phpSAFE

phpSAFE - PHP Security Analysis For Everyone

A PHP Static Code Analyzer for XSS and SQLi

It can deal with PHP code written with or without Classes

It is also configured out of the box to verify the source code of WordPress plugins without the need to have WordPress installed

Copyright (C) 2013, 2014, 2015 by Jose Fonseca (jozefonseca at gmail dot com)

Post DSN2015 version

Contributors

Jose Fonseca (josefonseca at ipg dot pt , jozefonseca at gmail dot com)

Paulo Nunes (pnunes at ipg dot pt)

ICSE 2017 data is in the file ICSE data.txt