ├── simple25.php
            │   ├── simple26.php
            │   ├── simple27.php
            │   ├── simple28.php
            │   ├── simple29.php
            │   ├── simple3.php
            │   ├── simple30.php
            │   ├── simple31.php
            │   ├── simple32.php
            │   ├── simple33.php
            │   ├── simple34.php
            │   ├── simple35.php
            │   ├── simple36.php
            │   ├── simple4.php
            │   ├── simple5.php
            │   ├── simple6.php
            │   ├── simple7.php
            │   ├── simple8.php
            │   └── simple9.php
            ├── optimizations
            │   └── cleanopinfoconcatleft.php
            ├── performance
            │   ├── ID3
            │   │   ├── getid3.lib.php
            │   │   ├── getid3.php
            │   │   ├── license.commercial.txt
            │   │   ├── license.txt
            │   │   ├── module.audio-video.asf.php
            │   │   ├── module.audio-video.flv.php
            │   │   ├── module.audio-video.matroska.php
            │   │   ├── module.audio-video.quicktime.php
            │   │   ├── module.audio-video.riff.php
            │   │   ├── module.audio.ac3.php
            │   │   ├── module.audio.dts.php
            │   │   ├── module.audio.flac.php
            │   │   ├── module.audio.mp3.php
            │   │   ├── module.audio.ogg.php
            │   │   ├── module.tag.apetag.php
            │   │   ├── module.tag.id3v1.php
            │   │   ├── module.tag.id3v2.php
            │   │   ├── module.tag.lyrics3.php
            │   │   └── readme.txt
            │   ├── benchmarks.txt
            │   ├── class-wp-query.php
            │   ├── defs.php
            │   ├── gen_files.php
            │   └── memory.txt
            ├── phpwander
            │   ├── test0.php
            │   ├── test1.php
            │   ├── test10.php
            │   ├── test10B.php
            │   ├── test10C.php
            │   ├── test11.php
            │   ├── test12.php
            │   ├── test12D.php
            │   ├── test13.php
            │   ├── test13E.php
            │   ├── test14.php
            │   ├── test14F.php
            │   ├── test15.php
            │   ├── test2.php
            │   ├── test3.php
            │   ├── test3A.php
            │   ├── test4.php
            │   ├── test4F.php
            │   ├── test5.php
            │   ├── test6.php
            │   ├── test7.php
            │   ├── test8.php
            │   └── test9.php
            ├── real
            │   ├── ClassLoader.php
            │   ├── array1.php
            │   ├── class-wp-filesystem-direct.php
            │   ├── composer
            │   │   ├── composer.json
            │   │   ├── composer.lock
            │   │   ├── index.php
            │   │   ├── notexcluded_vendor
            │   │   │   ├── autoload.php
            │   │   │   ├── composer
            │   │   │   │   ├── ClassLoader.php
            │   │   │   │   ├── LICENSE
            │   │   │   │   ├── autoload_classmap.php
            │   │   │   │   ├── autoload_files.php
            │   │   │   │   ├── autoload_namespaces.php
            │   │   │   │   ├── autoload_psr4.php
            │   │   │   │   ├── autoload_real.php
            │   │   │   │   ├── autoload_static.php
            │   │   │   │   └── installed.json
            │   │   │   └── progpilot
            │   │   │   │   └── tests
            │   │   │   │       └── test_package
            │   │   └── test_package
            │   │   │   ├── composer.json
            │   │   │   └── init.php
            │   ├── executiontime
            │   │   ├── Item.php
            │   │   ├── class-wp-query.php
            │   │   └── class-wp-query3.php
            │   ├── feedbackgithub
            │   │   └── test.php
            │   ├── incallstack
            │   │   ├── class-ftp-pure.php
            │   │   ├── class-ftp-sockets.php
            │   │   └── class-ftp.php
            │   ├── multiplecalls
            │   │   └── test.php
            │   ├── mutliplecall_memory.php
            │   ├── mutliplecall_memory_include.php
            │   ├── namespaces1
            │   │   ├── composer.json
            │   │   ├── src
            │   │   │   ├── nssecondlevel1
            │   │   │   │   └── Foo1.php
            │   │   │   └── nssecondlevel2
            │   │   │   │   └── Foo2.php
            │   │   └── test.php
            │   ├── object1.php
            │   ├── sqli.php
            │   ├── wordpress
            │   │   ├── index.php
            │   │   ├── license.txt
            │   │   ├── readme.html
            │   │   ├── wp-admin
            │   │   │   ├── admin-db.php
            │   │   │   ├── admin-footer.php
            │   │   │   ├── admin-functions.php
            │   │   │   ├── admin-header.php
            │   │   │   ├── admin.php
            │   │   │   ├── bookmarklet.php
            │   │   │   ├── categories.php
            │   │   │   ├── edit-comments.php
            │   │   │   ├── edit-form-advanced.php
            │   │   │   ├── edit-form-ajax-cat.php
            │   │   │   ├── edit-form-comment.php
            │   │   │   ├── edit-form.php
            │   │   │   ├── edit-link-form.php
            │   │   │   ├── edit-page-form.php
            │   │   │   ├── edit-pages.php
            │   │   │   ├── edit.php
            │   │   │   ├── execute-pings.php
            │   │   │   ├── images
            │   │   │   │   ├── box-bg.gif
            │   │   │   │   ├── box-butt.gif
            │   │   │   │   ├── box-head.gif
            │   │   │   │   ├── browse-happy.gif
            │   │   │   │   ├── fade-butt.png
            │   │   │   │   ├── notice.gif
            │   │   │   │   ├── toggle.gif
            │   │   │   │   └── wordpress-logo.png
            │   │   │   ├── import.php
            │   │   │   ├── import
            │   │   │   │   ├── b2.php
            │   │   │   │   ├── blogger.php
            │   │   │   │   ├── greymatter.php
            │   │   │   │   ├── livejournal.php
            │   │   │   │   ├── mt.php
            │   │   │   │   ├── rss.php
            │   │   │   │   └── textpattern.php
            │   │   │   ├── index.php
            │   │   │   ├── inline-uploading.php
            │   │   │   ├── install-helper.php
            │   │   │   ├── install.php
            │   │   │   ├── link-add.php
            │   │   │   ├── link-categories.php
            │   │   │   ├── link-import.php
            │   │   │   ├── link-manager.php
            │   │   │   ├── link-parse-opml.php
            │   │   │   ├── list-manipulation.js
            │   │   │   ├── list-manipulation.php
            │   │   │   ├── menu-header.php
            │   │   │   ├── menu.php
            │   │   │   ├── moderation.php
            │   │   │   ├── options-discussion.php
            │   │   │   ├── options-general.php
            │   │   │   ├── options-head.php
            │   │   │   ├── options-misc.php
            │   │   │   ├── options-permalink.php
            │   │   │   ├── options-reading.php
            │   │   │   ├── options-writing.php
            │   │   │   ├── options.php
            │   │   │   ├── page-new.php
            │   │   │   ├── plugin-editor.php
            │   │   │   ├── plugins.php
            │   │   │   ├── post.php
            │   │   │   ├── profile-update.php
            │   │   │   ├── profile.php
            │   │   │   ├── setup-config.php
            │   │   │   ├── sidebar.php
            │   │   │   ├── templates.php
            │   │   │   ├── theme-editor.php
            │   │   │   ├── themes.php
            │   │   │   ├── update-links.php
            │   │   │   ├── upgrade-functions.php
            │   │   │   ├── upgrade-schema.php
            │   │   │   ├── upgrade.php
            │   │   │   ├── user-edit.php
            │   │   │   ├── users.php
            │   │   │   └── wp-admin.css
            │   │   ├── wp-atom.php
            │   │   ├── wp-blog-header.php
            │   │   ├── wp-comments-post.php
            │   │   ├── wp-commentsrss2.php
            │   │   ├── wp-config.php
            │   │   ├── wp-content
            │   │   │   ├── index.php
            │   │   │   ├── plugins
            │   │   │   │   ├── akismet
            │   │   │   │   │   └── akismet.php
            │   │   │   │   ├── hello.php
            │   │   │   │   └── wp-db-backup.php
            │   │   │   └── themes
            │   │   │   │   ├── classic
            │   │   │   │       ├── comments-popup.php
            │   │   │   │       ├── comments.php
            │   │   │   │       ├── footer.php
            │   │   │   │       ├── header.php
            │   │   │   │       ├── index.php
            │   │   │   │       ├── screenshot.png
            │   │   │   │       ├── sidebar.php
            │   │   │   │       └── style.css
            │   │   │   │   └── default
            │   │   │   │       ├── 404.php
            │   │   │   │       ├── archive.php
            │   │   │   │       ├── archives.php
            │   │   │   │       ├── attachment.php
            │   │   │   │       ├── comments-popup.php
            │   │   │   │       ├── comments.php
            │   │   │   │       ├── footer.php
            │   │   │   │       ├── functions.php
            │   │   │   │       ├── header.php
            │   │   │   │       ├── images
            │   │   │   │           ├── audio.jpg
            │   │   │   │           ├── header-img.php
            │   │   │   │           ├── kubrickbg.jpg
            │   │   │   │           ├── kubrickbgcolor.jpg
            │   │   │   │           ├── kubrickbgwide.jpg
            │   │   │   │           ├── kubrickfooter.jpg
            │   │   │   │           └── kubrickheader.jpg
            │   │   │   │       ├── index.php
            │   │   │   │       ├── links.php
            │   │   │   │       ├── page.php
            │   │   │   │       ├── screenshot.png
            │   │   │   │       ├── search.php
            │   │   │   │       ├── searchform.php
            │   │   │   │       ├── sidebar.php
            │   │   │   │       ├── single.php
            │   │   │   │       └── style.css
            │   │   ├── wp-feed.php
            │   │   ├── wp-includes
            │   │   │   ├── cache.php
            │   │   │   ├── capabilities.php
            │   │   │   ├── class-IXR.php
            │   │   │   ├── class-pop3.php
            │   │   │   ├── class-snoopy.php
            │   │   │   ├── classes.php
            │   │   │   ├── comment-functions.php
            │   │   │   ├── default-filters.php
            │   │   │   ├── feed-functions.php
            │   │   │   ├── functions-compat.php
            │   │   │   ├── functions-formatting.php
            │   │   │   ├── functions-post.php
            │   │   │   ├── functions.php
            │   │   │   ├── gettext.php
            │   │   │   ├── images
            │   │   │   │   └── smilies
            │   │   │   │   │   ├── icon_arrow.gif
            │   │   │   │   │   ├── icon_biggrin.gif
            │   │   │   │   │   ├── icon_confused.gif
            │   │   │   │   │   ├── icon_cool.gif
            │   │   │   │   │   ├── icon_cry.gif
            │   │   │   │   │   ├── icon_eek.gif
            │   │   │   │   │   ├── icon_evil.gif
            │   │   │   │   │   ├── icon_exclaim.gif
            │   │   │   │   │   ├── icon_idea.gif
            │   │   │   │   │   ├── icon_lol.gif
            │   │   │   │   │   ├── icon_mad.gif
            │   │   │   │   │   ├── icon_mrgreen.gif
            │   │   │   │   │   ├── icon_neutral.gif
            │   │   │   │   │   ├── icon_question.gif
            │   │   │   │   │   ├── icon_razz.gif
            │   │   │   │   │   ├── icon_redface.gif
            │   │   │   │   │   ├── icon_rolleyes.gif
            │   │   │   │   │   ├── icon_sad.gif
            │   │   │   │   │   ├── icon_smile.gif
            │   │   │   │   │   ├── icon_surprised.gif
            │   │   │   │   │   ├── icon_twisted.gif
            │   │   │   │   │   └── icon_wink.gif
            │   │   │   ├── js
            │   │   │   │   ├── colorpicker.js
            │   │   │   │   ├── dbx-key.js
            │   │   │   │   ├── dbx.js
            │   │   │   │   ├── fat.js
            │   │   │   │   ├── quicktags.js
            │   │   │   │   ├── tinymce
            │   │   │   │   │   ├── blank.htm
            │   │   │   │   │   ├── langs
            │   │   │   │   │   │   └── en.js
            │   │   │   │   │   ├── license.html
            │   │   │   │   │   ├── license.txt
            │   │   │   │   │   ├── plugins
            │   │   │   │   │   │   ├── autosave
            │   │   │   │   │   │   │   ├── editor_plugin.js
            │   │   │   │   │   │   │   ├── editor_plugin_src.js
            │   │   │   │   │   │   │   ├── langs
            │   │   │   │   │   │   │   │   ├── cs.js
            │   │   │   │   │   │   │   │   ├── en.js
            │   │   │   │   │   │   │   │   └── sv.js
            │   │   │   │   │   │   │   └── readme.txt
            │   │   │   │   │   │   ├── directionality
            │   │   │   │   │   │   │   ├── editor_plugin.js
            │   │   │   │   │   │   │   ├── images
            │   │   │   │   │   │   │   │   ├── ltr.gif
            │   │   │   │   │   │   │   │   └── rtl.gif
            │   │   │   │   │   │   │   └── langs
            │   │   │   │   │   │   │   │   └── en.js
            │   │   │   │   │   │   ├── inlinepopups
            │   │   │   │   │   │   │   ├── css
            │   │   │   │   │   │   │   │   └── inlinepopup.css
            │   │   │   │   │   │   │   ├── editor_plugin.js
            │   │   │   │   │   │   │   ├── editor_plugin_src.js
            │   │   │   │   │   │   │   ├── images
            │   │   │   │   │   │   │   │   ├── spacer.gif
            │   │   │   │   │   │   │   │   ├── window_close.gif
            │   │   │   │   │   │   │   │   ├── window_maximize.gif
            │   │   │   │   │   │   │   │   ├── window_minimize.gif
            │   │   │   │   │   │   │   │   └── window_resize.gif
            │   │   │   │   │   │   │   ├── jscripts
            │   │   │   │   │   │   │   │   └── mcwindows.js
            │   │   │   │   │   │   │   └── readme.txt
            │   │   │   │   │   │   ├── wordpress
            │   │   │   │   │   │   │   ├── editor_plugin.js
            │   │   │   │   │   │   │   ├── images
            │   │   │   │   │   │   │   │   ├── help.gif
            │   │   │   │   │   │   │   │   ├── more.gif
            │   │   │   │   │   │   │   │   ├── more_bug.gif
            │   │   │   │   │   │   │   │   ├── page.gif
            │   │   │   │   │   │   │   │   └── page_bug.gif
            │   │   │   │   │   │   │   ├── langs
            │   │   │   │   │   │   │   │   └── en.js
            │   │   │   │   │   │   │   └── wordpress.css
            │   │   │   │   │   │   └── wphelp
            │   │   │   │   │   │   │   ├── editor_plugin.js
            │   │   │   │   │   │   │   ├── images
            │   │   │   │   │   │   │       └── help.gif
            │   │   │   │   │   │   │   └── langs
            │   │   │   │   │   │   │       └── en.js
            │   │   │   │   │   ├── themes
            │   │   │   │   │   │   └── advanced
            │   │   │   │   │   │   │   ├── about.htm
            │   │   │   │   │   │   │   ├── anchor.htm
            │   │   │   │   │   │   │   ├── charmap.htm
            │   │   │   │   │   │   │   ├── color_picker.htm
            │   │   │   │   │   │   │   ├── css
            │   │   │   │   │   │   │       ├── editor_content.css
            │   │   │   │   │   │   │       ├── editor_popup.css
            │   │   │   │   │   │   │       └── editor_ui.css
            │   │   │   │   │   │   │   ├── editor_template.js
            │   │   │   │   │   │   │   ├── editor_template_src.js
            │   │   │   │   │   │   │   ├── image.htm
            │   │   │   │   │   │   │   ├── images
            │   │   │   │   │   │   │       ├── anchor.gif
            │   │   │   │   │   │   │       ├── anchor_symbol.gif
            │   │   │   │   │   │   │       ├── backcolor.gif
            │   │   │   │   │   │   │       ├── bold.gif
            │   │   │   │   │   │   │       ├── bold_de_se.gif
            │   │   │   │   │   │   │       ├── bold_fr.gif
            │   │   │   │   │   │   │       ├── bold_ru.gif
            │   │   │   │   │   │   │       ├── browse.gif
            │   │   │   │   │   │   │       ├── bullist.gif
            │   │   │   │   │   │   │       ├── buttons.gif
            │   │   │   │   │   │   │       ├── cancel_button_bg.gif
            │   │   │   │   │   │   │       ├── center.gif
            │   │   │   │   │   │   │       ├── charmap.gif
            │   │   │   │   │   │   │       ├── cleanup.gif
            │   │   │   │   │   │   │       ├── close.gif
            │   │   │   │   │   │   │       ├── code.gif
            │   │   │   │   │   │   │       ├── color.gif
            │   │   │   │   │   │   │       ├── copy.gif
            │   │   │   │   │   │   │       ├── custom_1.gif
            │   │   │   │   │   │   │       ├── cut.gif
            │   │   │   │   │   │   │       ├── forecolor.gif
            │   │   │   │   │   │   │       ├── full.gif
            │   │   │   │   │   │   │       ├── hr.gif
            │   │   │   │   │   │   │       ├── image.gif
            │   │   │   │   │   │   │       ├── indent.gif
            │   │   │   │   │   │   │       ├── insert_button_bg.gif
            │   │   │   │   │   │   │       ├── italic.gif
            │   │   │   │   │   │   │       ├── italic_de_se.gif
            │   │   │   │   │   │   │       ├── italic_ru.gif
            │   │   │   │   │   │   │       ├── left.gif
            │   │   │   │   │   │   │       ├── link.gif
            │   │   │   │   │   │   │       ├── newdocument.gif
            │   │   │   │   │   │   │       ├── numlist.gif
            │   │   │   │   │   │   │       ├── outdent.gif
            │   │   │   │   │   │   │       ├── paste.gif
            │   │   │   │   │   │   │       ├── redo.gif
            │   │   │   │   │   │   │       ├── removeformat.gif
            │   │   │   │   │   │   │       ├── right.gif
            │   │   │   │   │   │   │       ├── spacer.gif
            │   │   │   │   │   │   │       ├── statusbar_resize.gif
            │   │   │   │   │   │   │       ├── strikethrough.gif
            │   │   │   │   │   │   │       ├── sub.gif
            │   │   │   │   │   │   │       ├── sup.gif
            │   │   │   │   │   │   │       ├── table.gif
            │   │   │   │   │   │   │       ├── table_delete_col.gif
            │   │   │   │   │   │   │       ├── table_delete_row.gif
            │   │   │   │   │   │   │       ├── table_insert_col_after.gif
            │   │   │   │   │   │   │       ├── table_insert_col_before.gif
            │   │   │   │   │   │   │       ├── table_insert_row_after.gif
            │   │   │   │   │   │   │       ├── table_insert_row_before.gif
            │   │   │   │   │   │   │       ├── underline.gif
            │   │   │   │   │   │   │       ├── underline_fr.gif
            │   │   │   │   │   │   │       ├── underline_ru.gif
            │   │   │   │   │   │   │       ├── undo.gif
            │   │   │   │   │   │   │       ├── unlink.gif
            │   │   │   │   │   │   │       ├── visualaid.gif
            │   │   │   │   │   │   │       └── xp
            │   │   │   │   │   │   │       │   ├── tab_bg.gif
            │   │   │   │   │   │   │       │   ├── tab_end.gif
            │   │   │   │   │   │   │       │   ├── tab_sel_bg.gif
            │   │   │   │   │   │   │       │   ├── tab_sel_end.gif
            │   │   │   │   │   │   │       │   └── tabs_bg.gif
            │   │   │   │   │   │   │   ├── jscripts
            │   │   │   │   │   │   │       ├── about.js
            │   │   │   │   │   │   │       ├── anchor.js
            │   │   │   │   │   │   │       ├── charmap.js
            │   │   │   │   │   │   │       ├── color_picker.js
            │   │   │   │   │   │   │       ├── image.js
            │   │   │   │   │   │   │       ├── link.js
            │   │   │   │   │   │   │       └── source_editor.js
            │   │   │   │   │   │   │   ├── langs
            │   │   │   │   │   │   │       └── en.js
            │   │   │   │   │   │   │   ├── link.htm
            │   │   │   │   │   │   │   └── source_editor.htm
            │   │   │   │   │   ├── tiny_mce.js
            │   │   │   │   │   ├── tiny_mce_gzip.php
            │   │   │   │   │   ├── tiny_mce_popup.js
            │   │   │   │   │   ├── utils
            │   │   │   │   │   │   ├── form_utils.js
            │   │   │   │   │   │   ├── mctabs.js
            │   │   │   │   │   │   └── validate.js
            │   │   │   │   │   └── wp-mce-help.php
            │   │   │   │   └── tw-sack.js
            │   │   │   ├── kses.php
            │   │   │   ├── links.php
            │   │   │   ├── locale.php
            │   │   │   ├── pluggable-functions.php
            │   │   │   ├── registration-functions.php
            │   │   │   ├── rss-functions.php
            │   │   │   ├── streams.php
            │   │   │   ├── template-functions-author.php
            │   │   │   ├── template-functions-category.php
            │   │   │   ├── template-functions-general.php
            │   │   │   ├── template-functions-links.php
            │   │   │   ├── template-functions-post.php
            │   │   │   ├── template-loader.php
            │   │   │   ├── vars.php
            │   │   │   ├── version.php
            │   │   │   ├── wp-db.php
            │   │   │   └── wp-l10n.php
            │   │   ├── wp-links-opml.php
            │   │   ├── wp-login.php
            │   │   ├── wp-mail.php
            │   │   ├── wp-pass.php
            │   │   ├── wp-rdf.php
            │   │   ├── wp-register.php
            │   │   ├── wp-rss.php
            │   │   ├── wp-rss2.php
            │   │   ├── wp-settings.php
            │   │   ├── wp-trackback.php
            │   │   └── xmlrpc.php
            │   ├── wordpress1
            │   │   ├── index.php
            │   │   ├── wp-blog-header.php
            │   │   ├── wp-commentsrss2.php
            │   │   ├── wp-config.php
            │   │   ├── wp-content
            │   │   │   ├── index.php
            │   │   │   ├── plugins
            │   │   │   │   ├── akismet
            │   │   │   │   │   └── akismet.php
            │   │   │   │   ├── hello.php
            │   │   │   │   └── wp-db-backup.php
            │   │   │   └── themes
            │   │   │   │   ├── classic
            │   │   │   │       ├── comments-popup.php
            │   │   │   │       ├── comments.php
            │   │   │   │       ├── footer.php
            │   │   │   │       ├── header.php
            │   │   │   │       ├── index.php
            │   │   │   │       ├── screenshot.png
            │   │   │   │       ├── sidebar.php
            │   │   │   │       └── style.css
            │   │   │   │   └── default
            │   │   │   │       ├── 404.php
            │   │   │   │       ├── archive.php
            │   │   │   │       ├── archives.php
            │   │   │   │       ├── attachment.php
            │   │   │   │       ├── comments-popup.php
            │   │   │   │       ├── comments.php
            │   │   │   │       ├── footer.php
            │   │   │   │       ├── functions.php
            │   │   │   │       ├── header.php
            │   │   │   │       ├── images
            │   │   │   │           ├── audio.jpg
            │   │   │   │           ├── header-img.php
            │   │   │   │           ├── kubrickbg.jpg
            │   │   │   │           ├── kubrickbgcolor.jpg
            │   │   │   │           ├── kubrickbgwide.jpg
            │   │   │   │           ├── kubrickfooter.jpg
            │   │   │   │           └── kubrickheader.jpg
            │   │   │   │       ├── index.php
            │   │   │   │       ├── links.php
            │   │   │   │       ├── page.php
            │   │   │   │       ├── screenshot.png
            │   │   │   │       ├── search.php
            │   │   │   │       ├── searchform.php
            │   │   │   │       ├── sidebar.php
            │   │   │   │       ├── single.php
            │   │   │   │       └── style.css
            │   │   ├── wp-includes
            │   │   │   ├── comment-functions.php
            │   │   │   ├── default-filters.php
            │   │   │   ├── functions.php
            │   │   │   ├── template-loader.php
            │   │   │   └── wp-db.php
            │   │   └── wp-settings.php
            │   ├── wordpress2
            │   │   ├── wp-admin
            │   │   │   ├── admin-db.php
            │   │   │   └── import
            │   │   │   │   └── textpattern.php
            │   │   ├── wp-commentsrss2.php
            │   │   ├── wp-config.php
            │   │   ├── wp-includes
            │   │   │   ├── functions-post.php
            │   │   │   ├── functions.php
            │   │   │   └── wp-db.php
            │   │   └── wp-settings.php
            │   ├── wordpress3
            │   │   ├── wp-admin
            │   │   │   ├── admin-db.php
            │   │   │   ├── import
            │   │   │   │   └── textpattern.php
            │   │   │   └── update-links.php
            │   │   ├── wp-commentsrss2.php
            │   │   ├── wp-config.php
            │   │   ├── wp-includes
            │   │   │   ├── functions-post.php
            │   │   │   ├── functions.php
            │   │   │   └── wp-db.php
            │   │   ├── wp-login.php
            │   │   └── wp-settings.php
            │   └── wordpress4
            │   │   ├── wp-commentsrss2.php
            │   │   ├── wp-config.php
            │   │   ├── wp-includes
            │   │       └── wp-db.php
            │   │   ├── wp-login.php
            │   │   └── wp-settings.php
            ├── todo
            │   ├── clone.php
            │   ├── functions22.php
            │   ├── nat_ref_objs.php
            │   ├── property_taint.php
            │   └── unset.php
            ├── twig
            │   ├── twig1.js
            │   └── twig1.php
            └── vulntestsuite
            │   ├── CWE_78__GET__CAST-func_settype_int__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__GET__CAST-func_settype_int__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__GET__func_FILTER-CLEANING-magic_quotes_filter__cat-interpretation_simple_quote.php
            │   ├── CWE_78__GET__func_FILTER-VALIDATION-number_float_filter__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__GET__no_sanitizing__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__GET__ternary_white_list__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__POST__CAST-cast_float__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__POST__CAST-cast_int__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__POST__CAST-cast_int_sort_of2__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__POST__CAST-func_settype_float__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__POST__func_FILTER-CLEANING-number_int_filter__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__POST__func_FILTER-VALIDATION-number_float_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__POST__func_FILTER-VALIDATION-number_int_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__POST__func_FILTER-VALIDATION-number_int_filter__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__POST__func_htmlentities__cat-interpretation_simple_quote.php
            │   ├── CWE_78__POST__func_intval__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__POST__func_preg_match-letters_numbers__cat-concatenation_simple_quote.php
            │   ├── CWE_78__POST__func_preg_match-letters_numbers__cat-interpretation_simple_quote.php
            │   ├── CWE_78__POST__func_preg_match-letters_numbers__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__POST__func_preg_match-letters_numbers__ls-concatenation_simple_quote.php
            │   ├── CWE_78__POST__func_preg_match-no_filtering__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__POST__func_preg_match-only_numbers__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__POST__func_preg_replace__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__POST__ternary_white_list__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__SESSION__func_FILTER-CLEANING-number_float_filter__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__SESSION__func_FILTER-CLEANING-number_float_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__SESSION__func_FILTER-VALIDATION-number_float_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__SESSION__func_addslashes__ls-concatenation_simple_quote.php
            │   ├── CWE_78__SESSION__func_floatval__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__SESSION__func_htmlspecialchars__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__SESSION__func_intval__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__SESSION__func_preg_match-letters_numbers__ls-interpretation_simple_quote.php
            │   ├── CWE_78__SESSION__func_preg_match-letters_numbers__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__SESSION__func_preg_replace__cat-interpretation_simple_quote.php
            │   ├── CWE_78__SESSION__ternary_white_list__cat-interpretation_simple_quote.php
            │   ├── CWE_78__SESSION__whitelist_using_array__ls-interpretation_simple_quote.php
            │   ├── CWE_78__array-GET__CAST-cast_int_sort_of2__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__array-GET__CAST-cast_int_sort_of__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__array-GET__CAST-cast_int_sort_of__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__array-GET__CAST-func_settype_float__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__array-GET__func_FILTER-CLEANING-magic_quotes_filter__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__array-GET__func_intval__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__array-GET__func_mysql_real_escape_string__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__array-GET__func_mysql_real_escape_string__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__array-GET__func_preg_replace__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__array-GET__whitelist_using_array__cat-concatenation_simple_quote.php
            │   ├── CWE_78__array-GET__whitelist_using_array__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__CAST-func_settype_int__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__backticks__func_FILTER-CLEANING-email_filter__ls-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__func_FILTER-CLEANING-magic_quotes_filter__ls-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__func_FILTER-CLEANING-magic_quotes_filter__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__backticks__func_htmlspecialchars__cat-interpretation_simple_quote.php
            │   ├── CWE_78__backticks__func_htmlspecialchars__ls-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__func_preg_match-only_numbers__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__func_preg_replace2__ls-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__func_preg_replace__cat-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__no_sanitizing__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__ternary_white_list__ls-concatenation_simple_quote.php
            │   ├── CWE_78__backticks__ternary_white_list__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__backticks__whitelist_using_array__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__exec__CAST-cast_int__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__exec__func_FILTER-CLEANING-email_filter__cat-interpretation_simple_quote.php
            │   ├── CWE_78__exec__func_FILTER-VALIDATION-number_float_filter__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__exec__func_addslashes__ls-concatenation_simple_quote.php
            │   ├── CWE_78__exec__func_htmlspecialchars__cat-interpretation_simple_quote.php
            │   ├── CWE_78__exec__whitelist_using_array__cat-interpretation_simple_quote.php
            │   ├── CWE_78__exec__whitelist_using_array__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__fopen__CAST-cast_int__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__fopen__CAST-cast_int_sort_of2__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__fopen__CAST-cast_int_sort_of__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__fopen__func_FILTER-CLEANING-email_filter__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__fopen__func_FILTER-CLEANING-magic_quotes_filter__ls-interpretation_simple_quote.php
            │   ├── CWE_78__fopen__func_addslashes__cat-concatenation_simple_quote.php
            │   ├── CWE_78__fopen__func_floatval__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__fopen__func_htmlentities__cat-concatenation_simple_quote.php
            │   ├── CWE_78__fopen__func_preg_match-letters_numbers__cat-interpretation_simple_quote.php
            │   ├── CWE_78__fopen__func_preg_match-no_filtering__cat-interpretation_simple_quote.php
            │   ├── CWE_78__fopen__func_preg_match-no_filtering__ls-interpretation_simple_quote.php
            │   ├── CWE_78__fopen__func_preg_match-no_filtering__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__fopen__func_preg_replace2__cat-interpretation_simple_quote.php
            │   ├── CWE_78__fopen__no_sanitizing__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__fopen__ternary_white_list__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__fopen__whitelist_using_array__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-Array__CAST-func_settype_float__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__object-Array__func_FILTER-CLEANING-number_int_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-Array__func_escapeshellarg__cat-interpretation_simple_quote.php
            │   ├── CWE_78__object-Array__func_htmlentities__ls-concatenation_simple_quote.php
            │   ├── CWE_78__object-Array__func_preg_match-only_letters__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-Array__func_preg_match-only_letters__ls-concatenation_simple_quote.php
            │   ├── CWE_78__object-Array__func_preg_match-only_numbers__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__object-Array__func_preg_match-only_numbers__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-Array__func_preg_replace__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-Array__ternary_white_list__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-Array__whitelist_using_array__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-Array__whitelist_using_array__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_FILTER-CLEANING-email_filter__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_FILTER-VALIDATION-number_int_filter__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_htmlentities__cat-concatenation_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_htmlentities__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_htmlspecialchars__cat-concatenation_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_htmlspecialchars__cat-interpretation_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_htmlspecialchars__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_preg_match-only_letters__ls-concatenation_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_preg_match-only_numbers__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-classicGet__func_preg_replace__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-classicGet__ternary_white_list__cat-concatenation_simple_quote.php
            │   ├── CWE_78__object-classicGet__ternary_white_list__cat-interpretation_simple_quote.php
            │   ├── CWE_78__object-classicGet__whitelist_using_array__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-directGet__CAST-cast_int__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__object-directGet__func_FILTER-CLEANING-number_int_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-directGet__func_addslashes__ls-concatenation_simple_quote.php
            │   ├── CWE_78__object-directGet__func_addslashes__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-directGet__func_escapeshellarg__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-directGet__func_intval__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-directGet__func_mysql_real_escape_string__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-directGet__func_preg_match-letters_numbers__cat-concatenation_simple_quote.php
            │   ├── CWE_78__object-directGet__func_preg_match-no_filtering__cat-concatenation_simple_quote.php
            │   ├── CWE_78__object-directGet__func_preg_match-only_letters__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-directGet__func_preg_replace__ls-concatenation_simple_quote.php
            │   ├── CWE_78__object-directGet__ternary_white_list__cat-interpretation_simple_quote.php
            │   ├── CWE_78__object-directGet__ternary_white_list__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-directGet__whitelist_using_array__cat-concatenation_simple_quote.php
            │   ├── CWE_78__object-directGet__whitelist_using_array__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-directGet__whitelist_using_array__ls-concatenation_simple_quote.php
            │   ├── CWE_78__object-indexArray__CAST-cast_int__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-indexArray__CAST-cast_int_sort_of__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__CAST-func_settype_int__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_FILTER-CLEANING-email_filter__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_FILTER-CLEANING-magic_quotes_filter__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_FILTER-VALIDATION-number_float_filter__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_addslashes__ls-interpretation_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_escapeshellarg__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_floatval__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_htmlspecialchars__cat-concatenation_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_htmlspecialchars__ls-interpretation_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_htmlspecialchars__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_intval__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_preg_match-no_filtering__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__func_preg_replace2__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__ternary_white_list__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__ternary_white_list__ls-concatenation_simple_quote.php
            │   ├── CWE_78__object-indexArray__whitelist_using_array__cat-concatenation_simple_quote.php
            │   ├── CWE_78__object-indexArray__whitelist_using_array__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__object-indexArray__whitelist_using_array__ls-interpretation_simple_quote.php
            │   ├── CWE_78__popen__CAST-cast_int_sort_of__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__popen__CAST-cast_int_sort_of__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__popen__func_FILTER-CLEANING-email_filter__cat-interpretation_simple_quote.php
            │   ├── CWE_78__popen__func_FILTER-CLEANING-email_filter__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__popen__func_FILTER-CLEANING-magic_quotes_filter__ls-concatenation_simple_quote.php
            │   ├── CWE_78__popen__func_FILTER-CLEANING-number_float_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__popen__func_FILTER-CLEANING-number_float_filter__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__popen__func_FILTER-VALIDATION-number_float_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__popen__func_escapeshellarg__cat-interpretation_simple_quote.php
            │   ├── CWE_78__popen__func_floatval__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__popen__func_intval__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__popen__func_intval__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__popen__func_preg_match-no_filtering__ls-interpretation_simple_quote.php
            │   ├── CWE_78__popen__func_preg_match-no_filtering__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__popen__func_preg_match-only_letters__ls-concatenation_simple_quote.php
            │   ├── CWE_78__popen__func_preg_replace2__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__popen__no_sanitizing__cat-interpretation_simple_quote.php
            │   ├── CWE_78__popen__ternary_white_list__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__popen__whitelist_using_array__ls-interpretation_simple_quote.php
            │   ├── CWE_78__proc_open__CAST-cast_int__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__proc_open__CAST-func_settype_float__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__proc_open__func_FILTER-CLEANING-email_filter__ls-interpretation_simple_quote.php
            │   ├── CWE_78__proc_open__func_FILTER-CLEANING-number_float_filter__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__proc_open__func_FILTER-CLEANING-number_int_filter__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__proc_open__func_FILTER-VALIDATION-number_int_filter__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__proc_open__func_escapeshellarg__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__proc_open__func_escapeshellarg__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__proc_open__func_mysql_real_escape_string__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__proc_open__func_preg_match-letters_numbers__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__proc_open__func_preg_match-no_filtering__cat-concatenation_simple_quote.php
            │   ├── CWE_78__proc_open__func_preg_match-no_filtering__ls-concatenation_simple_quote.php
            │   ├── CWE_78__proc_open__func_preg_match-no_filtering__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__proc_open__func_preg_replace__ls-interpretation_simple_quote.php
            │   ├── CWE_78__proc_open__func_preg_replace__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__proc_open__no_sanitizing__ls-concatenation_simple_quote.php
            │   ├── CWE_78__proc_open__whitelist_using_array__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__CAST-cast_int_sort_of__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__shell_exec__func_FILTER-CLEANING-email_filter__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__func_FILTER-VALIDATION-number_float_filter__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__shell_exec__func_FILTER-VALIDATION-number_int_filter__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__shell_exec__func_FILTER-VALIDATION-number_int_filter__find_size-interpretation_simple_quote.php
            │   ├── CWE_78__shell_exec__func_escapeshellarg__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__func_htmlentities__cat-concatenation_simple_quote.php
            │   ├── CWE_78__shell_exec__func_htmlentities__ls-interpretation_simple_quote.php
            │   ├── CWE_78__shell_exec__func_htmlspecialchars__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__func_preg_match-no_filtering__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__func_preg_match-only_letters__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__func_preg_replace2__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__ternary_white_list__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__ternary_white_list__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__whitelist_using_array__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__shell_exec__whitelist_using_array__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__shell_exec__whitelist_using_array__ls-interpretation_simple_quote.php
            │   ├── CWE_78__system__CAST-func_settype_float__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__system__CAST-func_settype_int__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__system__func_FILTER-CLEANING-email_filter__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__system__func_FILTER-CLEANING-magic_quotes_filter__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__system__func_addslashes__cat-interpretation_simple_quote.php
            │   ├── CWE_78__system__func_escapeshellarg__cat-interpretation_simple_quote.php
            │   ├── CWE_78__system__func_htmlentities__cat-concatenation_simple_quote.php
            │   ├── CWE_78__system__func_mysql_real_escape_string__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_78__system__func_preg_match-only_letters__cat-interpretation_simple_quote.php
            │   ├── CWE_78__system__func_preg_match-only_letters__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__system__func_preg_match-only_letters__ls-concatenation_simple_quote.php
            │   ├── CWE_78__system__func_preg_match-only_letters__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__system__func_preg_replace2__cat-interpretation_simple_quote.php
            │   ├── CWE_78__system__func_preg_replace2__ls-sprintf_%s_simple_quote.php
            │   ├── CWE_78__system__func_preg_replace__cat-concatenation_simple_quote.php
            │   ├── CWE_78__system__func_preg_replace__ls-concatenation_simple_quote.php
            │   ├── CWE_78__system__whitelist_using_array__cat-concatenation_simple_quote.php
            │   ├── CWE_78__unserialize__func_FILTER-CLEANING-full_special_chars_filter__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__unserialize__func_FILTER-CLEANING-special_chars_filter__cat-interpretation_simple_quote.php
            │   ├── CWE_78__unserialize__func_FILTER-VALIDATION-email_filter__cat-concatenation_simple_quote.php
            │   ├── CWE_78__unserialize__no_sanitizing__cat-sprintf_%s_simple_quote.php
            │   ├── CWE_78__unserialize__no_sanitizing__find_size-concatenation_simple_quote.php
            │   ├── CWE_78__unserialize__no_sanitizing__find_size-sprintf_%s_simple_quote.php
            │   ├── CWE_862_Fopen__GET__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__GET__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__GET__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__GET__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__POST__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__POST__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__POST__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__POST__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__SESSION__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__SESSION__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__array-GET__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__array-GET__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__backticks__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__backticks__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__backticks__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__backticks__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__exec__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__exec__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__exec__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__exec__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__fopen__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__fopen__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__fopen__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__fopen__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__object-Array__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__object-Array__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__object-Array__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__object-Array__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__object-classicGet__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__object-classicGet__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__object-classicGet__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__object-classicGet__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__object-directGet__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__object-directGet__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__object-directGet__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__object-directGet__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__object-indexArray__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__object-indexArray__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__object-indexArray__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__object-indexArray__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__popen__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__popen__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__popen__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__popen__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__proc_open__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__proc_open__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__proc_open__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__proc_open__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__shell_exec__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__shell_exec__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__shell_exec__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__shell_exec__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__system__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__system__no_sanitizing__fopen.php
            │   ├── CWE_862_Fopen__system__ternary_white_list__fopen.php
            │   ├── CWE_862_Fopen__system__whitelist_using_array__fopen.php
            │   ├── CWE_862_Fopen__unserialize__func_preg_replace__fopen.php
            │   ├── CWE_862_Fopen__unserialize__no_sanitizing__fopen.php
            │   ├── CWE_862_SQL__GET__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__GET__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__GET__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__GET__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__GET__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__GET__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__GET__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__GET__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__GET__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__GET__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__GET__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__POST__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__POST__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__POST__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__POST__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__POST__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__POST__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__POST__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__POST__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__POST__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__POST__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__POST__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__SESSION__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__SESSION__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__SESSION__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__SESSION__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__SESSION__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__SESSION__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__SESSION__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__SESSION__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__SESSION__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__SESSION__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__SESSION__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__array-GET__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__array-GET__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__array-GET__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__array-GET__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__array-GET__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__array-GET__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__array-GET__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__array-GET__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__array-GET__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__array-GET__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__array-GET__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__backticks__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__backticks__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__backticks__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__backticks__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__backticks__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__backticks__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__backticks__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__backticks__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__backticks__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__backticks__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__backticks__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__exec__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__exec__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__exec__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__exec__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__exec__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__exec__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__exec__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__exec__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__exec__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__exec__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__exec__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__fopen__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__fopen__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__fopen__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__fopen__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__fopen__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__fopen__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__fopen__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__fopen__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__fopen__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__fopen__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__fopen__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-Array__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-Array__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-Array__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-Array__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-Array__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-Array__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-Array__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-Array__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-Array__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-Array__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-Array__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-classicGet__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-classicGet__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-classicGet__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-classicGet__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-classicGet__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-classicGet__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-directGet__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-directGet__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-directGet__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-directGet__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-directGet__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-directGet__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-directGet__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-directGet__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-directGet__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-directGet__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-directGet__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-indexArray__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-indexArray__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-indexArray__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-indexArray__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__object-indexArray__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__object-indexArray__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__popen__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__popen__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__popen__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__popen__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__popen__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__popen__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__popen__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__popen__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__popen__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__popen__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__popen__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__proc_open__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__proc_open__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__proc_open__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__proc_open__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__proc_open__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__proc_open__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__proc_open__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__proc_open__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__proc_open__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__proc_open__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__proc_open__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__shell_exec__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__shell_exec__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__shell_exec__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__shell_exec__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__shell_exec__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__shell_exec__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__shell_exec__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__shell_exec__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__shell_exec__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__shell_exec__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__shell_exec__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__system__CAST-cast_int__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__system__CAST-cast_int__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__system__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__system__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__system__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__system__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__system__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__system__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__system__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__system__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__system__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__unserialize__CAST-cast_int__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__unserialize__CAST-cast_int__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__unserialize__ESAPI__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__unserialize__ESAPI__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__unserialize__ESAPI__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__unserialize__ESAPI__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__unserialize__Indirect_reference__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__unserialize__Indirect_reference__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__unserialize__Indirect_reference__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__unserialize__Indirect_reference__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__unserialize__ternary_white_list__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__unserialize__ternary_white_list__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__unserialize__ternary_white_list__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__unserialize__ternary_white_list__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_SQL__unserialize__whitelist_using_array__non_prepared_query-right_verification.php
            │   ├── CWE_862_SQL__unserialize__whitelist_using_array__prepared_query-no_right_verification.php
            │   ├── CWE_862_SQL__unserialize__whitelist_using_array__prepared_query-right_verification.php
            │   ├── CWE_862_SQL__unserialize__whitelist_using_array__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_862_XPath__GET__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__GET__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__GET__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__GET__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__GET__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__POST__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__POST__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__POST__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__POST__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__POST__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__SESSION__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__SESSION__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__SESSION__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__SESSION__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__SESSION__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__array-GET__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__array-GET__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__array-GET__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__array-GET__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__array-GET__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__backticks__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__backticks__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__backticks__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__backticks__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__backticks__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__exec__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__exec__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__exec__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__exec__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__exec__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__fopen__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__fopen__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__fopen__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__fopen__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__fopen__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__object-Array__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-Array__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-Array__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__object-Array__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-Array__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__object-classicGet__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-classicGet__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-classicGet__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__object-classicGet__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-classicGet__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__object-directGet__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-directGet__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-directGet__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__object-directGet__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-directGet__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__object-indexArray__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-indexArray__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-indexArray__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__object-indexArray__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__object-indexArray__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__popen__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__popen__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__popen__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__popen__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__popen__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__proc_open__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__proc_open__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__proc_open__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__proc_open__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__proc_open__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__shell_exec__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__shell_exec__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__shell_exec__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__shell_exec__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__shell_exec__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__system__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__system__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__system__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__system__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__system__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__unserialize__CAST-cast_int__concatenation-right_verification.php
            │   ├── CWE_862_XPath__unserialize__ternary_white_list__concatenation-right_verification.php
            │   ├── CWE_862_XPath__unserialize__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_862_XPath__unserialize__whitelist_using_array__concatenation-right_verification.php
            │   ├── CWE_862_XPath__unserialize__whitelist_using_array__username_at-concatenation_simple_quote.php
            │   ├── CWE_89__GET__CAST-cast_float_sort_of__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__GET__CAST-cast_int__multiple_AS-sprintf_%u_simple_quote.php
            │   ├── CWE_89__GET__CAST-cast_int__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__GET__CAST-cast_int_sort_of2__multiple_select-interpretation_simple_quote.php
            │   ├── CWE_89__GET__CAST-func_settype_float__multiple_select-sprintf_%d.php
            │   ├── CWE_89__GET__CAST-func_settype_float__select_from_where-sprintf_%s_simple_quote.php
            │   ├── CWE_89__GET__func_FILTER-CLEANING-number_int_filter__select_from_where-sprintf_%u.php
            │   ├── CWE_89__GET__func_FILTER-VALIDATION-number_int_filter__multiple_AS-sprintf_%u.php
            │   ├── CWE_89__GET__func_intval__multiple_AS-sprintf_%d_simple_quote.php
            │   ├── CWE_89__GET__func_intval__select_from_where-sprintf_%d.php
            │   ├── CWE_89__GET__no_sanitizing__join-sprintf_%s_simple_quote.php
            │   ├── CWE_89__GET__no_sanitizing__multiple_AS-interpretation.php
            │   ├── CWE_89__GET__ternary_white_list__select_from_where-sprintf_%u.php
            │   ├── CWE_89__POST__CAST-cast_float_sort_of__multiple_select-interpretation_simple_quote.php
            │   ├── CWE_89__POST__CAST-cast_int__multiple_AS-concatenation.php
            │   ├── CWE_89__POST__CAST-cast_int__multiple_AS-sprintf_%d.php
            │   ├── CWE_89__POST__CAST-cast_int__multiple_select-concatenation.php
            │   ├── CWE_89__POST__CAST-cast_int_sort_of__multiple_select-interpretation.php
            │   ├── CWE_89__POST__CAST-func_settype_float__select_from_where-sprintf_%s_simple_quote.php
            │   ├── CWE_89__POST__func_FILTER-CLEANING-number_int_filter__select_from_where-sprintf_%d.php
            │   ├── CWE_89__POST__func_FILTER-VALIDATION-number_int_filter__select_from_where-sprintf_%s_simple_quote.php
            │   ├── CWE_89__POST__func_floatval__select_from_where-sprintf_%s_simple_quote.php
            │   ├── CWE_89__POST__func_preg_match-only_numbers__select_from_where-concatenation.php
            │   ├── CWE_89__SESSION__CAST-cast_int_sort_of2__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__SESSION__CAST-cast_int_sort_of__multiple_AS-concatenation_simple_quote.php
            │   ├── CWE_89__SESSION__CAST-cast_int_sort_of__select_from_where-sprintf_%u.php
            │   ├── CWE_89__SESSION__func_FILTER-CLEANING-number_int_filter__multiple_AS-sprintf_%d.php
            │   ├── CWE_89__SESSION__func_FILTER-CLEANING-number_int_filter__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__SESSION__func_FILTER-CLEANING-number_int_filter__multiple_select-sprintf_%d.php
            │   ├── CWE_89__SESSION__func_FILTER-VALIDATION-number_float_filter__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__SESSION__func_FILTER-VALIDATION-number_int_filter__select_from_where-concatenation.php
            │   ├── CWE_89__SESSION__func_floatval__multiple_select-concatenation_simple_quote.php
            │   ├── CWE_89__SESSION__func_floatval__select_from_where-sprintf_%d.php
            │   ├── CWE_89__SESSION__ternary_white_list__multiple_select-concatenation.php
            │   ├── CWE_89__SESSION__whitelist_using_array_from__select_from-sprintf_%s_simple_quote.php
            │   ├── CWE_89__array-GET__CAST-cast_float_sort_of__multiple_select-interpretation.php
            │   ├── CWE_89__array-GET__CAST-cast_float_sort_of__select_from_where-concatenation_simple_quote.php
            │   ├── CWE_89__array-GET__CAST-cast_int__multiple_AS-concatenation.php
            │   ├── CWE_89__array-GET__CAST-cast_int_sort_of2__multiple_AS-sprintf_%u_simple_quote.php
            │   ├── CWE_89__array-GET__CAST-cast_int_sort_of__multiple_AS-sprintf_%u_simple_quote.php
            │   ├── CWE_89__array-GET__CAST-func_settype_float__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__array-GET__func_FILTER-VALIDATION-number_int_filter__select_from_where-sprintf_%s_simple_quote.php
            │   ├── CWE_89__array-GET__func_floatval__multiple_select-interpretation_simple_quote.php
            │   ├── CWE_89__array-GET__func_htmlentities__join-concatenation_simple_quote.php
            │   ├── CWE_89__array-GET__func_intval__multiple_select-sprintf_%u.php
            │   ├── CWE_89__array-GET__func_intval__select_from_where-concatenation.php
            │   ├── CWE_89__backticks__CAST-cast_int_sort_of__multiple_AS-concatenation.php
            │   ├── CWE_89__backticks__func_FILTER-CLEANING-number_float_filter__multiple_select-concatenation_simple_quote.php
            │   ├── CWE_89__backticks__func_FILTER-CLEANING-number_int_filter__select_from_where-sprintf_%d.php
            │   ├── CWE_89__backticks__func_FILTER-VALIDATION-number_int_filter__multiple_AS-concatenation.php
            │   ├── CWE_89__backticks__func_floatval__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__backticks__func_htmlspecialchars__join-concatenation_simple_quote.php
            │   ├── CWE_89__backticks__func_mysql_real_escape_string__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__backticks__func_preg_match-no_filtering__join-concatenation_simple_quote.php
            │   ├── CWE_89__backticks__func_preg_match-only_numbers__select_from_where-sprintf_%u_simple_quote.php
            │   ├── CWE_89__backticks__whitelist_using_array__join-interpretation_simple_quote.php
            │   ├── CWE_89__exec__CAST-cast_int__multiple_AS-sprintf_%u.php
            │   ├── CWE_89__exec__CAST-func_settype_int__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__exec__func_FILTER-CLEANING-email_filter__select_from-concatenation_simple_quote.php
            │   ├── CWE_89__exec__func_FILTER-CLEANING-number_int_filter__select_from_where-sprintf_%u_simple_quote.php
            │   ├── CWE_89__exec__func_floatval__multiple_select-sprintf_%u.php
            │   ├── CWE_89__exec__func_intval__select_from_where-concatenation.php
            │   ├── CWE_89__exec__func_mysql_real_escape_string__multiple_select-sprintf_%d.php
            │   ├── CWE_89__exec__no_sanitizing__multiple_AS-concatenation_simple_quote.php
            │   ├── CWE_89__exec__no_sanitizing__multiple_select-interpretation_simple_quote.php
            │   ├── CWE_89__exec__whitelist_using_array__multiple_AS-sprintf_%u_simple_quote.php
            │   ├── CWE_89__fopen__CAST-cast_float__multiple_select-concatenation.php
            │   ├── CWE_89__fopen__CAST-cast_int_sort_of2__select_from_where-sprintf_%u_simple_quote.php
            │   ├── CWE_89__fopen__func_FILTER-VALIDATION-number_float_filter__multiple_AS-concatenation.php
            │   ├── CWE_89__fopen__func_FILTER-VALIDATION-number_float_filter__multiple_select-sprintf_%s_simple_quote.php
            │   ├── CWE_89__fopen__func_preg_replace__select_from-sprintf_%s_simple_quote.php
            │   ├── CWE_89__fopen__ternary_white_list__multiple_AS-sprintf_%u.php
            │   ├── CWE_89__fopen__ternary_white_list__select_from_where-concatenation.php
            │   ├── CWE_89__fopen__whitelist_using_array__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__object-Array__CAST-cast_int__multiple_select-concatenation_simple_quote.php
            │   ├── CWE_89__object-Array__CAST-cast_int__multiple_select-sprintf_%d.php
            │   ├── CWE_89__object-Array__CAST-cast_int_sort_of__multiple_AS-sprintf_%d.php
            │   ├── CWE_89__object-Array__CAST-cast_int_sort_of__select_from_where-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-Array__CAST-func_settype_float__multiple_AS-sprintf_%u.php
            │   ├── CWE_89__object-Array__CAST-func_settype_float__select_from_where-sprintf_%u_simple_quote.php
            │   ├── CWE_89__object-Array__func_FILTER-CLEANING-magic_quotes_filter__join-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-Array__func_FILTER-CLEANING-number_float_filter__multiple_AS-sprintf_%u.php
            │   ├── CWE_89__object-Array__func_floatval__multiple_AS-sprintf_%d_simple_quote.php
            │   ├── CWE_89__object-Array__func_floatval__multiple_select-concatenation_simple_quote.php
            │   ├── CWE_89__object-Array__func_floatval__multiple_select-sprintf_%d.php
            │   ├── CWE_89__object-Array__func_floatval__select_from_where-interpretation.php
            │   ├── CWE_89__object-Array__func_intval__multiple_AS-sprintf_%u_simple_quote.php
            │   ├── CWE_89__object-classicGet__CAST-cast_float__multiple_AS-interpretation.php
            │   ├── CWE_89__object-classicGet__CAST-cast_int__select_from_where-sprintf_%u.php
            │   ├── CWE_89__object-classicGet__CAST-func_settype_float__multiple_AS-interpretation.php
            │   ├── CWE_89__object-classicGet__CAST-func_settype_int__multiple_AS-sprintf_%u_simple_quote.php
            │   ├── CWE_89__object-classicGet__CAST-func_settype_int__multiple_select-concatenation.php
            │   ├── CWE_89__object-classicGet__CAST-func_settype_int__select_from_where-sprintf_%d.php
            │   ├── CWE_89__object-classicGet__func_FILTER-CLEANING-number_int_filter__multiple_select-concatenation.php
            │   ├── CWE_89__object-classicGet__func_FILTER-VALIDATION-number_float_filter__multiple_select-concatenation_simple_quote.php
            │   ├── CWE_89__object-classicGet__func_FILTER-VALIDATION-number_float_filter__multiple_select-interpretation.php
            │   ├── CWE_89__object-classicGet__func_floatval__multiple_select-sprintf_%d.php
            │   ├── CWE_89__object-classicGet__func_htmlentities__join-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-classicGet__func_preg_match-only_numbers__multiple_AS-interpretation.php
            │   ├── CWE_89__object-classicGet__func_preg_match-only_numbers__multiple_select-interpretation.php
            │   ├── CWE_89__object-classicGet__ternary_white_list__join-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-classicGet__ternary_white_list__select_from-interpretation_simple_quote.php
            │   ├── CWE_89__object-directGet__CAST-cast_float_sort_of__select_from_where-concatenation.php
            │   ├── CWE_89__object-directGet__CAST-cast_int__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__object-directGet__CAST-cast_int_sort_of2__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__object-directGet__CAST-cast_int_sort_of__multiple_select-sprintf_%u.php
            │   ├── CWE_89__object-directGet__func_FILTER-CLEANING-email_filter__join-interpretation_simple_quote.php
            │   ├── CWE_89__object-directGet__func_FILTER-CLEANING-number_float_filter__select_from_where-concatenation.php
            │   ├── CWE_89__object-directGet__func_FILTER-VALIDATION-number_int_filter__multiple_select-interpretation_simple_quote.php
            │   ├── CWE_89__object-directGet__func_mysql_real_escape_string__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__object-directGet__func_mysql_real_escape_string__select_from_where-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-directGet__no_sanitizing__select_from-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-indexArray__CAST-cast_float_sort_of__multiple_select-interpretation_simple_quote.php
            │   ├── CWE_89__object-indexArray__CAST-cast_int__multiple_select-sprintf_%d_simple_quote.php
            │   ├── CWE_89__object-indexArray__CAST-cast_int_sort_of__multiple_select-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-indexArray__CAST-func_settype_float__multiple_AS-interpretation_simple_quote.php
            │   ├── CWE_89__object-indexArray__func_FILTER-CLEANING-email_filter__select_from-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-indexArray__func_FILTER-VALIDATION-number_float_filter__select_from_where-sprintf_%s_simple_quote.php
            │   ├── CWE_89__object-indexArray__func_preg_match-no_filtering__join-concatenation_simple_quote.php
            │   ├── CWE_89__object-indexArray__func_preg_match-only_numbers__multiple_select-sprintf_%d_simple_quote.php
            │   ├── CWE_89__object-indexArray__whitelist_using_array__join-interpretation_simple_quote.php
            │   ├── CWE_89__object-indexArray__whitelist_using_array__select_from-interpretation_simple_quote.php
            │   ├── CWE_89__popen__CAST-cast_float__multiple_select-sprintf_%d_simple_quote.php
            │   ├── CWE_89__popen__CAST-cast_float__select_from_where-sprintf_%d_simple_quote.php
            │   ├── CWE_89__popen__CAST-func_settype_int__multiple_select-concatenation_simple_quote.php
            │   ├── CWE_89__popen__func_FILTER-CLEANING-email_filter__select_from-concatenation_simple_quote.php
            │   ├── CWE_89__popen__func_FILTER-CLEANING-number_float_filter__select_from_where-interpretation.php
            │   ├── CWE_89__popen__func_floatval__multiple_select-concatenation.php
            │   ├── CWE_89__popen__func_intval__select_from_where-concatenation.php
            │   ├── CWE_89__popen__func_mysql_real_escape_string__multiple_AS-sprintf_%d.php
            │   ├── CWE_89__popen__func_preg_match-no_filtering__join-sprintf_%s_simple_quote.php
            │   ├── CWE_89__popen__ternary_white_list__multiple_AS-concatenation_simple_quote.php
            │   ├── CWE_89__popen__ternary_white_list__multiple_select-sprintf_%u.php
            │   ├── CWE_89__proc_open__CAST-cast_float__multiple_select-concatenation.php
            │   ├── CWE_89__proc_open__CAST-cast_float_sort_of__multiple_select-sprintf_%s_simple_quote.php
            │   ├── CWE_89__proc_open__CAST-cast_int__select_from_where-interpretation.php
            │   ├── CWE_89__proc_open__CAST-cast_int_sort_of2__multiple_select-sprintf_%d.php
            │   ├── CWE_89__proc_open__CAST-cast_int_sort_of__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__proc_open__func_FILTER-VALIDATION-number_float_filter__select_from_where-interpretation.php
            │   ├── CWE_89__proc_open__func_intval__select_from_where-concatenation.php
            │   ├── CWE_89__proc_open__func_intval__select_from_where-sprintf_%d_simple_quote.php
            │   ├── CWE_89__proc_open__func_preg_match-only_numbers__select_from_where-concatenation.php
            │   ├── CWE_89__proc_open__whitelist_using_array__multiple_AS-sprintf_%d_simple_quote.php
            │   ├── CWE_89__proc_open__whitelist_using_array__select_from_where-sprintf_%d.php
            │   ├── CWE_89__shell_exec__CAST-cast_float_sort_of__multiple_select-sprintf_%d.php
            │   ├── CWE_89__shell_exec__CAST-cast_int_sort_of2__multiple_AS-sprintf_%u.php
            │   ├── CWE_89__shell_exec__CAST-cast_int_sort_of__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_89__shell_exec__func_FILTER-CLEANING-number_float_filter__multiple_AS-interpretation.php
            │   ├── CWE_89__shell_exec__func_FILTER-CLEANING-number_int_filter__multiple_select-sprintf_%d.php
            │   ├── CWE_89__shell_exec__func_FILTER-VALIDATION-number_float_filter__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__shell_exec__func_FILTER-VALIDATION-number_int_filter__multiple_select-sprintf_%u.php
            │   ├── CWE_89__shell_exec__func_intval__multiple_AS-sprintf_%d_simple_quote.php
            │   ├── CWE_89__shell_exec__func_mysql_real_escape_string__multiple_select-interpretation.php
            │   ├── CWE_89__shell_exec__no_sanitizing__multiple_AS-concatenation_simple_quote.php
            │   ├── CWE_89__shell_exec__no_sanitizing__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__shell_exec__ternary_white_list__select_from_where-sprintf_%d_simple_quote.php
            │   ├── CWE_89__shell_exec__whitelist_using_array__multiple_select-sprintf_%d.php
            │   ├── CWE_89__system__CAST-cast_float__multiple_AS-interpretation_simple_quote.php
            │   ├── CWE_89__system__CAST-func_settype_float__multiple_select-sprintf_%u_simple_quote.php
            │   ├── CWE_89__system__CAST-func_settype_float__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_89__system__func_FILTER-CLEANING-email_filter__select_from-sprintf_%s_simple_quote.php
            │   ├── CWE_89__system__func_FILTER-CLEANING-magic_quotes_filter__select_from-concatenation_simple_quote.php
            │   ├── CWE_89__system__func_FILTER-VALIDATION-number_float_filter__multiple_AS-sprintf_%d.php
            │   ├── CWE_89__system__func_preg_match-no_filtering__join-interpretation_simple_quote.php
            │   ├── CWE_89__system__func_preg_match-only_numbers__select_from_where-sprintf_%u_simple_quote.php
            │   ├── CWE_89__system__func_preg_replace2__join-concatenation_simple_quote.php
            │   ├── CWE_89__system__no_sanitizing__multiple_AS-concatenation.php
            │   ├── CWE_89__system__ternary_white_list__multiple_select-sprintf_%d_simple_quote.php
            │   ├── CWE_89__system__ternary_white_list__multiple_select-sprintf_%u.php
            │   ├── CWE_89__system__whitelist_using_array__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__system__whitelist_using_array__multiple_select-sprintf_%d_simple_quote.php
            │   ├── CWE_89__unserialize__CAST-cast_float_sort_of__multiple_AS-sprintf_%u.php
            │   ├── CWE_89__unserialize__CAST-cast_int__multiple_AS-interpretation.php
            │   ├── CWE_89__unserialize__CAST-cast_int__multiple_AS-sprintf_%u_simple_quote.php
            │   ├── CWE_89__unserialize__CAST-func_settype_float__multiple_select-concatenation.php
            │   ├── CWE_89__unserialize__func_FILTER-CLEANING-number_float_filter__select_from_where-sprintf_%d.php
            │   ├── CWE_89__unserialize__func_FILTER-CLEANING-number_int_filter__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__unserialize__func_FILTER-CLEANING-number_int_filter__select_from_where-concatenation_simple_quote.php
            │   ├── CWE_89__unserialize__func_FILTER-VALIDATION-number_int_filter__multiple_select-interpretation.php
            │   ├── CWE_89__unserialize__func_floatval__multiple_AS-sprintf_%s_simple_quote.php
            │   ├── CWE_89__unserialize__func_intval__multiple_select-sprintf_%u.php
            │   ├── CWE_89__unserialize__func_intval__select_from_where-sprintf_%u.php
            │   ├── CWE_89__unserialize__func_mysql_real_escape_string__multiple_AS-concatenation.php
            │   ├── CWE_89__unserialize__func_mysql_real_escape_string__multiple_select-concatenation.php
            │   ├── CWE_89__unserialize__func_preg_match-only_letters__select_from-interpretation_simple_quote.php
            │   ├── CWE_89__unserialize__func_preg_match-only_numbers__multiple_select-concatenation.php
            │   ├── CWE_89__unserialize__no_sanitizing__select_from_where-concatenation_simple_quote.php
            │   ├── CWE_89__unserialize__no_sanitizing__select_from_where-interpretation_simple_quote.php
            │   ├── CWE_89__unserialize__ternary_white_list__select_from_where-sprintf_%u.php
            │   ├── CWE_89__unserialize__whitelist_using_array__multiple_select-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__func_FILTER-CLEANING-email_filter__name-concatenation_simple_quote.php
            │   ├── CWE_90__GET__func_FILTER-CLEANING-email_filter__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__GET__func_FILTER-CLEANING-special_chars_filter__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__GET__func_FILTER-CLEANING-special_chars_filter__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__GET__func_addslashes__name-interpretation_simple_quote.php
            │   ├── CWE_90__GET__func_addslashes__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__func_addslashes__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__func_htmlentities__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__func_htmlentities__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__GET__func_htmlentities__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__GET__func_htmlentities__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__func_htmlspecialchars__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__GET__func_pg_escape_literal__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__func_preg_match-letters_numbers__name-concatenation_simple_quote.php
            │   ├── CWE_90__GET__func_preg_match-letters_numbers__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__func_preg_match-letters_numbers__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__func_preg_match-only_letters__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__GET__func_preg_replace_ldap_char_white_list__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__GET__func_preg_replace_ldap_char_white_list__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__no_sanitizing__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__GET__whitelist_using_array__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__whitelist_using_array__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__GET__whitelist_using_array__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__GET__whitelist_using_array__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__POST__func_FILTER-CLEANING-full_special_chars_filter__name-interpretation_simple_quote.php
            │   ├── CWE_90__POST__func_FILTER-CLEANING-full_special_chars_filter__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__POST__func_FILTER-CLEANING-full_special_chars_filter__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__POST__func_FILTER-CLEANING-special_chars_filter__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__POST__func_addslashes__name-interpretation_simple_quote.php
            │   ├── CWE_90__POST__func_addslashes__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__POST__func_htmlentities__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__POST__func_pg_escape_literal__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__POST__func_preg_match-only_letters__name-interpretation_simple_quote.php
            │   ├── CWE_90__POST__func_preg_match-only_letters__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__POST__func_preg_match-only_letters__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__POST__func_preg_replace_ldap_char_white_list__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__POST__no_sanitizing__name-interpretation_simple_quote.php
            │   ├── CWE_90__POST__no_sanitizing__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__POST__no_sanitizing__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__POST__no_sanitizing__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__POST__ternary_white_list__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__POST__whitelist_using_array__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__SESSION__func_FILTER-CLEANING-full_special_chars_filter__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__SESSION__func_FILTER-CLEANING-special_chars_filter__name-concatenation_simple_quote.php
            │   ├── CWE_90__SESSION__func_pg_escape_literal__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__SESSION__func_preg_match-letters_numbers__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__SESSION__func_preg_match-only_letters__name-concatenation_simple_quote.php
            │   ├── CWE_90__SESSION__func_preg_replace_ldap_char_white_list__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__SESSION__func_preg_replace_ldap_char_white_list__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__SESSION__func_preg_replace_ldap_char_white_list__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__SESSION__func_str_replace_ldap_char_black_list__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__SESSION__ternary_white_list__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__SESSION__ternary_white_list__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__SESSION__whitelist_using_array__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__SESSION__whitelist_using_array__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__array-GET__func_FILTER-CLEANING-full_special_chars_filter__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__array-GET__func_FILTER-CLEANING-special_chars_filter__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__array-GET__func_preg_match-letters_numbers__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__array-GET__func_str_replace_ldap_char_black_list__name-interpretation_simple_quote.php
            │   ├── CWE_90__array-GET__ternary_white_list__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__array-GET__ternary_white_list__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__array-GET__ternary_white_list__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__array-GET__ternary_white_list__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__backticks__func_pg_escape_literal__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__backticks__func_preg_match-letters_numbers__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__backticks__ternary_white_list__name-interpretation_simple_quote.php
            │   ├── CWE_90__backticks__ternary_white_list__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__backticks__ternary_white_list__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__backticks__ternary_white_list__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__exec__func_FILTER-CLEANING-full_special_chars_filter__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__exec__func_FILTER-CLEANING-full_special_chars_filter__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__exec__func_FILTER-CLEANING-special_chars_filter__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__exec__func_FILTER-CLEANING-special_chars_filter__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__exec__func_FILTER-CLEANING-special_chars_filter__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__exec__func_pg_escape_literal__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__exec__func_pg_escape_literal__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__exec__func_preg_match-letters_numbers__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__exec__func_preg_match-letters_numbers__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__exec__func_preg_match-letters_numbers__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__exec__func_preg_match-only_letters__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__exec__func_preg_replace_ldap_char_white_list__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__exec__ternary_white_list__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__exec__whitelist_using_array__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__fopen__func_FILTER-CLEANING-special_chars_filter__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__fopen__func_FILTER-CLEANING-special_chars_filter__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__fopen__func_addslashes__name-interpretation_simple_quote.php
            │   ├── CWE_90__fopen__func_addslashes__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__fopen__func_addslashes__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__fopen__func_addslashes__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__fopen__func_htmlentities__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__fopen__func_htmlspecialchars__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__fopen__func_htmlspecialchars__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__fopen__func_pg_escape_literal__name-concatenation_simple_quote.php
            │   ├── CWE_90__fopen__func_preg_match-letters_numbers__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__fopen__func_preg_match-only_letters__name-concatenation_simple_quote.php
            │   ├── CWE_90__fopen__func_preg_match-only_letters__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__fopen__func_preg_replace_ldap_char_white_list__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__fopen__func_preg_replace_ldap_char_white_list__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__fopen__no_sanitizing__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__fopen__whitelist_using_array__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-Array__func_FILTER-CLEANING-email_filter__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-Array__func_FILTER-CLEANING-email_filter__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-Array__func_FILTER-CLEANING-email_filter__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__object-Array__func_FILTER-CLEANING-special_chars_filter__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__object-Array__func_addslashes__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__object-Array__func_htmlentities__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__object-Array__func_htmlentities__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__object-Array__func_pg_escape_literal__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-Array__func_pg_escape_literal__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__object-Array__func_preg_match-only_letters__name-interpretation_simple_quote.php
            │   ├── CWE_90__object-Array__func_preg_match-only_letters__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-Array__func_preg_match-only_letters__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-Array__func_preg_match-only_letters__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-Array__func_preg_replace_ldap_char_white_list__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__object-Array__whitelist_using_array__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_FILTER-CLEANING-email_filter__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_FILTER-CLEANING-full_special_chars_filter__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_FILTER-CLEANING-special_chars_filter__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_addslashes__name-concatenation_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_addslashes__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_preg_match-letters_numbers__name-interpretation_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_preg_match-letters_numbers__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_preg_match-no_filtering__name-concatenation_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_preg_match-no_filtering__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-classicGet__func_preg_replace_ldap_char_white_list__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__object-classicGet__ternary_white_list__name-interpretation_simple_quote.php
            │   ├── CWE_90__object-classicGet__ternary_white_list__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__object-classicGet__whitelist_using_array__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__object-classicGet__whitelist_using_array__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__func_FILTER-CLEANING-email_filter__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_FILTER-CLEANING-email_filter__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_FILTER-CLEANING-full_special_chars_filter__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_FILTER-CLEANING-full_special_chars_filter__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_FILTER-CLEANING-special_chars_filter__name-concatenation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_addslashes__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__func_htmlspecialchars__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__func_htmlspecialchars__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_htmlspecialchars__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_htmlspecialchars__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__func_pg_escape_literal__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__func_pg_escape_literal__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_preg_match-letters_numbers__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_preg_match-no_filtering__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_preg_match-no_filtering__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__object-directGet__func_preg_match-no_filtering__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__no_sanitizing__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__no_sanitizing__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__ternary_white_list__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-directGet__ternary_white_list__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_FILTER-CLEANING-full_special_chars_filter__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_FILTER-CLEANING-special_chars_filter__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_htmlentities__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_htmlentities__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_htmlentities__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_htmlentities__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_htmlspecialchars__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_htmlspecialchars__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_pg_escape_literal__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_preg_match-letters_numbers__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__object-indexArray__func_preg_replace_ldap_char_white_list__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__object-indexArray__no_sanitizing__name-concatenation_simple_quote.php
            │   ├── CWE_90__object-indexArray__ternary_white_list__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__popen__func_FILTER-CLEANING-email_filter__name-concatenation_simple_quote.php
            │   ├── CWE_90__popen__func_FILTER-CLEANING-email_filter__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__popen__func_FILTER-CLEANING-full_special_chars_filter__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__popen__func_htmlspecialchars__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__popen__func_htmlspecialchars__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__popen__func_htmlspecialchars__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__popen__func_preg_match-letters_numbers__name-concatenation_simple_quote.php
            │   ├── CWE_90__popen__func_preg_match-letters_numbers__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__popen__func_preg_match-letters_numbers__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__popen__func_preg_match-letters_numbers__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__popen__func_preg_match-letters_numbers__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__popen__func_preg_match-no_filtering__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__popen__func_preg_match-only_letters__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__popen__func_preg_match-only_letters__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__popen__no_sanitizing__name-interpretation_simple_quote.php
            │   ├── CWE_90__popen__no_sanitizing__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__popen__no_sanitizing__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__popen__whitelist_using_array__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__popen__whitelist_using_array__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__popen__whitelist_using_array__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__popen__whitelist_using_array__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__proc_open__func_FILTER-CLEANING-email_filter__name-concatenation_simple_quote.php
            │   ├── CWE_90__proc_open__func_FILTER-CLEANING-full_special_chars_filter__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__proc_open__func_FILTER-CLEANING-special_chars_filter__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__proc_open__func_FILTER-CLEANING-special_chars_filter__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__proc_open__func_addslashes__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__proc_open__func_htmlentities__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__proc_open__func_htmlentities__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__proc_open__func_pg_escape_literal__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__proc_open__func_pg_escape_literal__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__proc_open__func_preg_match-letters_numbers__name-interpretation_simple_quote.php
            │   ├── CWE_90__proc_open__func_preg_match-no_filtering__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__proc_open__func_preg_replace_ldap_char_white_list__name-concatenation_simple_quote.php
            │   ├── CWE_90__proc_open__func_preg_replace_ldap_char_white_list__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__proc_open__no_sanitizing__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__proc_open__no_sanitizing__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__proc_open__ternary_white_list__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__shell_exec__func_FILTER-CLEANING-full_special_chars_filter__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__func_FILTER-CLEANING-special_chars_filter__name-concatenation_simple_quote.php
            │   ├── CWE_90__shell_exec__func_FILTER-CLEANING-special_chars_filter__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__func_FILTER-CLEANING-special_chars_filter__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__shell_exec__func_addslashes__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__func_addslashes__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__func_htmlentities__name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__func_htmlentities__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__shell_exec__func_preg_match-letters_numbers__name-interpretation_simple_quote.php
            │   ├── CWE_90__shell_exec__func_preg_match-letters_numbers__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__func_preg_match-no_filtering__name-concatenation_simple_quote.php
            │   ├── CWE_90__shell_exec__func_preg_match-only_letters__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__func_preg_match-only_letters__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__func_preg_replace_ldap_char_white_list__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__shell_exec__no_sanitizing__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__shell_exec__ternary_white_list__name-concatenation_simple_quote.php
            │   ├── CWE_90__shell_exec__ternary_white_list__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__shell_exec__ternary_white_list__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__shell_exec__whitelist_using_array__name-concatenation_simple_quote.php
            │   ├── CWE_90__shell_exec__whitelist_using_array__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__system__func_FILTER-CLEANING-full_special_chars_filter__name-interpretation_simple_quote.php
            │   ├── CWE_90__system__func_FILTER-CLEANING-full_special_chars_filter__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__system__func_FILTER-CLEANING-full_special_chars_filter__userByMail-concatenation_simple_quote.php
            │   ├── CWE_90__system__func_FILTER-CLEANING-special_chars_filter__name-concatenation_simple_quote.php
            │   ├── CWE_90__system__func_addslashes__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__system__func_htmlentities__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__system__func_htmlspecialchars__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__system__func_htmlspecialchars__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__system__func_pg_escape_literal__name-concatenation_simple_quote.php
            │   ├── CWE_90__system__func_pg_escape_literal__userByCN-sprintf_%s_simple_quote.php
            │   ├── CWE_90__system__func_preg_match-letters_numbers__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__system__func_preg_match-no_filtering__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__system__no_sanitizing__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__system__ternary_white_list__name-concatenation_simple_quote.php
            │   ├── CWE_90__system__ternary_white_list__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__system__ternary_white_list__userByMail-sprintf_%s_simple_quote.php
            │   ├── CWE_90__unserialize__func_FILTER-CLEANING-email_filter__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__unserialize__func_FILTER-CLEANING-magic_quotes_filter__name-concatenation_simple_quote.php
            │   ├── CWE_90__unserialize__func_addslashes__userByCN-concatenation_simple_quote.php
            │   ├── CWE_90__unserialize__func_htmlspecialchars__name-interpretation_simple_quote.php
            │   ├── CWE_90__unserialize__func_htmlspecialchars__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__unserialize__func_htmlspecialchars__userByCN-interpretation_simple_quote.php
            │   ├── CWE_90__unserialize__func_pg_escape_string__not_name-interpretation_simple_quote.php
            │   ├── CWE_90__unserialize__func_preg_match-no_filtering__not_name-sprintf_%s_simple_quote.php
            │   ├── CWE_90__unserialize__func_preg_replace2__not_name-concatenation_simple_quote.php
            │   ├── CWE_90__unserialize__func_preg_replace2__userByMail-interpretation_simple_quote.php
            │   ├── CWE_90__unserialize__func_preg_replace__userByMail-concatenation_simple_quote.php
            │   ├── CWE_91__GET__CAST-cast_float__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__GET__CAST-cast_int_sort_of2__ID_test-interpretation.php
            │   ├── CWE_91__GET__CAST-cast_int_sort_of__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__GET__func_FILTER-CLEANING-number_float_filter__ID_at-sprintf_%u.php
            │   ├── CWE_91__GET__func_FILTER-VALIDATION-number_float_filter__ID_test-sprintf_%d_simple_quote.php
            │   ├── CWE_91__GET__func_FILTER-VALIDATION-number_int_filter__ID_test-concatenation_simple_quote.php
            │   ├── CWE_91__GET__func_intval__ID_test-concatenation.php
            │   ├── CWE_91__GET__func_preg_match-letters_numbers__username-sprintf_%s_simple_quote.php
            │   ├── CWE_91__GET__ternary_white_list__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__POST__CAST-cast_float__ID_at-sprintf_%u.php
            │   ├── CWE_91__POST__CAST-cast_float_sort_of__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__POST__func_FILTER-CLEANING-number_int_filter__ID_test-concatenation_simple_quote.php
            │   ├── CWE_91__POST__func_floatval__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__POST__func_preg_match-only_letters__username_text-concatenation_simple_quote.php
            │   ├── CWE_91__POST__func_preg_match-only_numbers__ID_test-concatenation_simple_quote.php
            │   ├── CWE_91__POST__func_preg_match-only_numbers__ID_test-interpretation.php
            │   ├── CWE_91__POST__ternary_white_list__username_at-interpretation_simple_quote.php
            │   ├── CWE_91__POST__whitelist_using_array__ID_test-concatenation.php
            │   ├── CWE_91__SESSION__CAST-cast_int_sort_of2__ID_test-concatenation_simple_quote.php
            │   ├── CWE_91__SESSION__CAST-func_settype_int__ID_test-interpretation.php
            │   ├── CWE_91__SESSION__func_floatval__ID_test-sprintf_%d_simple_quote.php
            │   ├── CWE_91__SESSION__func_preg_replace2__username_text-interpretation_simple_quote.php
            │   ├── CWE_91__SESSION__func_preg_replace__data-concatenation_simple_quote.php
            │   ├── CWE_91__SESSION__func_preg_replace__username-concatenation_simple_quote.php
            │   ├── CWE_91__SESSION__func_preg_replace__username-interpretation_simple_quote.php
            │   ├── CWE_91__SESSION__func_preg_replace__username-sprintf_%s_simple_quote.php
            │   ├── CWE_91__SESSION__object-func_mysql_real_escape_string__username_at-interpretation_simple_quote.php
            │   ├── CWE_91__SESSION__whitelist_using_array__username-sprintf_%s_simple_quote.php
            │   ├── CWE_91__array-GET__CAST-cast_int_sort_of2__ID_at-sprintf_%u.php
            │   ├── CWE_91__array-GET__func_FILTER-CLEANING-number_float_filter__ID_test-interpretation.php
            │   ├── CWE_91__array-GET__func_FILTER-CLEANING-number_float_filter__ID_test-sprintf_%d_simple_quote.php
            │   ├── CWE_91__array-GET__func_FILTER-CLEANING-number_int_filter__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__array-GET__func_FILTER-VALIDATION-number_float_filter__ID_at-sprintf_%u_simple_quote.php
            │   ├── CWE_91__array-GET__func_floatval__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__array-GET__func_mysql_real_escape_string__ID_at-sprintf_%u.php
            │   ├── CWE_91__array-GET__func_preg_match-only_letters__data-interpretation_simple_quote.php
            │   ├── CWE_91__array-GET__object-func_mysql_real_escape_string__username_text-sprintf_%s_simple_quote.php
            │   ├── CWE_91__backticks__CAST-func_settype_int__ID_test-sprintf_%d.php
            │   ├── CWE_91__backticks__func_FILTER-VALIDATION-number_int_filter__ID_test-interpretation.php
            │   ├── CWE_91__backticks__ternary_white_list__username-sprintf_%s_simple_quote.php
            │   ├── CWE_91__exec__func_FILTER-VALIDATION-number_int_filter__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__exec__func_htmlspecialchars__username-concatenation_simple_quote.php
            │   ├── CWE_91__fopen__CAST-cast_float_sort_of__ID_test-sprintf_%d.php
            │   ├── CWE_91__fopen__CAST-cast_int__ID_test-sprintf_%d_simple_quote.php
            │   ├── CWE_91__fopen__func_FILTER-CLEANING-number_float_filter__ID_at-sprintf_%u_simple_quote.php
            │   ├── CWE_91__fopen__func_floatval__ID_at-sprintf_%u.php
            │   ├── CWE_91__fopen__ternary_white_list__ID_test-concatenation_simple_quote.php
            │   ├── CWE_91__fopen__ternary_white_list__username-sprintf_%s_simple_quote.php
            │   ├── CWE_91__fopen__ternary_white_list__username_at-concatenation_simple_quote.php
            │   ├── CWE_91__fopen__whitelist_using_array__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__object-Array__CAST-cast_int__ID_test-concatenation_simple_quote.php
            │   ├── CWE_91__object-Array__CAST-cast_int__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__object-Array__CAST-cast_int__ID_test-sprintf_%d_simple_quote.php
            │   ├── CWE_91__object-Array__CAST-cast_int_sort_of__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__object-Array__func_FILTER-CLEANING-number_int_filter__ID_test-sprintf_%d.php
            │   ├── CWE_91__object-Array__func_intval__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__object-Array__func_preg_match-letters_numbers__data-interpretation_simple_quote.php
            │   ├── CWE_91__object-classicGet__CAST-cast_float__ID_test-interpretation.php
            │   ├── CWE_91__object-classicGet__func_FILTER-VALIDATION-number_float_filter__ID_test-concatenation_simple_quote.php
            │   ├── CWE_91__object-classicGet__func_FILTER-VALIDATION-number_int_filter__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__object-directGet__CAST-cast_int_sort_of__ID_test-concatenation.php
            │   ├── CWE_91__object-directGet__func_FILTER-CLEANING-number_float_filter__ID_test-concatenation.php
            │   ├── CWE_91__object-directGet__func_preg_match-only_letters__username_text-interpretation_simple_quote.php
            │   ├── CWE_91__object-directGet__whitelist_using_array__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__object-indexArray__CAST-func_settype_float__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__object-indexArray__CAST-func_settype_float__ID_test-sprintf_%d.php
            │   ├── CWE_91__object-indexArray__func_FILTER-VALIDATION-number_int_filter__ID_test-sprintf_%d.php
            │   ├── CWE_91__object-indexArray__func_preg_match-only_letters__username_text-interpretation_simple_quote.php
            │   ├── CWE_91__object-indexArray__func_preg_match-only_numbers__ID_test-concatenation.php
            │   ├── CWE_91__object-indexArray__ternary_white_list__data-sprintf_%s_simple_quote.php
            │   ├── CWE_91__object-indexArray__ternary_white_list__username_text-sprintf_%s_simple_quote.php
            │   ├── CWE_91__popen__func_FILTER-CLEANING-number_int_filter__ID_test-sprintf_%d_simple_quote.php
            │   ├── CWE_91__popen__func_FILTER-VALIDATION-number_int_filter__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__popen__whitelist_using_array__username_text-concatenation_simple_quote.php
            │   ├── CWE_91__proc_open__CAST-cast_int_sort_of__ID_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__proc_open__func_htmlspecialchars__username_text-interpretation_simple_quote.php
            │   ├── CWE_91__proc_open__func_intval__ID_at-sprintf_%u.php
            │   ├── CWE_91__proc_open__func_preg_match-only_letters__username_at-concatenation_simple_quote.php
            │   ├── CWE_91__proc_open__whitelist_using_array__data-concatenation_simple_quote.php
            │   ├── CWE_91__shell_exec__func_FILTER-CLEANING-number_int_filter__ID_at-sprintf_%u.php
            │   ├── CWE_91__shell_exec__func_preg_match-only_letters__username_text-interpretation_simple_quote.php
            │   ├── CWE_91__system__CAST-cast_int_sort_of2__ID_test-interpretation_simple_quote.php
            │   ├── CWE_91__system__CAST-cast_int_sort_of__ID_at-sprintf_%u.php
            │   ├── CWE_91__system__func_FILTER-CLEANING-number_int_filter__ID_test-sprintf_%d.php
            │   ├── CWE_91__system__func_FILTER-VALIDATION-number_float_filter__ID_at-sprintf_%u_simple_quote.php
            │   ├── CWE_91__system__func_FILTER-VALIDATION-number_int_filter__ID_at-sprintf_%u.php
            │   ├── CWE_91__system__func_htmlentities__username_at-sprintf_%s_simple_quote.php
            │   ├── CWE_91__system__func_preg_match-letters_numbers__username_text-sprintf_%s_simple_quote.php
            │   └── CWE_91__system__func_preg_match-only_letters__username-sprintf_%s_simple_quote.php
        └── testvulntestsuite.php


/.devcontainer/devcontainer.json:
--------------------------------------------------------------------------------
1 | {
2 | 	"name": "progpilot-linux",
3 | 	"build": {
4 | 		"dockerfile": "Dockerfile"
5 | 	},
6 | 	"remoteUser": "developer"
7 | }
8 | 


--------------------------------------------------------------------------------
/.gitattributes:
--------------------------------------------------------------------------------
1 | # All files are checked into the repo with LF
2 | * text=auto
3 | 
4 | # These files are checked out using LF locally
5 | *.* eol=lf


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
 1 | articles/
 2 | builds/*.phar
 3 | projects/tests/vendor
 4 | projects/tests/composer.lock
 5 | projects/tests/.phpunit.result.cache
 6 | projects/example/vendor
 7 | projects/example/composer.lock
 8 | projects/example_config/vendor
 9 | projects/example_config/composer.lock
10 | projects/phar/vendor
11 | projects/phar/composer.lock
12 | vendor/
13 | composer.lock
14 | indent.sh
15 | .DS_Store


--------------------------------------------------------------------------------
/docs/customcallgraph1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/docs/customcallgraph1.png


--------------------------------------------------------------------------------
/grumphp.yml:
--------------------------------------------------------------------------------
1 | grumphp:
2 |   process_timeout: 120
3 |   tasks:
4 |       phpcs:
5 |         standard: PSR2
6 |         metadata:
7 |           priority: 300
8 |         ignore_patterns: ["*/projects/tests/*"]
9 | 


--------------------------------------------------------------------------------
/package/src/progpilot/Inputs/MyCustomVariable.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /*
 4 |  * This file is part of ProgPilot, a static analyzer for security
 5 |  *
 6 |  * @copyright 2017 Eric Therond. All rights reserved
 7 |  * @license MIT See LICENSE at the root of the project for more info
 8 |  */
 9 | 
10 | 
11 | namespace progpilot\Inputs;
12 | 
13 | class MyCustomVariable extends MySpecify
14 | {
15 |     public function __construct($name, $language)
16 |     {
17 |         parent::__construct($name, $language);
18 |     }
19 | }
20 | 


--------------------------------------------------------------------------------
/package/src/progpilot/Outputs/MyResult.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /*
 4 |  * This file is part of ProgPilot, a static analyzer for security
 5 |  *
 6 |  * @copyright 2017 Eric Therond. All rights reserved
 7 |  * @license MIT See LICENSE at the root of the project for more info
 8 |  */
 9 | 
10 | 
11 | namespace progpilot\Outputs;
12 | 
13 | class MyResult
14 | {
15 |     public function __construct()
16 |     {
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/codeigniter/validators.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "validators": [
 3 |         {"name": "xss_clean", "instanceof": "SecurityHelperCodeIgniter", "language": "php", "parameters": 
 4 |             [
 5 |                 {"id": 1, "conditions": "valid"},
 6 |                 {"id": 2, "conditions": "equals", "values": 
 7 |                     [
 8 |                         {"value" : "true"}
 9 |                     ]}
10 |             ]
11 |         }
12 | 		]
13 | }
14 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/laravel/rules.json:
--------------------------------------------------------------------------------
1 | {
2 |     "custom_rules": [
3 | 		]
4 | }
5 | 
6 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/laravel/sanitizers.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sanitizers": [
3 |         ]
4 | }
5 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/laravel/sinks.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sinks": [
3 |         {"name": "redirect", "parameters": [{"id": 1}], "instanceof": "App\\Http\\Controllers\\OpenRedirect", "language": "php", "attack": "open_redirect", "cwe": "CWE_601"}
4 |         ]
5 | }
6 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/laravel/sources.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sources": [
3 |         {"name": "get", "is_function": true, "instanceof": "Illuminate\\Http\\Request->input", "language": "php"}
4 |         ]
5 | }
6 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/laravel/validators.json:
--------------------------------------------------------------------------------
1 | {
2 |     "validators": [
3 | 		]
4 | }
5 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/symfony/sanitizers.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sanitizers": [
3 |         ]
4 | }
5 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/symfony/sinks.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sinks": [
3 |         ]
4 | }
5 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/symfony/sources.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sources": [
3 |         ]
4 | }
5 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/symfony/validators.json:
--------------------------------------------------------------------------------
1 | {
2 |     "validators": [
3 | 		]
4 | }
5 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/wordpress/rules.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "custom_rules": [
 3 |         {
 4 |             "name": "wpdb", 
 5 |             "description": "wpdb variable should be an object of type wpdb",
 6 |             "language": "php", 
 7 |             "action": "DEFINE_OBJECT", 
 8 |             "extra": "wpdb"
 9 |         }
10 | 	]
11 | }
12 | 
13 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/wordpress/sanitizers.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sanitizers": [
3 |         ]
4 | }
5 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/wordpress/sources.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sources": [
3 |         ]
4 | }
5 | 


--------------------------------------------------------------------------------
/package/src/uptodate_data/php/frameworks/wordpress/validators.json:
--------------------------------------------------------------------------------
1 | {
2 |     "validators": [
3 | 		]
4 | }
5 | 


--------------------------------------------------------------------------------
/projects/example/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "progpilot/example",
 3 |     "description": "Example of use of Progpilot",
 4 |     "require": {
 5 |         "php": ">=7.4",
 6 |         "designsecurity/progpilot": "^1.1.1",
 7 |         "ircmaxell/php-cfg": "^0.7.0"
 8 |     }
 9 | } 
10 | 


--------------------------------------------------------------------------------
/projects/example/example1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | $context = new \progpilot\Context;
 6 | $analyzer = new \progpilot\Analyzer;
 7 | 
 8 | $context->inputs->setFile("source_code1.php");
 9 | 
10 | $analyzer->run($context);
11 | $results = $context->outputs->getResults();
12 | 
13 | var_dump($results);
14 | 


--------------------------------------------------------------------------------
/projects/example/example2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | $context = new \progpilot\Context;
 6 | $analyzer = new \progpilot\Analyzer;
 7 | 
 8 | $context->inputs->setFile("source_code1.php");
 9 | $context->outputs->taintedFlow(true);
10 | 
11 | $analyzer->run($context);
12 | $results = $context->outputs->getResults();
13 | 
14 | var_dump($results);
15 | 


--------------------------------------------------------------------------------
/projects/example/source_code1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | $var4 = $var7;
5 | echo "$var4";
6 | 


--------------------------------------------------------------------------------
/projects/example_config/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "progpilot/example",
 3 |     "description": "Example of use of Progpilot",
 4 |     "repositories": [
 5 |         {
 6 |             "type": "path",
 7 |             "url": "../../package"
 8 |         }
 9 |     ],
10 |     "require": {
11 |         "php": ">=7.4",
12 |         "progpilot/package": "^1.1.1",
13 |         "ircmaxell/php-cfg": "^0.7.0"
14 |     }
15 | } 
16 | 


--------------------------------------------------------------------------------
/projects/example_config/example.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | $context = new \progpilot\Context;
 6 | $analyzer = new \progpilot\Analyzer;
 7 | 
 8 | $context->setConfiguration("./configuration.yml");
 9 | 
10 | $analyzer->run($context);
11 | $results = $context->outputs->getResults();
12 | 
13 | var_dump($results);
14 | 


--------------------------------------------------------------------------------
/projects/example_config/example1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | $var4 = $var7;
5 | echo "$var4";
6 | 


--------------------------------------------------------------------------------
/projects/tests/false_positives.json:
--------------------------------------------------------------------------------
1 | {
2 |     "false_positives":
3 |         [
4 |             {"vuln_id":"e64d474f7d71f783ca18431b280095644599c6b789005c7748587891a0cd8a94"}
5 |         ]
6 | }
7 | 


--------------------------------------------------------------------------------
/projects/tests/folderincludedtest.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |         return [
 4 |                 [
 5 |                     "./tests/folders/folder1",
 6 |                         [["\$var1[0]", '5', "xss"],
 7 |                         ["\$var1", '9', "xss"],
 8 |                         ["\$var2", '12', "xss"]]
 9 |                 ],
10 |                 [
11 |                     "./tests/folders/folder2",
12 |                         [["\$var1[0]", "5", "xss"],
13 |                         ["\$var1", "9", "xss"]]
14 |                 ]
15 |             ];
16 | 


--------------------------------------------------------------------------------
/projects/tests/include_files.json:
--------------------------------------------------------------------------------
1 | {
2 |     "inclusions":
3 |     [
4 |         "../../../../vulnapps/laravel8/"
5 |     ]
6 | }
7 | 


--------------------------------------------------------------------------------
/projects/tests/optimizationstest.php:
--------------------------------------------------------------------------------
1 | <?php
2 |         return [
3 |                 [
4 |                     "./tests/optimizations/cleanopinfoconcatleft.php",
5 |                         [["\$this->_message", "11", "xss"]]
6 |                 ]
7 |             ]; 
8 | 


--------------------------------------------------------------------------------
/projects/tests/resolve_includes.json:
--------------------------------------------------------------------------------
1 | {"include_failures":""}


--------------------------------------------------------------------------------
/projects/tests/resolved_includes.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "includes":
 3 |         [
 4 |             {
 5 |                 "line":11,
 6 |                 "column":11,
 7 |                 "source_file":"./tests/includes/simple5.php",
 8 |                 "value":"simple5_include.php"
 9 |             }
10 |         ]
11 | }
12 | 


--------------------------------------------------------------------------------
/projects/tests/run_config.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | if ($argc > 1) {
 6 |     $context = new \progpilot\Context;
 7 |     $analyzer = new \progpilot\Analyzer;
 8 |     
 9 |     $context->setConfiguration($argv[1]);
10 |         
11 |     $analyzer->run($context);
12 | 
13 |     var_dump($context->outputs->getResults());
14 | }
15 | 


--------------------------------------------------------------------------------
/projects/tests/testarray.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | $print_arr = "";
 6 | 
 7 | $arr = array("bla" => false);
 8 | 
 9 | \progpilot\Utils::printArray($arr, $print_arr);
10 | 
11 | $print_arr = "";
12 | 
13 | $arr = array("bla" => array("biouuu" => false));
14 | 
15 | \progpilot\Utils::printArray($arr, $print_arr);
16 | 
17 | echo "$print_arr\n";
18 | 


--------------------------------------------------------------------------------
/projects/tests/testcfg.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | $code = "<?php function testf(\$param){	return [\$param, \"nono\"];}\$var = testf(\$_GET[\"p\"])[0];echo \$var;?>";
 6 | 
 7 | $context = new \progpilot\Context;
 8 | $analyzer = new \progpilot\Analyzer;
 9 | 
10 | $context->setAnalyzeJs(false);
11 | $context->setAnalyzeIncludes(false);
12 | $context->inputs->setCode($code);
13 | $analyzer->run($context);
14 | 
15 | $results = $context->outputs->getAst();
16 | 
17 | var_dump($results);
18 | 


--------------------------------------------------------------------------------
/projects/tests/testfile.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | $context = new \progpilot\Context;
 6 | $analyzer = new \progpilot\Analyzer;
 7 | 
 8 | $context->inputs->setFile("flow1.php");
 9 | $context->outputs->taintedFlow(true);
10 | 
11 | $analyzer->run($context);
12 | $results = $context->outputs->getResults();
13 | 
14 | var_dump($results);
15 | 


--------------------------------------------------------------------------------
/projects/tests/testincludes.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | $context = new \progpilot\Context;
 6 | $analyzer = new \progpilot\Analyzer;
 7 | 
 8 | $context->inputs->setFile("./tests/includes/simple5.php");
 9 | 
10 | $context->outputs->resolveIncludesFile("resolve_includes.json");
11 | $context->outputs->resolveIncludes(true);
12 | 
13 | //$context->inputs->set_includes("./tests/includes/resolved_includes_simple5.txt");
14 | 
15 | $analyzer->run($context);
16 | 


--------------------------------------------------------------------------------
/projects/tests/testonadd.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | $context = new \progpilot\Context;
 6 | $analyzer = new \progpilot\Analyzer;
 7 | 
 8 | $context->inputs->setFile("./tests/oop/simple1.php");
 9 | //$context->outputs->setOnAddResult("var_dump");
10 | $var = function($result) {
11 |     var_dump($result);
12 | };
13 | $context->outputs->setOnAddResult($var);
14 | $analyzer->run($context);
15 | 
16 | echo "nb files = '".$context->outputs->getCountAnalyzedFiles()."'\n";
17 | 
18 | 


--------------------------------------------------------------------------------
/projects/tests/testphpcfg.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once './vendor/autoload.php';
 4 | 
 5 | if ($argc > 1) {
 6 |     $parser = new PHPCfg\Parser(
 7 |     (new PhpParser\ParserFactory)->create(PhpParser\ParserFactory::PREFER_PHP7)
 8 |     );    
 9 |     
10 |     $script = $parser->parse(file_get_contents($argv[1]), $argv[1]);
11 |     
12 |     $dumper = new PHPCfg\Printer\Text();
13 |     echo $dumper->printScript($script);
14 | }
15 | 
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/conditions/condition1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | if (is_numeric($_GET["p1"])) { //block1
4 |     echo $_GET["p1"];
5 | }
6 | 
7 | echo $_GET["p1"];
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/conditions/condition2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | if (is_string($_GET["p1"])) { //block1
4 |     echo $_GET["p1"];
5 | }
6 | 
7 | echo $_GET["p1"];
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/conditions/condition3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | if (!is_string($_GET["p1"]) && !is_string($_GET["p2"])) { //block1
4 |     echo $_GET["p1"];
5 | }
6 | 
7 | echo $_GET["p1"];
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/conditions/condition4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $blabla = $_GET["p1"];
 4 | 
 5 | if (is_numeric($blabla)) { //block1
 6 |     echo $blabla;
 7 | }
 8 | 
 9 | echo $blabla;
10 | 
11 | /*
12 | 
13 |    $blabla = $_GET["p1"];
14 | 
15 |    if(is_numeric($blabla)) //block1
16 |    {
17 |    echo $blabla;
18 |    }
19 | 
20 |    echo $_GET["p1"];
21 | 
22 |  */
23 | 


--------------------------------------------------------------------------------
/projects/tests/tests/conditions/condition5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted = $_GET["p"];
 4 | 
 5 | $legal_table = array("safe1", "safe2");
 6 | if (!in_array($tainted, $legal_table, true)) {
 7 |     $tainted = $tainted;
 8 | } else {
 9 |     $tainted = $legal_table[0];
10 | }
11 | 
12 | echo $tainted;
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/conditions/condition6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted = $_GET["p"];
 4 | 
 5 | $legal_table = array("safe1", "safe2");
 6 | if (in_array($tainted, $legal_table, true)) {
 7 |     echo $tainted;
 8 | }
 9 | 
10 | $legal_table = array("safe1", "safe2", $_GET["piou"]);
11 | if (in_array($tainted, $legal_table, true)) {
12 |     echo $tainted;
13 | }
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/conditions/condition7.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted = $_GET["p"];
 4 | 
 5 | $safe = (int) $tainted;
 6 | 
 7 | $notsafe = (string) $tainted;
 8 | 
 9 | echo $notsafe;
10 | 
11 | echo $safe;
12 | 
13 | echo $tainted;
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/cert1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
 4 | 
 5 | curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, TRUE); 
 6 | 
 7 | curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
 8 | 
 9 | curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);
10 | 
11 | curl_setopt($curl, CURLOPT_SSL_ddVERIFYHOST, 0);
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/cert3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
 4 | 
 5 | curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, TRUE); 
 6 | 
 7 | curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
 8 | 
 9 | curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true); 
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/conditionalvalues.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |   if ($pSecurityLevel == 'impossible') {
 4 |     $httponly = true;
 5 |   } else {
 6 |     $httponly = false;
 7 |   }
 8 |   
 9 |   setcookie(session_name(), session_id(), null, '/', null, true, $httponly);
10 |   
11 | ?>
12 |   
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/cookies1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if ($pSecurityLevel == 'impossible') {
 4 |     $httponly = true;
 5 | } else {
 6 |     $httponly = false;
 7 | }
 8 | setcookie(session_name(), session_id(), null, '/', null, null, $httponly);
 9 | setcookie('security', $pSecurityLevel, null, null, null, null, $httponly);
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/custom1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function secret()
 4 | {
 5 |     dev_iam_authenticated();
 6 |     
 7 |     if (1 == rand()) {
 8 |         dev_iam_rights();
 9 |     } else {
10 |         nada();
11 |     }
12 |     
13 |     var_dump(dev_retrieve_secret());
14 | }
15 | 
16 | secret();
17 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/custom2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | setcookie("cookie1", "secret1", 0, "/", "domain.com", true, true);
 4 | 
 5 | setcookie("cookie2", "secret2", 0, "/", "domain.com", false, true);
 6 | 
 7 | setcookie("cookie3", "secret3", 0, "/", "domain.com", true, false);
 8 | 
 9 | setcookie("cookie4", "secret4", 0, "/", "domain.com", false, false);
10 | 
11 | setcookie("cookie4", "secret4", 0, "/", "domain.com", true);
12 | 
13 | setcookie("cookie4", "secret4", 0, "/", "domain.com", false);
14 | 
15 | setcookie("cookie4", "secret4", 0, "/", "domain.com");
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/custom3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc
 4 | {
 5 |     public function __construct($test)
 6 |     {
 7 |         echo $test;
 8 |     }
 9 | }
10 | 
11 | $a = new testc("not_vuln");
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/custom4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $a = new Twig_Environment($loader, array("autoescape" => false, "test" => "toto"));
 4 | 
 5 | $a = new Twig_Environment($loader, array("autoescape" => true, "test" => "toto"));
 6 | 
 7 | $a = new Twig_Environment($loader, array("autoescape" => "html", "test" => "toto"));
 8 | 
 9 | $a = new Twig_Environment($loader);
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/custom5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | header("Access-Control-Allow-Origin: *");
 4 | 
 5 | header("Access-Control-Allow-Origin: toto");
 6 | 
 7 | header("Access-Control-Allow-Origin: *.test.fr");
 8 | 
 9 | header("test: *");
10 | 
11 | header();
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/custom/customcookieoptions.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $options = array(
 4 |     'expires' => time() + 2592000,
 5 |     'path' => '/',
 6 |     'domain' => '',
 7 |     //'secure' => FALSE,
 8 |     'httponly' => true,
 9 |     'samesite' => 'Lax'
10 | );
11 | 
12 | setcookie("token", "123", $options);
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/customvalidator2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function validate_file2($file) {
 4 | 
 5 | 	$next = false;
 6 | 	if (in_array($file, $allowed_files)) {
 7 | 		$next = true;
 8 | 		return $next;
 9 | 	}
10 | 
11 | 	return $next;
12 | } 
13 | 
14 | $a = $_GET["p"];
15 | 
16 | if(validate_file2($a)) {
17 | 	include($a);
18 | }
19 | else {
20 | 	include($a);
21 | }


--------------------------------------------------------------------------------
/projects/tests/tests/data/customvalidator3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function validate_file($file, $allowed_files = '') {
 4 | 	if (false !== strpos($file, './'))
 5 | 		return 1;
 6 | 
 7 | 	if (':' == substr($file, 1, 1))
 8 | 		return 2;
 9 | 
10 | 	if (!empty ($allowed_files) && (!in_array($file, $allowed_files)))
11 | 		return 3;
12 | 
13 | 	return 0;
14 | } 
15 | 
16 | $a = $_GET["p"];
17 | 
18 | if(validate_file($a)) {
19 | 	include($a);
20 | }
21 | else {
22 | 	include($a);
23 | }


--------------------------------------------------------------------------------
/projects/tests/tests/data/customvalidator4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function validate_file($file, $allowed_files = '') {
 4 | 	if (false !== strpos($file, './'))
 5 | 		return 1;
 6 | 
 7 | 	if (':' == substr($file, 1, 1))
 8 | 		return 2;
 9 | 
10 | 	if (!empty ($allowed_files) && (!in_array($file, $allowed_files)))
11 | 		return 3;
12 | 
13 | 	return 0;
14 | } 
15 | 
16 | $a = $_GET["p"];
17 | 
18 | if(!validate_file($a)) {
19 | 	die("dangerous");
20 | }
21 | 
22 | include($a);
23 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/customvalidator5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function validate_file($file, $allowed_files = '') {
 4 | 	if (false !== strpos($file, './'))
 5 | 		return 1;
 6 | 
 7 | 	if (':' == substr($file, 1, 1))
 8 | 		return 2;
 9 | 
10 | 	if (!empty ($allowed_files) && (!in_array($file, $allowed_files)))
11 | 		return 3;
12 | 
13 | 	return 0;
14 | } 
15 | 
16 | $a = $_GET["p"];
17 | 
18 | if(validate_file($a)) {
19 | 	die("dangerous");
20 | }
21 | 
22 | include($a);
23 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var7 = $_POST["pe"];
 4 | 
 5 | $var7safe = rtrim($var7);
 6 | 
 7 | echo "$var7safe";
 8 | 
 9 | $var7safe1[1] = rtrim($var7);
10 | 
11 | echo $var7safe1[0];
12 | 
13 | $var7safe2 = htmlentities($var7);
14 | 
15 | echo "$var7safe2";
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer10.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $tainted = $_GET["p"];
4 | 
5 | echo (int) $tainted;
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer11.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $tainted = $_GET["p"];
4 | 
5 | $safe = (int) $tainted;
6 | 
7 | echo $safe;
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_POST["pe"];
4 | 
5 | $var7safe3 = addslashes($var7);
6 | 
7 | echo "$var7safe3";
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var7 = $_POST["pe"];
 4 | 
 5 | $var7safe3 = htmlentities(addslashes($var7));
 6 | 
 7 | echo "$var7safe3";
 8 | 
 9 | $var7safe3 = addslashes(htmlentities($var7));
10 | 
11 | echo "$var7safe3";
12 | 
13 | $var7safe3 = htmlentities(htmlentities($var7));
14 | 
15 | echo "$var7safe3";
16 | 
17 | $var7safe3 = rtrim(htmlentities($var7));
18 | 
19 | echo "$var7safe3";
20 | 
21 | echo "$var7";
22 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var7 = $_POST["pe"];
 4 | 
 5 | $var7safe3 = htmlentities("ddd").$var7;
 6 | 
 7 | echo "$var7safe3";
 8 | 
 9 | $query = addslashes($_GET["p"]);
10 | 
11 | mysql_query("select * from table where id = '$query'");
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function mysanitizer()
 4 | {
 5 | }
 6 | 
 7 | $ret = mysanitizer($_GET["p"]);
 8 | 
 9 | echo "$ret";
10 | 
11 | mysql_query($ret);
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testccc1
 4 | {
 5 |     public function mysanitizer()
 6 |     {
 7 |     }
 8 | }
 9 | 
10 | $instance = new testccc1;
11 | 
12 | $ret = $instance->mysanitizer($_GET["p"]);
13 | 
14 | echo "$ret";
15 | 
16 | mysql_query($ret);
17 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sanitizer9.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted = $_GET["p"];
 4 | 
 5 | $bool = settype($tainted, "float");
 6 | 
 7 | echo $tainted;
 8 | 
 9 | if (true) {
10 |     $tainted2 = "eee";
11 | } else {
12 |     $tainted2 = $_GET["p"];
13 | }
14 | 
15 | $bool = settype($tainted2, "float");
16 | 
17 | echo $tainted2;
18 | 
19 | $tainted3 = $_GET["p"];
20 | 
21 | $bool = settype($tainted3, "flddoat");
22 | 
23 | echo $tainted3;
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sink1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | 
5 | echo "$var7";
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sink2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | 
5 | print("$var7");
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sink3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | 
5 | printf("$var7");
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sink4.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | 
5 | echo "aaa", "bbb", "$var7", "ccc";
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sink6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $res = preg_replace($_GET["p1"], $_GET["t1"], "dkdkdkd");
 4 | 
 5 | $res = preg_replace($_GET["p2"], "dkdkdkd", "dkdkdkd");
 6 | 
 7 | $res = preg_replace("dkdkdkd", $_GET["t3"], "dkdkdkd");
 8 | 
 9 | $res = preg_replace("dkdkdkd", "dddddd", $_GET["t4"]);
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sink7.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $data = mysql_fetch_object($res);
 4 | 
 5 | echo $data->boum;
 6 | 
 7 | echo $data["boum"];
 8 | 
 9 | echo $data;
10 | 
11 | print_r($data);
12 | 
13 | print_r($data->boum);
14 | 
15 | while($data = mysql_fetch_object($res))
16 | {
17 |     echo $data->boum;
18 | 
19 |     echo $data["boum"];
20 | 
21 |     echo $data;
22 | 
23 |     print_r($data);
24 | 
25 |     print_r($data->boum);
26 | }
27 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/sink8.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $query = $_GET["p"];
4 | 
5 | $xml = simplexml_load_file("users.xml");
6 | 
7 | $res = $xml->xpath($query);
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_POST["pe"];
4 | 
5 | echo "$var7";
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source10.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | function func1arr()
4 | {
5 |     return "ee";
6 | }
7 | 
8 | echo func1arr()["tainted"];
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source11.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $member1;
 6 | }
 7 | 
 8 | $inst = new testc1;
 9 | $inst->member1 = $_GET["p"];
10 | echo $inst->member1;
11 | 
12 | echo $inst;
13 | 
14 | echo $inst->member2;
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source12.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var1 = new testc1;
4 | 
5 | $var2 = $var1->methodc1();
6 | 
7 | print("$var2");
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source13.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var1 = $vardev["tainted"];
 4 | 
 5 | $var2 = $vardev["tainted2"];
 6 | 
 7 | print("$var1");
 8 | 
 9 | print("$var2");
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source14.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $script = "/tmp/tainted.php";
 4 | 
 5 | exec($script, $result, $return);
 6 | 
 7 | $tainted = $result[0];
 8 | 
 9 | echo $result;
10 | 
11 | echo $tainted;
12 | 
13 | echo $_GET;
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source16.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | while($row = mysql_fetch_object($result)) {
 4 |     echo $row->fullname;
 5 | }
 6 | /*
 7 | switch($baba) {
 8 |   case '1':
 9 |     $html = "case1";
10 |     break;
11 |   case '2':
12 |     $html = "case1";
13 |     break;
14 | }
15 | 
16 | echo $html;*/
17 | /*
18 | $row = mysql_fetch_object($result);
19 |     echo $row->fullname;
20 | */
21 | 
22 | 
23 | if($vuln == "") {
24 | $html = "toto";
25 | }
26 | else {
27 | $html = "ldld";
28 | }
29 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source17.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $res = $_GET["p"];
 4 | 
 5 | if (settype($res, "float")) {
 6 |     $res = $res ;
 7 | } else {
 8 |     $res = 0.0 ;
 9 | }
10 | 
11 | while ($data = mysql_fetch_array($res)) {
12 | 
13 |     print_r($data) ;
14 | 
15 |     echo $data;
16 |     
17 |     echo $data["trou"];
18 | }
19 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source18.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $query = "blabla";
 4 | 
 5 | $mysqli = new mysqli("localhost", "my_user", "my_password", "world");
 6 | 
 7 | $result = $mysqli->query($query);
 8 | 
 9 | $row = $result->fetch_array();
10 | 
11 | echo $row[1];
12 | 
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source19.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $object;
 6 | }
 7 | 
 8 | $obj = new testc1;
 9 | 
10 | $var1 = $obj->member1;
11 | 
12 | echo $var1;
13 | 
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | 
5 | print("$var7");
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source20.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $a = $_SERVER["DOCUMENT_ROOT"];
4 | $b = $_SERVER["QUERY_STRING"];
5 | 
6 | echo $a;
7 | 
8 | echo $b;
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source21.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class wpdb {
 4 | 	function query() {
 5 | 		$this->last_result = null; // block 9
 6 | 		if(true) {
 7 |       echo "baba"; // block 19
 8 |     }
 9 |     else  {
10 |       echo "titi"; // block 33
11 |       
12 |       while ( $row = @mysql_fetch_object(true) ) { // block 41 et 48 (row)
13 |         $this->last_result = $row; // block 52
14 |       }
15 |       
16 |       echo "bibi"; // block 62
17 |     }
18 |     
19 |     echo $this->last_result->title; // block 26
20 |   }
21 | }
22 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source22.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo Tools::getValue();
4 | 
5 | $foo = new ToolsClass();
6 | 
7 | echo $foo->getValue();


--------------------------------------------------------------------------------
/projects/tests/tests/data/source3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var = shell_exec('ls -lart');
4 | 
5 | print("$var");
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source4.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var1 = $shell_exec;
4 | 
5 | $var2 = `cat tainted.txt`;
6 | 
7 | print("$var2");
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public function methodc1()
 6 |     {
 7 |         echo "ee";
 8 |     }
 9 | }
10 | 
11 | $var1 = new testc1;
12 | 
13 | $var2 = $var1->methodc1();
14 | 
15 | print("$var2");
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public function methodc1()
 6 |     {
 7 |     }
 8 | };
 9 | 
10 | class testc2
11 | {
12 |     public function boum1()
13 |     {
14 |     }
15 | };
16 | 
17 | if (true) {
18 |     $instance = new testc1;
19 | } else {
20 |     $instance = new testc2;
21 | }
22 | 
23 | $var = $instance->methodc1();
24 | 
25 | echo $var;
26 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source7.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public function methodc1arr()
 6 |     {
 7 |     }
 8 | }
 9 | 
10 | $var1 = new testc1;
11 | 
12 | $var2 = $var1->methodc1arr();
13 | 
14 | echo $var2;
15 | 
16 | echo $var2["tainted"];
17 | 
18 | echo $var2["not_tainted"];
19 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source8.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function func1arr()
 4 | {
 5 | }
 6 | 
 7 | $var2 = func1arr();
 8 | 
 9 | echo $var2["tainted"];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/source9.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function func1arr()
 4 | {
 5 | }
 6 | 
 7 | echo func1arr()["tainted"];
 8 | 
 9 | echo func1arr();
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/validator1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted = $_GET["p"];
 4 | 
 5 | $errors = true;
 6 | if(is_email($tainted)) {
 7 |   $errors = false;
 8 | }
 9 | 
10 | if($errors) {
11 |   echo $tainted;
12 | }
13 | else {
14 |   echo $tainted;
15 | }
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/validator2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted = $_GET["p"];
 4 | 
 5 | if(in_array_false($tainted)) {
 6 |   echo $tainted; // vuln
 7 | }
 8 | else {
 9 |   echo $tainted;
10 | }
11 | 
12 | if(in_array_true($tainted)) {
13 |   echo $tainted;
14 | }
15 | else {
16 |   echo $tainted; // vuln
17 | }
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/validator3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted = $_GET["p"];
 4 | 
 5 | if(!in_array_false($tainted)) {
 6 |   echo $tainted;
 7 | }
 8 | else {
 9 |   echo $tainted; // vuln
10 | }
11 | 
12 | if(!in_array_true($tainted)) {
13 |   echo $tainted; // vuln
14 | }
15 | else {
16 |   echo $tainted;
17 | }
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/data/validator4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted = $_GET["p"];
 4 | 
 5 | if(in_array($tainted, [])) {
 6 |   echo $tainted;
 7 | }
 8 | else {
 9 |   echo $tainted;
10 | }


--------------------------------------------------------------------------------
/projects/tests/tests/data/validator5.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $tainted = $_GET["p"];
4 | 
5 | if(!in_array($tainted, [])) {
6 |   die("dangerous");
7 | }
8 | 
9 | echo $tainted;


--------------------------------------------------------------------------------
/projects/tests/tests/data/validator6.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $show_updated = $_POST['show_updated'];
4 | if ($show_updated != 'Y') {
5 |     $show_updated = 'N';
6 | }
7 | 
8 | echo $show_updated;


--------------------------------------------------------------------------------
/projects/tests/tests/flows/flow1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testa($param)
 4 | {
 5 |     $var = $param;
 6 |     return $var;
 7 | }
 8 | 
 9 | $var7 = $_GET["p"];
10 | $var4 = $var7;
11 | 
12 | echo testa($var4);
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/flows/flow2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     private $member1;
 6 |     public $object1;
 7 | 
 8 |     public function set_object1($val)
 9 |     {
10 |         $this->object1 = $val;
11 |     }
12 |   
13 |     public function get_object1()
14 |     {
15 |         return $this->object1;
16 |     }
17 | };
18 | 
19 | $newsettestc1 = new testc1;
20 | 
21 | $newsettestc1->set_object1($_GET["p"]);
22 | 
23 | echo $newsettestc1->get_object1();
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/flows/flow3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var1 = $_GET["p1"];
 4 | 
 5 | $var2 = $_GET["p2"];
 6 | 
 7 | $var3 = $var1." and ".$var2;
 8 | 
 9 | echo $var3;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/flows/incorrectflow.txt:
--------------------------------------------------------------------------------
1 | ./tests/vulntestsuite/CWE_78__GET__CAST-func_settype_int__find_size-interpretation_simple_quote.php 
2 | ./tests/phpwander/test3.php
3 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/excludedbydefault1/test1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p0"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/excludedbydefault2/foo/node_modules/test3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p2"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/excludedbydefault2/foo/test2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p1"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/excludedbydefault2/test1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p0"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder1/mix1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | echo $var1[0];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder1/mix2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | echo $var1;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder1/mix3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | $var2 = $var1;
10 | 
11 | echo $var2;
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder2/mix3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | $var2 = $var1;
10 | 
11 | 
12 | 
13 | echo $var2;
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder2/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | echo $var1[0];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder2/sub_folder1/sub_folder2/mix2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | echo $var1;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder3/mix3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | $var2 = $var1;
10 | 
11 | echo $var2;
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder3/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | echo $var1[0];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder3/sub_folder1/sub_folder2/mix2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | echo $var1;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder4/mix3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p2"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder4/onefileexcludedtest.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p1"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder4/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder4/sub_folder1/onefileexcludedtest.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder4/sub_folder1/onefolderexcludedtest/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folder4/sub_folder1/onefolderexcludedtest/onefileexcludedtest.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/mix3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p2"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p1"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/sub_folder1/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/sub_folder1/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/sub_folder1/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/sub_folder2/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/sub_folder2/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/sub_folder2/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig1/sub_folder2/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/fileonly.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p2"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/node_modules/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/node_modules/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/node_modules/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/node_modules/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p1"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/sub_folder1/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/sub_folder1/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig2/sub_folder1/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/mix3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_POST["p2"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p1"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sources.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sources": [
3 |         {"name": "_GET", "is_array": true, "language": "php"}
4 | 		]
5 | }
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sub_folder1/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sub_folder1/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sub_folder1/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sub_folder2/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sub_folder2/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sub_folder2/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig3/sub_folder2/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/mix3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_POST["p2"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p1"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sources.json:
--------------------------------------------------------------------------------
1 | {
2 |     "sources": [
3 |         {"name": "_GET", "is_array": true, "language": "php"}
4 | 		]
5 | }
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sub_folder1/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sub_folder1/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sub_folder1/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sub_folder2/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sub_folder2/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sub_folder2/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig4/sub_folder2/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/false_positives.json:
--------------------------------------------------------------------------------
1 | {
2 |     "false_positives":
3 |         [
4 |             {"vuln_id":"9fe257c7786f70fa8c46ef0437cac3fc7347a3ce7abce812f9432a861047511a"}
5 |         ]
6 | }
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/mix3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_POST["p2"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p1"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/sub_folder1/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/sub_folder1/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/sub_folder1/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/sub_folder2/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/sub_folder2/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/sub_folder2/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig5/sub_folder2/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/false_positives.json:
--------------------------------------------------------------------------------
1 | {
2 |     "false_positives":
3 |         [
4 |             {"vuln_id":"19617f7946af569f48dc39bd2796d55545e15d2b5f458b0bec29bf9e8f5f09cc"}
5 |         ]
6 | }
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/mix3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_POST["p2"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p1"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/sub_folder1/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/sub_folder1/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/sub_folder1/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/sub_folder2/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/sub_folder2/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p3"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/sub_folder2/onefolderexcludedtestconfig/mix2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p6"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig6/sub_folder2/onefolderexcludedtestconfig/onefileexcludedtestconfig.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p5"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig7/include_failures.json:
--------------------------------------------------------------------------------
1 | {"include_failures":""}


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig7/mix3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $myint = 10 - 9;
4 | 
5 | include("./sub_folder".$myint."/mix1.php");
6 | 
7 | echo $_POST["p2"];
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig7/resolved_includes.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "includes":
 3 |         [
 4 |             {
 5 |                 "line":5,
 6 |                 "column":25,
 7 |                 "source_file":"./tests/folders/folderconfig7/mix3.php",
 8 |                 "value":"./sub_folder1/mix1.php"
 9 |             }
10 |         ]
11 | }
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/folders/folderconfig7/sub_folder1/mix1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p4"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/frameworks/codeigniter1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | class Pages extends CI_Controller
 3 | {
 4 |     public function view($page = 'home')
 5 |     {
 6 |         $data['title'] = $_GET["p"];
 7 |             
 8 |         $this->load->view('templates/header', $data['title']);
 9 | 
10 |         $this->load->view('templates/header', $data);
11 |     }
12 | }
13 | 
14 | $a = new Pages;
15 | $a->view();
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/frameworks/codeigniter2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Pages extends CI_Model
 4 | {
 5 |     public function model()
 6 |     {
 7 |         $query = $this->db->query("YOUR QUERY");
 8 |         
 9 |         $result = $query->result();
10 |         
11 |         foreach($result as $row)
12 |             echo $row->title;
13 |     }
14 | }
15 | 
16 | $a = new Pages;
17 | $a->model();
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/frameworks/codeigniter3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Pages extends CI_Model
 4 | {
 5 |     public function model()
 6 |     {
 7 |         $query = $this->db->query("YOUR QUERY");
 8 |         
 9 |         $row = $query->row_array();
10 |         
11 |         echo $row["test"];
12 |     }
13 | }
14 | 
15 | $a = new Pages;
16 | $a->model();
17 | 


--------------------------------------------------------------------------------
/projects/tests/tests/frameworks/symfony1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | use Symfony\Component\HttpFoundation\Response as Response;
 4 | 
 5 | $response = new Response(
 6 |     'Content',
 7 |     Response::HTTP_OK,
 8 |     array('Access-Control-Allow-Origin' => '*')
 9 | );
10 | 
11 | $response->headers->set('Access-Control-Allow-Origin', '*');
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/alias1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = "test";
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"]."test";
 7 | }
 8 | 
 9 | $var3 = &$var1;
10 | 
11 | echo "$var3";
12 | 
13 | /* var3 est tainté = XSS en ligne 14 */
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/alias2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var5 = "test";
 4 | $var6 = $_GET["p"];
 5 | 
 6 | if (true) { //block1
 7 |     $var7 = &$var5;
 8 | } else {   //block3
 9 |     $var7 = &$var6;
10 | }
11 | 
12 | echo "$var7";
13 | 
14 | /* var3 est tainté = XSS en ligne 15 */
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/alias3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var5 = $_GET["t"];
 4 | $var6 = $_GET["p"];
 5 | 
 6 | if (true) { //block1
 7 |     $var7 = &$var5;
 8 | } else {   //block3
 9 |     $var7 = &$var6;
10 | }
11 | 
12 | echo "$var7";
13 | 
14 | /* var3 est doublement tainté = XSS en ligne 15 */
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/alias4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var5 = $_GET["t"];
 4 | 
 5 | $var6 = &$var5;
 6 | 
 7 | echo $var6;
 8 | 
 9 | if (true) {
10 |     $var5 = "oula";
11 | } else {
12 |     $var5 = "oula";
13 | }
14 | 
15 | echo $var6;
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/alias5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | // block 3
 4 | $var5["t"] = $_GET["t"];
 5 | 
 6 | $var6 = &$var5["t"];
 7 | 
 8 | echo $var6;
 9 | 
10 | if (true) {
11 |     // block 12
12 |     // if $var5 = "oula"; it's a FP we don't track array from array element
13 |     $var5["t"] = "oula";
14 | } else {
15 |     // block 22
16 |     // if $var5 = "oula"; it's a FP we don't track array from array element
17 |     $var5["t"] = "oula";
18 | }
19 | 
20 | // block 21
21 | echo $var6;
22 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | 
4 | $newmyarr[11][9865] = $_GET["p"];
5 | 
6 | 
7 | echo $newmyarr[11][9865];
8 | echo $newmyarr[11][9866];
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays10.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $arr = array($_GET["tata"], "ola", "ha");
4 | 
5 | echo $arr[0];
6 | echo $arr[1];
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays11.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $toto = $_GET["tata"];
4 | $arr = array(array("ui", $toto), "ha");
5 | 
6 | echo $arr[0][0];
7 | echo $arr[0][1];
8 | echo $arr[1];
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays12.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array("ee", "lklk");
 5 | } else {   //block3
 6 |     $var1 = array("lklk", $_GET["p1"]);
 7 | }
 8 | 
 9 | // block12
10 | 
11 | $var2 = $var1;
12 | 
13 | echo $var2[1];
14 | echo $var2[0];
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays13.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $_GET["p"] = "olalal";
4 | 
5 | echo $_GET["p"]."kkkrkr".$_GET["t"];
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays14.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block4
 4 |     $var1 = array("ee", "lklk");
 5 | } else {   //block21
 6 |     $var1[11] = array("lklk", $_GET["p1"]);
 7 | }
 8 | 
 9 | // enter block12
10 | $var2 = $var1;
11 | 
12 | echo $var2[11][1];
13 | echo $var2[0];
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays15.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf($param)
 4 | {
 5 |     return [$param, "nono"];
 6 | }
 7 | 
 8 | $var1 = testf($_GET["p"])[0];
 9 | 
10 | echo $var1;
11 | 
12 | $var2 = testf($_GET["p"])[1];
13 | 
14 | echo $var2;
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays16.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var["t"] = $_GET["p"];
 4 | 
 5 | echo $var["t"];
 6 | 
 7 | $var = "ecrase";
 8 | 
 9 | echo $var["t"];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays17.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $values = array();
4 | 	
5 | $values[] = $_GET["p"];
6 | 
7 | echo $values[0];
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays18.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var5["t"] = $_GET["t"];
4 | 
5 | echo $var5["t"];
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays19.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if($aaa == "eee") {
 4 |   echo $var5["t"];
 5 |   $var5["t"] = $_GET["t"];
 6 |   echo $var5["t"];
 7 | }
 8 | else {
 9 |   echo $var5["t"];
10 |   $var5["t"] = "ee";
11 |   echo $var5["t"];
12 | }
13 | 
14 | echo $var5["t"];
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $newmyarr[11][9865] = $_GET["p"];
4 | $var1 = &$newmyarr[11][9865];
5 | 
6 | echo $var1;
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays20.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function myfunc($a) {
 4 |   echo $a;
 5 | }
 6 | 
 7 | $arr = array("too", "taa", $_GET["g"]);
 8 | 
 9 | myfunc($arr[2]);
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | 
4 | $newmyarr[11] = $_GET["p"];
5 | 
6 | 
7 | echo $newmyarr[11];
8 | echo $newmyarr[12];
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | $newmyarr[11] = $_GET["p"];
 5 | 
 6 | $copy = $newmyarr;
 7 | 
 8 | echo $copy[11];
 9 | //echo $copy[12];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays5.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var1 = $_GET["p"];
4 | $newmyarr[11][9865] = &$var1;
5 | 
6 | echo $newmyarr[11][9865];
7 | echo $newmyarr[11][9866];
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays6.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $_GET["p"] = "eee";
4 | 
5 | echo $_GET["p"];
6 | echo $_GET["t"];
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays7.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $onearr[9865] = $_GET["tata"];
4 | $onearr[9866] = "olala";
5 | $testarr[11] = $onearr;
6 | 
7 | echo $testarr[11][9865];
8 | echo $testarr[11][9866];
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays8.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $arr[1112] = "olalal";
 4 | $arr[1112] = "olalal";
 5 | $arr[1112] = "olalal";
 6 | $arr[1113] = $_GET["p"];
 7 | $arr[1111] = "olalal";
 8 | 
 9 | echo $arr[1113];
10 | echo $arr[1112];
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arrays9.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | $onearr[11][6661] = $_GET["tata"];
 5 | $onearr[11][6662] = "olala";
 6 | $testarr = $onearr[11];
 7 | 
 8 | echo $testarr[6661];
 9 | echo $testarr[6662];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arraysexpr1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $newmyarr = ["elelel", "ekeke", $_GET["p"]];
4 | 
5 | // $newmyarr = [array(), "ekeke", $_GET["p"]];
6 | 
7 | echo $newmyarr[2];
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arraysexpr2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $newmyarr = ["elelel", "ekeke", ["ahah", ["poulou", "baba", $_GET["p"]]]];
4 | 
5 | //echo $newmyarr[2][1][1];
6 | echo $newmyarr[2][1][2];
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arraysexpr3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $onearr[11][6661] = $_GET["p"];
 4 | $onearr[11][6662] = "olala";
 5 | 
 6 | $newmyarr = ["elelel", "ekeke", ["ahah", "hah", $onearr]];
 7 | 
 8 | // $newmyarr = [array(), "ekeke", $_GET["p"]];
 9 | 
10 | echo $newmyarr[2][2][11][6661];
11 | echo $newmyarr[2][1];
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arraysexpr4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | $var_main = array(
 5 |                 'TEST1' => $_GET["p"],
 6 |                 'TEST2' => 'test2',
 7 |                 'TEST3' => 'test3'
 8 |             );
 9 | 
10 | echo $var_main["TEST1"];
11 | echo $var_main["TEST3"];
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/arraysrec1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var1[0] = "leel";
 4 | $var1[1] = "eee";
 5 | $var1[2] = "eee";
 6 | 
 7 | $var1 = array($var1, $_GET["p1"]);
 8 | 
 9 | 
10 | echo $var1[1];
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/calluserfunc1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | function test1($a)
4 | {
5 |     echo $a;
6 | }
7 | 
8 | call_user_func("test1", $_GET["p"]);
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/calluserfunc2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function test1($a)
 4 | {
 5 |     echo $a;
 6 | }
 7 | 
 8 | $var = "test1";
 9 | 
10 | call_user_func($var, $_GET["p"]);
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/calluserfunc3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | function test1($a)
4 | {
5 |     echo $a;
6 | }
7 | 
8 | call_user_func_array("test1", array($_GET["p"]));
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/calluserfunc4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function test1($a)
 4 | {
 5 |     echo $a;
 6 | }
 7 | 
 8 | $tab = array($_GET["p"]);
 9 | 
10 | call_user_func_array("test1", $tab);
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/concat1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $myvar3 = "olala"."ldfkldkfl"."lkdlkd";
 4 | $myvar4 = htmlentities($_GET["p"], ENT_QUOTES, 'UTF-8');
 5 | $myvar5 = htmlentities($myvar1, ENT_QUOTES, 'UTF-8');
 6 | $myvar6 = htmlentities($myvar1, ENT_QUOTES, 'UTF-8')."TEST";
 7 | $myvar7 = htmlentities($myvar1, ENT_QUOTES, 'UTF-8').$_GET["p"];
 8 | 
 9 | 
10 | echo $myvar3;
11 | echo $myvar4;
12 | echo $myvar5;
13 | echo $myvar6;
14 | echo $myvar7;
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/concat3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $aaa = $_GET["p"];
 4 | 
 5 | $bbb = (int)($aaa)." ".$aaa;
 6 | 
 7 | echo $aaa;
 8 | 
 9 | echo $bbb;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/foreach1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $arrays[0] = "eee";
 4 | $arrays[1] = $_GET["p"];
 5 | 
 6 | foreach ($arrays as $array_id => $array_value) {
 7 |     // array_id = 0
 8 |     // array_value = arrays[0] = "eee"
 9 |   
10 |     // array_id = 1
11 |     // array_value = arrays[1] = $_GET["p"]
12 |     echo $array_value;
13 | }
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf($parama, $boum, $tchka)
 4 | {
 5 |     echo $parama;
 6 | 
 7 |     $safea = htmlentities($parama);
 8 | 
 9 |     echo $safea;
10 | 
11 |     return $parama;
12 | }
13 | 
14 | testf($_GET["p"], "argument2", "argument3");
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions10.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     $arr[8989][1][989] = $param;
 6 |     $arr[8989][2][989] = "olalal";
 7 |     return [$arr[8989], "nono"];
 8 | }
 9 | 
10 | $ret = testf1($_GET["p"]);
11 | 
12 | echo $ret[0][1][989];
13 | echo $ret[0][2][989];
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions11.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     return $param;
 6 | }
 7 | 
 8 | $ret = [testf1($_GET["p"]), "olal", "ola"];
 9 | 
10 | echo $ret[0];
11 | echo $ret[1];
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions12.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     $arr[8989][1][989] = $param."jkjk";
 6 |     $arr[8989][2][989] = "olalal";
 7 |     return $arr;
 8 | }
 9 | 
10 | $ret_gauche = [$ret_droite = testf1($_GET["p"])];
11 | 
12 | echo $ret_gauche[0][8989][1][989];
13 | echo $ret[1];
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions13.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     return [$param, "ola", "allo"];
 6 | }
 7 | 
 8 | $ret = [testf1($_GET["p"]), "olal", "ola"];
 9 | 
10 | echo $ret[0][0];
11 | echo $ret[0][1];
12 | echo $ret[1];
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions14.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     echo $param;
 6 | }
 7 | 
 8 | if (testf1($_GET["p"])) {
 9 |     echo "oulala";
10 | }
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions15.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($var_param)
 4 | {
 5 |     echo $var_param[1][12];
 6 | }
 7 | 
 8 | $var[1][11] = "kkk";
 9 | $var[1][12] = $_GET["p"];
10 | $var[1][13] = "kkk";
11 | 
12 | testf1($var);
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions16.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($var_param)
 4 | {
 5 |     echo $var_param[1][12];
 6 | }
 7 | 
 8 | $var[1][11] = "kkk";
 9 | $var[1][12] = $_GET["p"];
10 | $var[1][13] = "kkk";
11 | 
12 | testf1($var);
13 | 
14 | 
15 | $var1[1][11] = "kkk";
16 | $var1[1][12] = "kkk";
17 | $var1[1][13] = "kkk";
18 | 
19 | testf1($var1);
20 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions17.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param2)
 4 | {
 5 |     echo $param2;
 6 | }
 7 | 
 8 | function testf2($param1)
 9 | {
10 |     return $param1;
11 | }
12 | 
13 | testf1(testf2($_GET["p"]));
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions18.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public static function testf1($param2)
 6 |     {
 7 |         echo $param2;
 8 |     }
 9 | }
10 | 
11 | testc1::testf1($_GET["p"]);
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions19.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | function testf1($param2)
 5 | {
 6 |     echo $param2["test"];
 7 | }
 8 | 
 9 | $toto = array("test" => $_GET["p"]);
10 | 
11 | testf1(array("test" => $_GET["p"]));
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf($parama, $boum, $tchka)
 4 | {
 5 |     return [$parama, ""];
 6 | }
 7 | 
 8 | $safea = testf($_GET["p"], "argument2", "argument3");
 9 | 
10 | echo $safea[0];
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions20.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $p = $_GET["p"];
 4 | 
 5 | function thisfunctionexist($param)
 6 | {
 7 |   return "something";
 8 | }
 9 | 
10 | $p = thisfunctionexist('something');
11 | 
12 | echo $p;
13 | 
14 | 
15 | $t = $_GET["t"];
16 | $t = thisfunctiondoesntexist('something');
17 | 
18 | echo $t;
19 | 
20 | 
21 | function thisfunctionexistandreturn($p)
22 | {
23 |   return $p;
24 | }
25 | 
26 | echo thisfunctionexistandreturn($_GET["p"]);
27 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions21.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function function1()
 4 | {
 5 |   $p = $_GET["p"];
 6 |   
 7 |   return $p;
 8 | }
 9 | 
10 | function function2()
11 | {
12 |   $notused = function1();
13 |   
14 |   echo "blabla";
15 |   
16 |   $ret = function1();
17 |   
18 |   echo $ret;
19 | }
20 | 
21 | function2();
22 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions22.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function function1($param)
 4 | {
 5 |   return $param;
 6 | }
 7 | 
 8 | function function2()
 9 | {
10 |   $ret1 = function1($_GET["p"]);
11 |   
12 |   echo $ret1;
13 |   
14 |   $ret2 = function1($_GET["t"]);
15 |   
16 |   echo $ret2;
17 | }
18 | 
19 | function2();
20 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions23.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function function1($param)
 4 | {
 5 |   return $param;
 6 | }
 7 | 
 8 | function function2()
 9 | {
10 |   return $_GET["p"];
11 | }
12 | 
13 | // we analyze a first time function1
14 | 
15 | $a = function1("foo");
16 | 
17 | echo $a;
18 | 
19 | $b = function1(function2());
20 | 
21 | echo $b;


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf($parama, $boum, $tchka)
 4 | {
 5 |     $safea = htmlentities($parama);
 6 | 
 7 |     return [$parama, $safea];
 8 | }
 9 | 
10 | $a = $_GET["attack"];
11 | 
12 | $arraysafe = testf($a);
13 | 
14 | echo $arraysafe[0];
15 | echo $arraysafe[1];
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions4.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | function testf($param)
4 | {
5 |     return $param;
6 | }
7 | 
8 | echo testf($_GET["p"])."olalal";
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions5.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | function testf($param)
4 | {
5 |     return [$param, "nono"];
6 | }
7 | 
8 | echo testf($_GET["p"])[0]."olalal";
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     echo $_GET["p"];
 6 | }
 7 | 
 8 | function testf2($param)
 9 | {
10 |     echo $_GET["p"];
11 | }
12 | 
13 | function testf3($param)
14 | {
15 |     echo $_GET["p"];
16 | }
17 | 
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions7.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     $var1 = $_GET["p"];
 6 |     echo $var1;
 7 | }
 8 | 
 9 | testf1("test");
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions8.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     if (true) {
 6 |         $var1 = $_GET["p"];
 7 |         echo $var1;
 8 |     } else {
 9 |         echo "$param";
10 |     }
11 | }
12 | 
13 | testf1("test");
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functions9.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function testf1($param)
 4 | {
 5 |     $arr[8989][1] = $param;
 6 |     $arr[8989][2] = "olalal";
 7 |     return [$arr, "nono"];
 8 | }
 9 | 
10 | $ret = testf1($_GET["p"]);
11 | 
12 | echo $ret[0][8989][1];
13 | echo $ret[0][8989][2];
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/functionsrec1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $nb = 0;
 4 | 
 5 | function testf1($var)
 6 | {
 7 |     if($nb < 5) {
 8 |       $nb ++;
 9 |       $ret = testf1($var);
10 |     }
11 | 
12 |     return $var;
13 | }
14 | 
15 | $var = testf1($_GET["p"]);
16 | echo $var;
17 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/global1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | $myvar1 = $_GET["p"];
 5 | 
 6 | function test_global()
 7 | {
 8 |     global $myvar1;
 9 |     echo $myvar1;
10 | }
11 | 
12 | test_global();
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/global2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | $myvar1 = $_GET["p"];
 5 | 
 6 | function test_global()
 7 | {
 8 |     echo $GLOBALS["myvar1"];
 9 | }
10 | 
11 | test_global();
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/global3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $myvar1 = $_GET["p"];
 4 | 
 5 | function test_global1()
 6 | {
 7 |     test_global2();
 8 | }
 9 | 
10 | function test_global2()
11 | {
12 |     global $myvar1;
13 |   
14 |     echo $myvar1;
15 | }
16 | 
17 | test_global1();
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/global4.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $maxdb = new maxdb("localhost", "MONA", "RED", "DEMODB");
4 | function test() {
5 | 	global $maxdb;
6 | 	$maxdb->query($_POST['form_id']);
7 | }
8 | 
9 | test();


--------------------------------------------------------------------------------
/projects/tests/tests/generic/loop1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 |         if ($useStaticLoader) {
 5 |             $includeFiles = array(); // block 4
 6 |         } else {
 7 |             $includeFiles = array($_GET["p"]); // block 28
 8 |         }
 9 |         foreach ($includeFiles as $fileIdentifier => $file) { // block 10
10 |           echo $file;
11 |         }
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/loop2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 		if ( true ) {
 4 | 		echo "coucou"; // block 6
 5 | 		} else {
 6 | 			while ( $row = @mysql_fetch_object($this->result) ) { // block 29 (row) & 22 (fetch)
 7 | 				echo $row->title; // block 33
 8 | 			} 
 9 |     } 
10 | 		echo "salut"; // block 13
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/loop3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | 
4 | while ( $row = mysql_fetch_object(true) ) { 
5 |   echo $row->title;
6 | }
7 | 
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/loop4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class wpdb {
 4 | 
 5 | 	function print_error() {
 6 |       echo $this->last_query;
 7 | 	}
 8 | 	
 9 | 	function query($query) {
10 | 		$this->last_query = $query;
11 | 		if ( true ) {
12 | 			$this->print_error();
13 | 		}
14 | 	}
15 | }
16 | 
17 | 
18 | $wpdb = new wpdb;
19 | $wpdb->query($_GET["p"]);
20 | 
21 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/mix1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | echo $var1[0];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/mix2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | echo $var1;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/mix3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var1 = array($_GET["p1"]);
 5 | } else {   //block3
 6 |     $var1 = $_GET["p1"];
 7 | }
 8 | 
 9 | $var2 = $var1;
10 | 
11 | echo $var2;
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/namespace1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace testns;
 4 | 
 5 | class testc
 6 | {
 7 |     public function __construct()
 8 |     {
 9 |         echo $_GET["p"];
10 |     }
11 | }
12 | 
13 | $a = new \testns\testc;
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/namespace2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace testns;
 4 | 
 5 | function cool()
 6 | {
 7 |     echo $_GET["p"];
 8 | }
 9 | 
10 | cool();
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $myvar1 = $_GET["p"]; 
 4 | 
 5 | $myvar2 = $myvar1;
 6 | 
 7 | $myvar3 = $myvar2;
 8 | 
 9 | $myvar4 = $myvar3;
10 | 
11 | echo "$myvar4";
12 | 
13 | $myvar2 = "olala";
14 | echo $myvar2;
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple10.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | exit($_GET["p"]);
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $myvar1 = $myvar2 = $_GET["p"];
4 | 
5 | echo $myvar2;
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (true) { //block1
 4 |     $var7 = $_GET["p"];
 5 | } else {   //block3
 6 |     $var7 = "test";
 7 | }
 8 | 
 9 | echo "$var7";
10 | 
11 | /* var3 est tainté = XSS en ligne 15 */
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple4.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | 
5 | $var4 = $var7;
6 | 
7 | echo "$var4";
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $myvar1[11] = $_GET["p"];
 4 | 
 5 | echo $myvar1[11];
 6 | 
 7 | $myvar1[11] = "olala";
 8 | 
 9 | echo $myvar1[11];
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple6.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var7 = $_GET["p"];
4 | 
5 | $var4 = $var7;
6 | 
7 | $var = print("$var4");
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple7.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $myvar1 = $_GET["p"];
4 | 
5 | echo '$myvar1';
6 | 
7 | echo $myvar1;
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple8.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var_gauche = [$var_droite = $_GET["p"]];
 4 | 
 5 | echo $var_gauche[0];
 6 | 
 7 | 
 8 | $ret = [$ret = $_GET["p"]];
 9 | 
10 | echo $ret[0];
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/generic/simple9.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $res = create_function($_GET["p1"], $_GET["t1"]);
 4 | $res = create_function('', $_GET["t1"]);
 5 | $res = create_function($_GET["p1"], '');
 6 | /*
 7 | $res = create_function('$a = 10*10', "echo 'test';echo \$a;");
 8 | 
 9 | $res();
10 | */
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/dvwa/high.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | // Is there any input?
4 | if (array_key_exists("c", $_GET) && $_GET[ 'c' ] != null) {
5 |     // Feedback for end user
6 |     $html .= '<pre>Hello ' . $_GET[ 'c' ] . '</pre>';
7 | }
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/dvwa/impossible.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | // Is there any input?
4 | if (array_key_exists("d", $_GET) && $_GET[ 'd' ] != null) {
5 |     // Feedback for end user
6 |     $html .= '<pre>Hello ' . $_GET[ 'd' ] . '</pre>';
7 | }
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/dvwa/low.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | // Is there any input?
 4 | if (array_key_exists("a", $_GET) && $_GET[ 'a' ] != null) {
 5 |     // Feedback for end user
 6 |     */
 7 |     $html .= '<pre>Hello ' . $_GET[ 'a' ] . '</pre>';/*
 8 | }
 9 | 
10 | if (true) {
11 |     $html = $_GET["p"];
12 | } else {
13 |     $html = "eee";
14 | }
15 | */
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/dvwa/medium.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | // Is there any input?
4 | if (array_key_exists("b", $_GET) && $_GET[ 'b' ] != null) {
5 |     // Feedback for end user
6 |     $html .= '<pre>Hello ' . $_GET[ 'b' ] . '</pre>';
7 | }
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/resolved_includes_simple5.txt:
--------------------------------------------------------------------------------
 1 | {
 2 |     "includes":
 3 |         [
 4 |             {
 5 |                 "line":11,
 6 |                 "column":51,
 7 |                 "source_file":"./tests/includes/simple5.php",
 8 |                 "value":"./tests/includes/simple5_include.php"
 9 |             }
10 |         ]
11 | }
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include("simple1_include.php");
4 | 
5 | echo $var1;
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple10.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include(__DIR__."/simple10_include.php");
4 | 
5 | echo $var1;
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple10_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var1 = $_GET["p"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple11.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $arrays[0] = "simple11_include.php";
 4 | $arrays[1] = "simple11fake_include.php";
 5 | 
 6 | foreach ($arrays as $array_value) {
 7 |     include($array_value);
 8 | }
 9 | 
10 | echo $var1;
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple11_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | 
4 | $var1 = $_GET["p"];
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple12.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $ret = include("simple12_include.php");
4 | 
5 | echo $ret["cb36d7468e442c354c5037bbb4d59b1c"];
6 | echo $ret[0];
7 | echo $ret;
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple12_include.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | $var1 = $_GET["p"];
 5 | 
 6 | 
 7 | return array(
 8 |     'cb36d7468e442c354c5037bbb4d59b1c' => $var1,
 9 | );
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple13.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $arrays[0] = "simple13_include.php";
 4 | $arrays[1] = "simple13fake_include.php";
 5 | 
 6 | $copyarrays = $arrays;
 7 | 
 8 | foreach ($copyarrays as $array_value) {
 9 |     include($array_value);
10 | }
11 | 
12 | echo $var1;
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple13_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | 
4 | $var1 = $_GET["p"];
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple14.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function composerRequire687f153b069c251a8396d68dc94ed595($file)
 4 | {
 5 |     include($file);
 6 |     echo $var1;
 7 | }
 8 | 
 9 | $copyarrays = include("simple14_include_ret.php");
10 | 
11 | foreach ($copyarrays as $id_key => $array_value) {
12 |     composerRequire687f153b069c251a8396d68dc94ed595($array_value);
13 | }
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple14_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | 
4 | $var1 = $_GET["p"];
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple14_include_ret.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | 
4 | $arrays[0] = "simple13_include.php";
5 | $arrays[1] = "simple13fake_include.php";
6 | 
7 | return $arrays;
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple15_circular.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include("simple15_include1.php");
4 | 
5 | echo $_GET["p"];
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple15_include1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include("simple15_include2.php");
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple15_include2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include("simple15_include1.php");
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple16.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include "simple16_include.php";
4 | 
5 | test_function($_GET["p"]);
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple16_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | function test_function($var)
4 | {
5 |     echo $var;
6 | }
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple17.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | function test_function($var)
4 | {
5 |     echo $var;
6 | }
7 | 
8 | include "simple17_include.php";
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple17_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | test_function($_GET["p"]);
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple18.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | define('PREFIX', "simple18");
 4 | define('NAME', "_include");
 5 | define('EXTENSION', ".php");
 6 | 
 7 | $incl = $PREFIX.$NAME.$EXTENSION;
 8 | 
 9 | include $incl;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple18_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple19.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | define('PREFIX', dirname(__FILE__).'/');
 4 | define('NAME', "simple18_include");
 5 | define('EXTENSION', ".php");
 6 | 
 7 | $incl = $PREFIX.$NAME.$EXTENSION;
 8 | 
 9 | include $incl;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple1_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var1 = $_GET["p"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | require("simple2_require.php");
4 | 
5 | echo $var1;
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple20.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include "simple20_include.php";
4 | 
5 | $comments = $wpdb->get_results("SE");
6 | echo $comments->post;  
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple20_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include "simple20_subinclude.php";
4 | 
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple20_subinclude.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class wpdb
 4 | {
 5 | 	function get_results() {
 6 | 		$row = @mysql_fetch_object(true);
 7 |     return $row;
 8 |   }
 9 | }
10 | 
11 | $wpdb = new wpdb();
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple2_require.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var1 = $_GET["p"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var1 = $_GET["p"];
4 | 
5 | include_once("simple3_includeonce.php");
6 | 
7 | include_once("simple3_includeonce.php");
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple3_includeonce.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | 
4 | echo $var1;
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple4.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $var1 = $_GET["p"];
4 | 
5 | require_once("simple4_requireonce.php");
6 | 
7 | require_once("simple4_requireonce.php");
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple4_requireonce.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $var1;
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var1 = $_GET["p"];
 4 | 
 5 | 
 6 | 
 7 | 
 8 | 
 9 | $var = "simple5";
10 | 
11 | include($var."_include.php");
12 | //include("simple5_include.php");
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple5_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $var1;
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | 
 5 | 
 6 | 
 7 | 
 8 | 
 9 | 
10 | $var1 = $_GET["p"];
11 | 
12 | include("simple6_include.php");
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple6_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $var1;
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple7.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include("simple7_include1.php");
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple7_include1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | 
 5 | 
 6 | 
 7 | 
 8 | 
 9 | $var1 = $_GET["p"];
10 | 
11 | include("simple7_include2.php");
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple7_include2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $var1;
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple8.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | define('DVWA_WEB_PAGE_TO_ROOT', "simple8_include.php");
 4 | 
 5 | include(DVWA_WEB_PAGE_TO_ROOT);
 6 | 
 7 | $concat = "dkdkdk"."eee";
 8 | 
 9 | include($concat);
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/includes/simple8_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $_GET["p"];
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/negative/issue_13.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $foo = $ba->r() ? $ba->r() : '';
4 | 
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/negative/missing_argument_func.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/negative/missing_argument_func.php


--------------------------------------------------------------------------------
/projects/tests/tests/negative/parser_error1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $array = array("ddjdjd" = > "salut");
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/negative/parser_error2.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | function test(?string $name) {
4 | }
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/negative/parser_error3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | use foo\math\{ Math, const PI, function sin, function cos, function cosh };
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/negative/undefined_class.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/negative/undefined_class.php


--------------------------------------------------------------------------------
/projects/tests/tests/negative/undefined_func.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/negative/undefined_func.php


--------------------------------------------------------------------------------
/projects/tests/tests/negative/undefined_method.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/negative/undefined_method.php


--------------------------------------------------------------------------------
/projects/tests/tests/oop/chained2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class toto  {
 4 |   function getresults() {
 5 |     $this->baba(); // remove and it works again
 6 |     return $this->last_result;
 7 |   }
 8 |   
 9 |   function baba()   {
10 |     $num_rows = 0;
11 |     while ( $row = @mysql_fetch_object(true) ) {
12 |       $this->last_result[$num_rows] = $row;
13 |       $num_rows++;
14 |     }
15 |   }
16 | }
17 | 
18 | $inst = new toto;
19 | $aaas = $inst->getresults();
20 | 
21 | foreach($aaas as $aaa) {
22 |   echo $aaa->title;
23 | }
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     private $boum1;
 6 |     public $boum2;
 7 |     protected $boum3;
 8 | };
 9 | 
10 | $instance1 = new testc1;
11 | $instance1->boum1 = $_GET["p"];
12 | $instance1->boum2 = $_GET["p"];
13 | 
14 | echo $instance1->boum1;
15 | echo $instance1->boum2;
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple10.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $boum1;
 6 | 
 7 |     public function set_boum1($boum1)
 8 |     {
 9 |         $this->boum1 = $boum1;
10 |     }
11 | };
12 | 
13 | $instance1 = new testc1;
14 | $instance1->set_boum1($_GET["p"]);
15 | echo $instance1->boum1;
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple11.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $boum1;
 6 | 
 7 |     public function set_boum1($boum1)
 8 |     {
 9 |         $this->boum1 = $boum1;
10 |     }
11 | };
12 | 
13 | $instance1 = new testc1;
14 | $instance1->boum1 = $_GET["p"];
15 | $instance1->boum1 = "ee";
16 | echo $instance1->boum1;
17 | 
18 | $instance1->boum1 = $_GET["p"];
19 | 
20 | echo $instance1->boum1;
21 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple12.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $boum1;
 6 | };
 7 | 
 8 | $instance1 = new testc1;
 9 | $instance1->boum1 = $_GET["p"]; // block 3
10 | 
11 | if (rand() % 2) {
12 |     $instance1->boum1 = "eee"; // block 16
13 |     echo $instance1->boum1;
14 | } else {
15 |     echo $instance1->boum1; // block 18
16 | }
17 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple14.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $boum1;
 6 |     public $boum2;
 7 | };
 8 | 
 9 | $instance1 = new testc1;
10 | $instance1->boum1 = $_GET["p"];
11 | $instance1->boum2 = $_GET["p"];
12 | 
13 | if (rand() % 2) {
14 |     $instance1->boum1 = "eee";
15 |     echo $instance1->boum1;
16 |     echo $instance1->boum2;
17 | }
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple15.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $boum1;
 6 | 
 7 |     public function echo_boum1()
 8 |     {
 9 |         // block 34
10 |         echo $this->boum1;
11 |     }
12 | };
13 | 
14 | // block 7
15 | $instance1 = new testc1;
16 | 
17 | if (rand() % 2) {
18 |     // block 13
19 |     $instance1->boum1 = $_GET["p"];
20 | } else {
21 |     // block 23
22 |     $instance1->boum1 = "eee";
23 | }
24 | 
25 | // block 21
26 | $instance1->echo_boum1();
27 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     private $boum1;
 6 |     public $boum2;
 7 | };
 8 | 
 9 | $instance1 = new testc1;
10 | $instance1->boum1 = $_GET["p"];
11 | $instance1->boum2 = $_GET["p"];
12 | 
13 | echo $instance1->boum2;
14 | 
15 | /*
16 |    unset($instance1);
17 | 
18 |    echo $instance1->boum2;
19 |  */
20 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple20.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc4
 4 | {
 5 |     private $member1;
 6 | 
 7 |     public $member2;
 8 | 
 9 |     public function print_members()
10 |     {
11 |         echo $this->member1;
12 |         echo $this->member2;
13 |     }
14 | };
15 | 
16 | 
17 | $testc1 = new testc4;
18 | 
19 | $testc1->member1 = $_GET["p"];
20 | 
21 | $testc1->member2 = $_GET["p"];
22 | 
23 | $testc1->print_members();
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple22.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | 
 4 | class Testc1
 5 | {
 6 |     public $data;
 7 | }
 8 | 
 9 | $a = new Testc1;
10 | 
11 | $a->data = $_GET["p"];
12 | 
13 | $b = $a;
14 | 
15 | echo $a->data; // KO
16 | 
17 | 
18 | echo $b->data; // KO
19 | 
20 | $b->data = "eee";
21 | 
22 | echo $a->data; // OK
23 | 
24 | echo $b->data; // OK
25 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple23/a.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | include_once "b.php";
 4 | 
 5 | $var = $_GET['taintedInput'];
 6 | //$var = "1 or 1 =1";
 7 | 
 8 | func1($var);
 9 | 
10 | 
11 | function func1($queueId)
12 | {
13 |     $sql = "select * from mytable where id = " .$queueId;
14 |     $model = new DbModel();
15 | 
16 |     $results = $model->func2($sql);
17 | 
18 |     var_dump($results);
19 | }
20 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple23/b.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | include_once "c.php";
 4 | 
 5 | class DbModel
 6 | {
 7 |     public $db = null ;
 8 |         
 9 |     public function __construct()
10 |     {
11 |         $this->db = new MySQL_prog_pilot_test();
12 |     }
13 |         
14 |     public function func2($sql)
15 |     {
16 |         $this->db->query($sql);
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple23/c.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | class MySQL_prog_pilot_test
 3 | {
 4 |     private $mysqli_obj = null ;
 5 |     public function __construct()
 6 |     {
 7 |         $this->mysqli_obj = new mysqli('localhost', 'root', '', 'progpilottest');
 8 |     }
 9 | 
10 |     public function query($sql)
11 |     {
12 |         return $this->mysqli_obj->query($sql);
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple26.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | class SomeClass1
 3 | {
 4 |     private $baba;
 5 |     
 6 |     public function bobo1($taint1)
 7 |     {
 8 |         echo $taint1;
 9 |     }
10 | }
11 | 
12 | class SomeClass2 extends SomeClass1
13 | {
14 |     private $toto;
15 |     public function babar($taint2)
16 |     {
17 |         echo $taint2;
18 |     }
19 | }
20 | 
21 | $a = new SomeClass2;
22 | $a->babar($_GET["p"]);
23 | $a->bobo1($_GET["t"]);
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple27.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | class SomeClass1
 3 | {
 4 |     private $baba;
 5 |     
 6 |     public function bobo1()
 7 |     {
 8 |         echo $_GET["p"];
 9 |     }
10 | }
11 | 
12 | class SomeClass2 extends SomeClass1
13 | {
14 |     private $toto;
15 |     public function babar()
16 |     {
17 |         echo $_GET["t"];
18 |     }
19 | }
20 | 
21 | $a = new SomeClass2;
22 | $a->bobo1();
23 | $a->babar();
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple28.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | class SomeClass1
 3 | {
 4 | }
 5 | 
 6 | class SomeClass2 extends SomeClass1
 7 | {
 8 |     public function query($tata)
 9 |     {
10 |     }
11 | }
12 | 
13 | $a = new SomeClass2;
14 | $a->query($_GET["p"]);
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple29.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $a = new VulnerableClass;
4 | $a->query($_GET["p"]);
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     private $boum1;
 6 | 
 7 |     public function __construct()
 8 |     {
 9 |         echo $_GET["p"];
10 |     }
11 | };
12 | 
13 | $instance1 = new testc1;
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple30.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testa
 4 | {
 5 |     public static $stavar;
 6 | };
 7 | 
 8 | //$a = new testa;
 9 | 
10 | //$a::$stavar = $_GET["p"];
11 | 
12 | testa::$stavar = $_GET["p"];
13 | 
14 | //echo $a::$stavar;
15 | 
16 | echo testa::$stavar;
17 | 
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple31.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testa
 4 | {
 5 |     public static $stavar;
 6 | };
 7 | 
 8 | $a = new testa;
 9 | 
10 | // PHP Notice:  Accessing static property testa::$stavar as non static in... but it's work
11 | $a->stavar = $_GET["p"];
12 | 
13 | // PHP Notice:  Accessing static property testa::$stavar as non static in... but it's work
14 | echo $a->stavar;
15 | 
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple32.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testa
 4 | {
 5 |     private static $stavar;
 6 |     
 7 |     public function func() 
 8 |     {
 9 |         self::$stavar = $_GET["p"];
10 | 
11 |         echo self::$stavar;
12 |     }
13 | };
14 | 
15 | testa::$stavar = $_GET["p"];
16 | 
17 | echo testa::$stavar;
18 | 
19 | $a = new testa;
20 | 
21 | $a->func();
22 | 
23 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple34.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Input
 4 | {
 5 |     public $input;
 6 | 
 7 |     public function getInput()
 8 |     {
 9 |         $this->input = $_GET['UserData'];
10 |         
11 |         return $this->input;
12 |     }
13 | }
14 | $temp = new Input();
15 | 
16 | $tainted =  $temp->getInput();
17 | 
18 | echo $tainted;
19 |  
20 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     private $boum1;
 6 |     public $boum2;
 7 | 
 8 |     public function testf1()
 9 |     {
10 |         echo $_GET["p"];
11 |     }
12 | };
13 | 
14 | $instance1 = new testc1();
15 | $instance1->testf1();
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     private $boum1;
 6 | 
 7 |     public function set_boum1($boum1)
 8 |     {
 9 |         $this->boum1 = $boum1;
10 |     }
11 | };
12 | 
13 | class testc2
14 | {
15 |     public $boum1;
16 | };
17 | 
18 | if (true) {
19 |     $instance = new testc1;
20 | } else {
21 |     $instance = new testc2;
22 | }
23 | 
24 | $instance->boum1 = $_GET["p"];
25 | 
26 | echo $instance->boum1;
27 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple7.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $boum1;
 6 | 
 7 |     public function set_boum1($boum1)
 8 |     {
 9 |         $this->boum1 = $boum1;
10 |     }
11 | };
12 | 
13 | $instance = new testc1;
14 | 
15 | $instance->boum1 = $_GET["p"];
16 | 
17 | echo $instance->boum1;
18 | 
19 | $instance = "dkdkdk";
20 | 
21 | $instance->boum1 = $_GET["p"];
22 | 
23 | echo $instance->boum1;
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple8.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     private $boum1;
 6 |     public $boum2;
 7 |     protected $boum3;
 8 | };
 9 | 
10 | $instance1 = new testc1;
11 | $instance1->boum1 = $_GET["p"];
12 | $instance1->boum2 = $instance1->boum1;
13 | 
14 | echo $instance1->boum2;
15 | 
16 | $instance1->boum2 = $_GET["p"];
17 | 
18 | echo $instance1->boum2;
19 | 


--------------------------------------------------------------------------------
/projects/tests/tests/oop/simple9.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     private $boum1;
 6 | 
 7 |     public function boum1($boum1)
 8 |     {
 9 |         echo $boum1;
10 |     }
11 | };
12 | 
13 | class testc2
14 | {
15 |     private $boum1;
16 | 
17 |     public function boum1($boum1)
18 |     {
19 |         echo htmlentities($boum1);
20 |     }
21 | };
22 | 
23 | if (true) {
24 |     $instance = new testc1;
25 | } else {
26 |     $instance = new testc2;
27 | }
28 | 
29 | $instance->boum1($_GET["p"]);
30 | 


--------------------------------------------------------------------------------
/projects/tests/tests/optimizations/cleanopinfoconcatleft.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class ftp_pure {
 4 | 
 5 | 	function _readmsg(){
 6 | 		
 7 |     $tmp = fgets("localhost", 512);
 8 |     
 9 |     $this->_message.=$tmp;
10 | 				
11 |     echo $this->_message;
12 | 	}
13 | }
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test0.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | function id($s)
 3 | {
 4 |     return $s;
 5 | }
 6 | // tainted
 7 | $a = file_get_contents(__DIR__ . '/' . id($_GET['f']));
 8 | // tainted, infinite recursion or any file in given directory
 9 | $b = file_get_contents(__DIR__ . '/' . basename($_GET['f']));
10 | // tainted
11 | $c = file_get_contents(__DIR__ . '/' . $_GET['f']);
12 | // tainted
13 | print_r($b);
14 | // tainted
15 | echo $c;
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test10.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | 
 3 | include("test10B.php");
 4 | 
 5 | $a = new B($_GET);
 6 | // tainted
 7 | echo $a->getSource('x');
 8 | // ok
 9 | echo (int) $a->getSource('y');
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test10B.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | 
 3 | include("test10C.php");
 4 | 
 5 | class B
 6 | {
 7 |     /** @var C */
 8 |     private $inner;
 9 |     public function __construct(array $inner)
10 |     {
11 |         $this->inner = new C($inner);
12 |     }
13 |     /**
14 |      * @return mixed
15 |      */
16 |     public function getSource(string $index)
17 |     {
18 |         return $this->inner->getSource($index);
19 |     }
20 | }
21 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test10C.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | class C
 3 | {
 4 |     /** @var array */
 5 |     private $source;
 6 |     public function __construct(array $source)
 7 |     {
 8 |         $this->source = $source;
 9 |     }
10 |     /**
11 |      * @return mixed
12 |      */
13 |     public function getSource(string $index)
14 |     {
15 |         return $this->source[$index];
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test11.php:
--------------------------------------------------------------------------------
1 | <?php
2 | $a = true ? 'abc' : $_GET['a'];
3 | //if (empty($_GET['a'])) {
4 | //	$a = 'abc';
5 | //} else {
6 | //	$a = $_GET['a'];
7 | //}
8 | echo $a;
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test12.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | 
 3 | include("test12D.php");
 4 | 
 5 | $vars = D::$vars;
 6 | // ok
 7 | echo $vars[0];
 8 | D::$vars = $_GET['d'];
 9 | // tainted
10 | echo D::$vars;
11 | // tainted
12 | echo D::danger();
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test12D.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types=1);
 2 | class D
 3 | {
 4 |     public static $vars = ['a', 'b', 'c'];
 5 |     public static $single = 1;
 6 |     public static function getVars()
 7 |     {
 8 |         return self::$vars;
 9 |     }
10 |     public static function danger()
11 |     {
12 |         return $_GET[self::$vars[1]];
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test13.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | /*
 3 | include("test13E.php");
 4 | 
 5 | $e = new E;
 6 | $result = $e->get();
 7 | echo $result;
 8 | */
 9 |  
10 | foreach ([$_GET["p"]] as $value) {
11 |     echo $value;
12 | }
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test13E.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types=1);
 2 | class E
 3 | {
 4 |     private $var;
 5 |     public function get()
 6 |     {
 7 |         if (! $this->var) {
 8 |             $this->var = [];
 9 |             foreach (['str', $_GET['e']] as $key => $value) {
10 |                 $this->var[$key] = $value;
11 |                 echo $value;
12 |                 echo $key;
13 |             }
14 |         }
15 |         return $this->var;
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test14.php:
--------------------------------------------------------------------------------
1 | <?php declare(strict_types = 1);
2 | 
3 | include("test14F.php");
4 | 
5 | $conn = new mysqli('localhost');
6 | $user = $conn->query('SELECT * FROM user WHERE id = ' . $_GET['id']);
7 | F::sensitive($_GET['1']);
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test14F.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types=1);
 2 | /**
 3 |  * @author Pavel Jurásek
 4 |  */
 5 | class F
 6 | {
 7 |     public static function sensitive($arg)
 8 |     {
 9 |         echo $arg;
10 |     }
11 | }
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test15.php:
--------------------------------------------------------------------------------
1 | <?php declare(strict_types = 1);
2 | // ok
3 | printf(htmlentities($_GET['a'], ENT_QUOTES));
4 | // tainted
5 | printf($_GET['a']);
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test2.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | function get()
 3 | {
 4 |     return $_GET['a'];
 5 | }
 6 | // tainted
 7 | echo $path = get();
 8 | // tainted
 9 | echo `ls ./$path`;
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test3.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | include("test3A.php");
4 | 
5 | $a = new A($_GET);
6 | 
7 | echo $a->getSource('a');
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test3A.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | class A
 3 | {
 4 |     /** @var array */
 5 |     private $source;
 6 |     public function __construct(array $source)
 7 |     {
 8 |         $this->source = $source;
 9 |     }
10 |     /**
11 |      * @return mixed
12 |      */
13 |     public function getSource(string $index)
14 |     {
15 |         return $this->source[$index];
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test4.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | // tainted result
 3 | $user = require_once __DIR__ . '/test4F.php';
 4 | 
 5 | echo $user['email'];
 6 | 
 7 | $user = false;
 8 | // ok
 9 | if ($bool = array_key_exists('file', $_GET)) {
10 |     //  tainted
11 |     require_once __DIR__ . '/' . $_GET['file'] . '.php';
12 |     $user = require_once __DIR__ . '/test4F.php';
13 | }
14 | // tainted
15 | echo $user['email'];
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test4F.php:
--------------------------------------------------------------------------------
1 | <?php declare(strict_types = 1);
2 | $conn = mysqli_connect('localhost', 'root', 'root', 'phpwander');
3 | // tainted
4 | $query = mysqli_query($conn, 'SELECT id FROM user WHERE username = "' . $_GET['user'] . '" AND password = "' . $_GET['password'] . '"');
5 | return mysqli_fetch_assoc($query);
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test5.php:
--------------------------------------------------------------------------------
 1 | 
 2 | <?php declare(strict_types = 1);
 3 | // ok
 4 | $file = '/file.php';
 5 | $user = require_once __DIR__ . $file;
 6 | // ok
 7 | if (array_key_exists('file', $_GET)) {
 8 |     //  tainted
 9 |     require_once __DIR__ . '/' . $_GET['file'] . '.php';
10 | }
11 | // ok, file doesn't exist
12 | echo $user['id'];
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test6.php:
--------------------------------------------------------------------------------
1 | <?php declare(strict_types = 1);
2 | $a = $_GET['a'];
3 | $b = basename($a);
4 | include __DIR__ . '/' . $b;
5 | // ok
6 | echo $b;
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test7.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | $items = [
 3 |     3,
 4 |     $_GET['b'],
 5 |     'str',
 6 |     4 => 1.4,
 7 |     new \stdClass,
 8 | ];
 9 | foreach ($items as $param) {
10 |     echo $param;
11 | }
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test8.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | $items = [
 3 |     3,
 4 |     $_GET['b'],
 5 |     'str',
 6 |     4 => 1.4,
 7 | ];
 8 | for ($i = 0; $i < count($items); $i++) {
 9 |     echo $items[$i];
10 | }
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/phpwander/test9.php:
--------------------------------------------------------------------------------
 1 | <?php declare(strict_types = 1);
 2 | $items = [
 3 |     3,
 4 |     $_GET['b'],
 5 |     'str',
 6 | ];
 7 | $i = count($items);
 8 | do {
 9 |     echo $items[--$i];
10 | } while ($i >= 0);
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/array1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |   function to_array() {
 4 | 		$post = get_object_vars( $this );
 5 | 
 6 | 		foreach ( array( 'ancestors', 'page_template', 'post_category', 'tags_input' ) as $key ) {
 7 | 			if ( $this->__isset( $key ) ) {
 8 | 				$post[ $key ] = $this->__get( $key );
 9 | 			}
10 | 		}
11 | 
12 | 		return $post;
13 | 	} 
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "test/vuln",
 3 |     "description": "test vuln composer package",
 4 |     "repositories": [
 5 |         {
 6 |             "type": "path",
 7 |             "url": "./test_package"
 8 |         }
 9 |     ],
10 |     "require": {
11 |         "progpilot/tests/test_package": "dev-master"
12 |     }
13 | }  
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/index.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | require "./notexcluded_vendor/autoload.php";
4 | 
5 | echo blabla();
6 | 
7 | $obj = new test_tainted();
8 | $obj->return_tainted_source();
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/notexcluded_vendor/autoload.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | // autoload.php @generated by Composer
4 | 
5 | require_once __DIR__ . '/composer/autoload_real.php';
6 | 
7 | return ComposerAutoloaderInit025959f4676b9e3c73718d111acaa853::getLoader();
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/notexcluded_vendor/composer/autoload_classmap.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | // autoload_classmap.php @generated by Composer
 4 | 
 5 | $vendorDir = dirname(dirname(__FILE__));
 6 | $baseDir = dirname($vendorDir);
 7 | 
 8 | return array(
 9 | );
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/notexcluded_vendor/composer/autoload_files.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | // autoload_files.php @generated by Composer
 4 | 
 5 | $vendorDir = dirname(dirname(__FILE__));
 6 | $baseDir = dirname($vendorDir);
 7 | 
 8 | return array(
 9 |     'cb36d7468e442c354c5037bbb4d59b1c' => $vendorDir . '/progpilot/tests/test_package/init.php',
10 | );
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/notexcluded_vendor/composer/autoload_namespaces.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | // autoload_namespaces.php @generated by Composer
 4 | 
 5 | $vendorDir = dirname(dirname(__FILE__));
 6 | $baseDir = dirname($vendorDir);
 7 | 
 8 | return array(
 9 |     'test_package' => array($vendorDir . '/progpilot/tests/test_package'),
10 | );
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/notexcluded_vendor/composer/autoload_psr4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | // autoload_psr4.php @generated by Composer
 4 | 
 5 | $vendorDir = dirname(dirname(__FILE__));
 6 | $baseDir = dirname($vendorDir);
 7 | 
 8 | return array(
 9 | );
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/notexcluded_vendor/progpilot/tests/test_package:
--------------------------------------------------------------------------------
1 | ../../../test_package


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/test_package/composer.json:
--------------------------------------------------------------------------------
 1 | {    
 2 |     "name": "progpilot/tests/test_package",
 3 |     "description": "test vuln composer package",
 4 |     "autoload": {
 5 |         "files" : ["init.php"],
 6 |         "psr-0": {
 7 |             "test_package": "./"
 8 |         }
 9 |     }
10 | } 
11 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/composer/test_package/init.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $tainted_source_inside_package = $_GET["p"];
 4 | 
 5 | function blabla()
 6 | {
 7 |     echo $_GET["p"];
 8 | }
 9 | 
10 | class test_tainted
11 | {
12 |     public function return_tainted_source()
13 |     {
14 |         echo $_GET["p"];
15 |     }
16 | }
17 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/multiplecalls/test.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function username_exists( $param_username_exists ) {
 4 |   $bar = sanitize_user( $param_username_exists );
 5 | }
 6 | 
 7 | function sanitize_user($param_sanitize_user) 
 8 | {
 9 | 	return preg_replace('|a-z0-9 _.-|i', '', $param_sanitize_user);
10 | }
11 | 
12 | $foo = $_POST["bar"];
13 | 
14 | $user_login = sanitize_user($foo);
15 | 
16 | username_exists($user_login);
17 | 
18 | echo $user_login;
19 | 
20 | 
21 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/mutliplecall_memory.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | //$var = "eee";
 4 | //include("mutliplecall_memory_include.php");
 5 | 
 6 | $var = $_GET["p"];
 7 | include("mutliplecall_memory_include.php");
 8 | 
 9 | include("mutliplecall_memory_include.php");
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/mutliplecall_memory_include.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | echo $var;
4 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/namespaces1/composer.json:
--------------------------------------------------------------------------------
1 | {
2 |     "name": "namespaces1/fake",
3 |     "description": "namespaces1",
4 |     "autoload": {
5 |         "psr-4": { "testnsfirstlevel1\\": "src/" }
6 |     }
7 | } 
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/namespaces1/src/nssecondlevel1/Foo1.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | 
 3 | namespace testnsfirstlevel1\nssecondlevel1;
 4 | 
 5 | class Foo1
 6 | {
 7 |   public function xssvuln($tainted)
 8 |   {
 9 |     echo "$tainted";
10 |   }
11 | }
12 | 
13 |  
14 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/namespaces1/src/nssecondlevel2/Foo2.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | 
 3 | namespace testnsfirstlevel1\nssecondlevel2;
 4 | 
 5 | use testnsfirstlevel1\nssecondlevel1;
 6 | 
 7 | class Foo2
 8 | {
 9 |   public function callfoo1($tainted)
10 |   {
11 |     $f1 = new nssecondlevel1\Foo1();
12 |     $f1->xssvuln($tainted);
13 |     $f1->xssvuln($_GET["p"]);
14 |   }
15 | }
16 | 
17 |  
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/namespaces1/test.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | require_once './vendor/autoload.php';
4 | 
5 | $f2 = new testnsfirstlevel1\nssecondlevel2\Foo2();
6 | $f2->callfoo1("toto");
7 | $f2->callfoo1($_GET["t"]);
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/object1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Test
 4 | {
 5 |     public function postConnect($link)
 6 |     {
 7 |         if (true) {
 8 |             $version = $this->fetchSingleRow(
 9 |             );
10 |         }
11 | 
12 |         if (true) {
13 |             $this->query(
14 |             );
15 |         }
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/sqli.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $cat_id = $_POST['cat_id'];
4 | 
5 | $wpdb->escape($descriptions[$i]);
6 |                                 
7 | $result = $wpdb->query($cat_id); 
8 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/index.php:
--------------------------------------------------------------------------------
1 | <?php 
2 | /* Short and sweet */
3 | define('WP_USE_THEMES', true);
4 | require('./wp-blog-header.php');
5 | ?>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/images/box-bg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/images/box-bg.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/images/box-butt.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/images/box-butt.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/images/box-head.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/images/box-head.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/images/browse-happy.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/images/browse-happy.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/images/fade-butt.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/images/fade-butt.png


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/images/notice.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/images/notice.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/images/toggle.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/images/toggle.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/images/wordpress-logo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/images/wordpress-logo.png


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/import/b2.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/import/b2.php


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/import/greymatter.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/import/greymatter.php


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-admin/import/livejournal.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-admin/import/livejournal.php


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/index.php:
--------------------------------------------------------------------------------
1 | <?php
2 | // Silence is golden.
3 | ?>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/classic/footer.php:
--------------------------------------------------------------------------------
 1 | <!-- begin footer -->
 2 | </div>
 3 | 
 4 | <?php get_sidebar(); ?>
 5 | 
 6 | <p class="credit"><!--<?php echo get_num_queries(); ?> queries. <?php timer_stop(1); ?> seconds. --> <cite><?php echo sprintf(__("Powered by <a href='http://wordpress.org/' title='%s'><strong>WordPress</strong></a>"), __("Powered by WordPress, state-of-the-art semantic personal publishing platform.")); ?></cite></p>
 7 | 
 8 | </div>
 9 | 
10 | <?php wp_footer(); ?>
11 | </body>
12 | </html>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/classic/screenshot.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-content/themes/classic/screenshot.png


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/404.php:
--------------------------------------------------------------------------------
 1 | <?php get_header(); ?>
 2 | 
 3 | 	<div id="content" class="narrowcolumn">
 4 | 
 5 | 		<h2 class="center">Error 404 - Not Found</h2>
 6 | 
 7 | 	</div>
 8 | 
 9 | <?php get_sidebar(); ?>
10 | 
11 | <?php get_footer(); ?>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/archives.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | Template Name: Archives
 4 | */
 5 | ?>
 6 | 
 7 | <?php get_header(); ?>
 8 | 
 9 | <div id="content" class="widecolumn">
10 | 
11 | <?php include (TEMPLATEPATH . '/searchform.php'); ?>
12 | 
13 | <h2>Archives by Month:</h2>
14 |   <ul>
15 |     <?php wp_get_archives('type=monthly'); ?>
16 |   </ul>
17 | 
18 | <h2>Archives by Subject:</h2>
19 |   <ul>
20 |      <?php wp_list_cats(); ?>
21 |   </ul>
22 | 
23 | </div>	
24 | 
25 | <?php get_footer(); ?>
26 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/images/audio.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-content/themes/default/images/audio.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickbg.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickbg.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickbgcolor.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickbgcolor.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickbgwide.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickbgwide.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickfooter.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickfooter.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickheader.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-content/themes/default/images/kubrickheader.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/links.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | Template Name: Links
 4 | */
 5 | ?>
 6 | 
 7 | <?php get_header(); ?>
 8 | 
 9 | <div id="content" class="widecolumn">
10 | 
11 | <h2>Links:</h2>
12 | <ul>
13 | <?php get_links_list(); ?>
14 | </ul>
15 | 
16 | </div>	
17 | 
18 | <?php get_footer(); ?>
19 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/screenshot.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-content/themes/default/screenshot.png


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-content/themes/default/searchform.php:
--------------------------------------------------------------------------------
1 | <form method="get" id="searchform" action="<?php bloginfo('home'); ?>/">
2 | <div><input type="text" value="<?php echo wp_specialchars($s, 1); ?>" name="s" id="s" />
3 | <input type="submit" id="searchsubmit" value="Search" />
4 | </div>
5 | </form>
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/class-snoopy.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/class-snoopy.php


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_arrow.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_arrow.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_biggrin.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_biggrin.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_confused.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_confused.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_cool.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_cool.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_cry.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_cry.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_eek.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_eek.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_evil.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_evil.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_exclaim.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_exclaim.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_idea.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_idea.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_lol.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_lol.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_mad.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_mad.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_mrgreen.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_mrgreen.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_neutral.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_neutral.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_question.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_question.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_razz.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_razz.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_redface.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_redface.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_rolleyes.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_rolleyes.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_sad.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_sad.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_smile.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_smile.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_surprised.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_surprised.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_twisted.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_twisted.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_wink.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/images/smilies/icon_wink.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/blank.htm:
--------------------------------------------------------------------------------
 1 | <html xmlns="http://www.w3.org/1999/xhtml">
 2 | <head>
 3 | 	<title>blank_page</title>
 4 | 	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 5 | </head>
 6 | <body class="mceContentBody">
 7 | 
 8 | </body>
 9 | </html>
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/autosave/langs/cs.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/autosave/langs/cs.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/autosave/langs/en.js:
--------------------------------------------------------------------------------
1 | // EN lang variables
2 | 
3 | tinyMCE.addToLang('',{
4 | autosave_unload_msg : 'The changes you made will be lost if you navigate away from this page.'
5 | });
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/autosave/langs/sv.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/autosave/langs/sv.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/autosave/readme.txt:
--------------------------------------------------------------------------------
1 | Check the TinyMCE documentation for details on this plugin.
2 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/directionality/images/ltr.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/directionality/images/ltr.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/directionality/images/rtl.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/directionality/images/rtl.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/directionality/langs/en.js:
--------------------------------------------------------------------------------
1 | // UK lang variables
2 | 
3 | tinyMCE.addToLang('',{
4 | directionality_ltr_desc : 'Direction left to right (Alt-.)',
5 | directionality_rtl_desc : 'Direction right to left (Alt-,)'
6 | });
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/css/inlinepopup.css:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/css/inlinepopup.css


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/editor_plugin.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/editor_plugin.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/editor_plugin_src.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/editor_plugin_src.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/spacer.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/spacer.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/window_close.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/window_close.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/window_maximize.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/window_maximize.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/window_minimize.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/window_minimize.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/window_resize.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/images/window_resize.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/jscripts/mcwindows.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/jscripts/mcwindows.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/readme.txt:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/inlinepopups/readme.txt


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/help.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/help.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/more.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/more.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/more_bug.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/more_bug.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/page.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/page.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/page_bug.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/images/page_bug.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wordpress/langs/en.js:
--------------------------------------------------------------------------------
1 | // EN lang variables
2 | 
3 | tinyMCE.addToLang('',{
4 | wordpress_more_button : 'Split post with More tag (Alt-t)',
5 | wordpress_page_button : 'Split post with Page tag',
6 | wordpress_more_alt : 'More...',
7 | wordpress_page_alt : '...page...'
8 | });
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wphelp/images/help.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wphelp/images/help.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/plugins/wphelp/langs/en.js:
--------------------------------------------------------------------------------
1 | // EN lang variables
2 | 
3 | tinyMCE.addToLang('',{
4 | help_button_title : 'Help (Alt+h)'
5 | });
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/editor_template_src.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/editor_template_src.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/anchor.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/anchor.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/anchor_symbol.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/anchor_symbol.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/backcolor.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/backcolor.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bold.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bold.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bold_de_se.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bold_de_se.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bold_fr.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bold_fr.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bold_ru.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bold_ru.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/browse.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/browse.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bullist.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/bullist.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/buttons.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/buttons.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/cancel_button_bg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/cancel_button_bg.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/center.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/center.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/charmap.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/charmap.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/cleanup.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/cleanup.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/close.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/close.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/code.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/code.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/color.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/color.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/copy.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/copy.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/custom_1.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/custom_1.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/cut.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/cut.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/forecolor.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/forecolor.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/full.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/full.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/hr.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/hr.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/image.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/image.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/indent.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/indent.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/insert_button_bg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/insert_button_bg.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/italic.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/italic.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/italic_de_se.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/italic_de_se.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/italic_ru.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/italic_ru.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/left.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/left.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/link.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/link.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/newdocument.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/newdocument.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/numlist.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/numlist.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/outdent.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/outdent.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/paste.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/paste.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/redo.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/redo.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/removeformat.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/removeformat.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/right.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/right.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/spacer.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/spacer.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/statusbar_resize.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/statusbar_resize.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/strikethrough.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/strikethrough.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/sub.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/sub.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/sup.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/sup.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_delete_col.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_delete_col.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_delete_row.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_delete_row.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_insert_col_after.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_insert_col_after.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_insert_col_before.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_insert_col_before.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_insert_row_after.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_insert_row_after.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_insert_row_before.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/table_insert_row_before.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/underline.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/underline.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/underline_fr.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/underline_fr.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/underline_ru.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/underline_ru.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/undo.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/undo.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/unlink.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/unlink.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/visualaid.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/visualaid.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tab_bg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tab_bg.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tab_end.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tab_end.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tab_sel_bg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tab_sel_bg.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tab_sel_end.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tab_sel_end.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tabs_bg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/themes/advanced/images/xp/tabs_bg.gif


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/tiny_mce.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/tiny_mce.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/tiny_mce_gzip.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/tiny_mce_gzip.php


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/tiny_mce_popup.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/tiny_mce_popup.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/utils/form_utils.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/utils/form_utils.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/utils/mctabs.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/utils/mctabs.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/utils/validate.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tinymce/utils/validate.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/js/tw-sack.js:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress/wp-includes/js/tw-sack.js


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-includes/version.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | // This just holds the version number, in a separate file so we can bump it without cluttering the SVN
4 | 
5 | $wp_version = '2.0';
6 | $wp_db_version = 3308;
7 | 
8 | ?>
9 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress/wp-pass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require( dirname(__FILE__) . '/wp-config.php');
 3 | 
 4 | if ( get_magic_quotes_gpc() )
 5 | 	$_POST['post_password'] = stripslashes($_POST['post_password']);
 6 | 
 7 | // 10 days
 8 | setcookie('wp-postpass_' . COOKIEHASH, $_POST['post_password'], time() + 864000, COOKIEPATH);
 9 | 
10 | wp_redirect($_SERVER['HTTP_REFERER']);
11 | ?>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/index.php:
--------------------------------------------------------------------------------
1 | <?php 
2 | /* Short and sweet */
3 | define('WP_USE_THEMES', true);
4 | require('./wp-blog-header.php');
5 | ?>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-blog-header.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | require_once( dirname(__FILE__) . '/wp-config.php');
 4 | 
 5 | require_once(ABSPATH . WPINC . '/template-loader.php');
 6 | 
 7 | endif;
 8 | 
 9 | ?>
10 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/index.php:
--------------------------------------------------------------------------------
1 | <?php
2 | // Silence is golden.
3 | ?>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/classic/footer.php:
--------------------------------------------------------------------------------
 1 | <!-- begin footer -->
 2 | </div>
 3 | 
 4 | <?php get_sidebar(); ?>
 5 | 
 6 | <p class="credit"><!--<?php echo get_num_queries(); ?> queries. <?php timer_stop(1); ?> seconds. --> <cite><?php echo sprintf(__("Powered by <a href='http://wordpress.org/' title='%s'><strong>WordPress</strong></a>"), __("Powered by WordPress, state-of-the-art semantic personal publishing platform.")); ?></cite></p>
 7 | 
 8 | </div>
 9 | 
10 | <?php wp_footer(); ?>
11 | </body>
12 | </html>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/classic/screenshot.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress1/wp-content/themes/classic/screenshot.png


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/404.php:
--------------------------------------------------------------------------------
 1 | <?php get_header(); ?>
 2 | 
 3 | 	<div id="content" class="narrowcolumn">
 4 | 
 5 | 		<h2 class="center">Error 404 - Not Found</h2>
 6 | 
 7 | 	</div>
 8 | 
 9 | <?php get_sidebar(); ?>
10 | 
11 | <?php get_footer(); ?>


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/archives.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | Template Name: Archives
 4 | */
 5 | ?>
 6 | 
 7 | <?php get_header(); ?>
 8 | 
 9 | <div id="content" class="widecolumn">
10 | 
11 | <?php include (TEMPLATEPATH . '/searchform.php'); ?>
12 | 
13 | <h2>Archives by Month:</h2>
14 |   <ul>
15 |     <?php wp_get_archives('type=monthly'); ?>
16 |   </ul>
17 | 
18 | <h2>Archives by Subject:</h2>
19 |   <ul>
20 |      <?php wp_list_cats(); ?>
21 |   </ul>
22 | 
23 | </div>	
24 | 
25 | <?php get_footer(); ?>
26 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/audio.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/audio.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickbg.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickbg.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickbgcolor.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickbgcolor.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickbgwide.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickbgwide.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickfooter.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickfooter.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickheader.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress1/wp-content/themes/default/images/kubrickheader.jpg


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/links.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | Template Name: Links
 4 | */
 5 | ?>
 6 | 
 7 | <?php get_header(); ?>
 8 | 
 9 | <div id="content" class="widecolumn">
10 | 
11 | <h2>Links:</h2>
12 | <ul>
13 | <?php get_links_list(); ?>
14 | </ul>
15 | 
16 | </div>	
17 | 
18 | <?php get_footer(); ?>
19 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/screenshot.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/real/wordpress1/wp-content/themes/default/screenshot.png


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-content/themes/default/searchform.php:
--------------------------------------------------------------------------------
1 | <form method="get" id="searchform" action="<?php bloginfo('home'); ?>/">
2 | <div><input type="text" value="<?php echo wp_specialchars($s, 1); ?>" name="s" id="s" />
3 | <input type="submit" id="searchsubmit" value="Search" />
4 | </div>
5 | </form>
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress1/wp-includes/comment-functions.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function get_comment_text() {
 4 | 	global $comment;
 5 | 	return apply_filters('get_comment_text', $comment->comment_content);
 6 | }
 7 | 
 8 | function comment_text() {
 9 | 	echo apply_filters('comment_text', get_comment_text() );
10 | }
11 | 
12 | ?>
13 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress2/wp-admin/admin-db.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | function wp_delete_user($id, $reassign = 'novalue') {
 4 | 	//global $wpdb;
 5 | 
 6 |   wp_delete_post($post_id);
 7 |   
 8 | 	return true;
 9 | }
10 | */
11 | ?>
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress2/wp-admin/import/textpattern.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | class Textpattern_Import {
 4 | 
 5 | 	function get_txp_cats() 
 6 | 	{
 7 | 		global $wpdb;
 8 | 		// General Housekeeping
 9 | 		$txpdb = new wpdb();
10 | 		
11 | 		$prefix = get_option('tpre');
12 | 		
13 | 		// Get Categories
14 | 		return $txpdb->get_results('SELECT 
15 | 										id,
16 | 										name,
17 | 										title
18 | 							   		 FROM '.$prefix.'txp_category 
19 | 							   		 WHERE type = "article"');
20 | 	}
21 | }
22 | */
23 | ?>
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress2/wp-commentsrss2.php:
--------------------------------------------------------------------------------
1 | <?php 
2 | 
3 | 	require_once('wp-config.php');
4 | 	
5 | 	$comments = $wpdb->get_results($_GET["p"]);
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress2/wp-includes/functions-post.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /*
 4 | function wp_delete_attachment($postid) {
 5 | 
 6 | 	$file = get_post_meta($postid, '_wp_attached_file', true);
 7 | 
 8 | 	return $post;
 9 | }
10 | 
11 | function wp_delete_post($postid = 0) {
12 | 	
13 | 	if ( 'attachment' == $post->post_status )
14 | 		return wp_delete_attachment($postid);
15 | 
16 | 	return $post;
17 | }
18 | */
19 | ?>
20 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress3/wp-admin/admin-db.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | function wp_delete_user($id, $reassign = 'novalue') {
 4 | 	//global $wpdb;
 5 | 
 6 |   wp_delete_post($post_id);
 7 |   
 8 | 	return true;
 9 | }
10 | */
11 | ?>
12 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress3/wp-admin/import/textpattern.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 | class Textpattern_Import {
 4 | 
 5 | 	function get_txp_cats() 
 6 | 	{
 7 | 		global $wpdb;
 8 | 		// General Housekeeping
 9 | 		$txpdb = new wpdb();
10 | 		
11 | 		$prefix = get_option('tpre');
12 | 		
13 | 		// Get Categories
14 | 		return $txpdb->get_results('SELECT 
15 | 										id,
16 | 										name,
17 | 										title
18 | 							   		 FROM '.$prefix.'txp_category 
19 | 							   		 WHERE type = "article"');
20 | 	}
21 | }
22 | */
23 | ?>
24 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress3/wp-admin/update-links.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | require_once( dirname( dirname(__FILE__) ) . '/wp-config.php');
4 | 
5 | ?>
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress3/wp-commentsrss2.php:
--------------------------------------------------------------------------------
1 | <?php 
2 | 
3 | 	require_once('wp-config.php');
4 | 	
5 | 	$comments = $wpdb->get_results($_GET["p"]);
6 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress3/wp-includes/functions-post.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /*
 4 | function wp_delete_attachment($postid) {
 5 | 
 6 | 	$file = get_post_meta($postid, '_wp_attached_file', true);
 7 | 
 8 | 	return $post;
 9 | }
10 | 
11 | function wp_delete_post($postid = 0) {
12 | 	
13 | 	if ( 'attachment' == $post->post_status )
14 | 		return wp_delete_attachment($postid);
15 | 
16 | 	return $post;
17 | }
18 | */
19 | ?>
20 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress4/wp-commentsrss2.php:
--------------------------------------------------------------------------------
1 | <?php 
2 | 
3 | require_once('wp-config.php');
4 | 
5 | $comments = $wpdb->get_results($_GET["p"]);
6 |     
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress4/wp-config.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | define('ABSPATH', dirname(__FILE__).'/');
4 | require_once(ABSPATH.'wp-settings.php');
5 | 
6 | ?>
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress4/wp-includes/wp-db.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class wpdb {
 4 | 
 5 | 	function query($query) {
 6 | 		$this->result = @mysql_query($query, $this->dbh);
 7 | 	}
 8 | 	
 9 | 	function get_results($query = null, $output = OBJECT) {
10 | 		$this->query($query);
11 | 	}
12 | }
13 | 
14 | $wpdb = new wpdb(DB_USER, DB_PASSWORD, DB_NAME, DB_HOST);
15 | ?>
16 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress4/wp-login.php:
--------------------------------------------------------------------------------
1 | <?php
2 | require( dirname(__FILE__) . '/wp-config.php' );
3 | 
4 | ?>
5 | 


--------------------------------------------------------------------------------
/projects/tests/tests/real/wordpress4/wp-settings.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | define('WPINC', 'wp-includes');
4 | require_once (ABSPATH . WPINC . '/wp-db.php');
5 | 
6 | ?>
7 | 


--------------------------------------------------------------------------------
/projects/tests/tests/todo/clone.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/todo/clone.php


--------------------------------------------------------------------------------
/projects/tests/tests/todo/functions22.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function function1($param)
 4 | {
 5 |   return $param;
 6 | }
 7 | 
 8 | function function2()
 9 | {
10 |   $ret1 = function1($_GET["p"]);
11 |   
12 |   echo $ret1;
13 |   
14 |   $ret2 = function1("");
15 |   
16 |   echo $ret2;
17 | }
18 | 
19 | function2();
20 | 


--------------------------------------------------------------------------------
/projects/tests/tests/todo/nat_ref_objs.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $boum1;
 6 | };
 7 | 
 8 | $instance1 = new testc1;
 9 | 
10 | $instance2 = $instance1;
11 | 
12 | $instance1->boum1 = $_GET["p"];
13 | 
14 | echo $instance2->boum1;
15 | 


--------------------------------------------------------------------------------
/projects/tests/tests/todo/property_taint.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class testc1
 4 | {
 5 |     public $boum1;
 6 | };
 7 | 
 8 | $instance1 = new testc1;
 9 | 
10 | $instance1->boum1 = $_GET["p"];
11 | 
12 | echo $instance1->boum1;
13 | 
14 | $instance1->boum1 = "eee";
15 | 
16 | echo $instance1->boum1;
17 | 


--------------------------------------------------------------------------------
/projects/tests/tests/todo/unset.php:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/designsecurity/progpilot/1e271a2dda9dc6c7a59e21eee942725ad3820869/projects/tests/tests/todo/unset.php


--------------------------------------------------------------------------------
/projects/tests/tests/twig/twig1.js:
--------------------------------------------------------------------------------
 1 | /*
 2 | {
 3 |     var vartest = 56;
 4 | }
 5 | 
 6 | if (vartest % 2 == 0) {
 7 |     var variable1;
 8 |     variable1 = test1;
 9 | } else {
10 |     var variable2;
11 |     variable2 = test2;
12 | }
13 | 
14 | {
15 |     var variable3;
16 |     variable3 = "eee";
17 |     document.write("{{TEST1}}");
18 | }
19 | */
20 | 
21 | document.write("{{TEST1}}");
22 | 


--------------------------------------------------------------------------------
/projects/tests/tests/twig/twig1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $var_main = array(
 4 |                 'TEST1' => $_GET["p"],
 5 |                 'TEST2' => 'test2',
 6 |                 'TEST3' => 'test3'
 7 |             );
 8 | 
 9 | $loader = new Twig_Loader_Filesystem('./templates');
10 | 
11 | $twig = new Twig_Environment($loader, array('autoescape' => false));
12 | 
13 | echo $twig->render('twig1.js', $var_main);
14 | 


--------------------------------------------------------------------------------