This post originated from an RSS feed registered with PHP Buzz
by Paul M Jones.
Original Post: Toward a Secure Compiler for Savant
Feed Title: Paul M. Jones
Feed URL: http://paul-m-jones.com/archives/category/programming/php/feed
Feed Description: If it's worth doing, it's worth over-doing.
Savant uses PHP for its template markup, but also supports extneral compilers. Unfortunately, the example compiler in the distro is not that secure.
But! Joshua Eichorn has put together a spiffy PHP code analysis tool called PHPCodeAnalyzer. It takes PHP code, runs the PHP tokenizer on it, and ...