snuffleupagus/scripts, branch log2file Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! http://git.dustri.org/snuffleupagus/atom?h=log2file 2024-03-24T19:39:47Z Don't forbid use of assert in PHP 8+ 2024-03-24T19:39:47Z bohwaz 2024-03-24T18:07:25Z urn:sha1:f558f62469b06098a77f95579dcf0ba5675c801c Also ignore function definitions 2024-03-24T16:37:59Z bohwaz 2024-03-23T20:54:18Z urn:sha1:435977aca7655f12db77e2f255b701a84c8c79e0 Don't whitelist files if the function name is actually a method of a class 2024-03-24T16:37:59Z bohwaz 2024-03-23T20:41:27Z urn:sha1:859d69a3e0b4b0afedd0f45df0f4bc4ff2a72d0e Include functions from global space that are prefixed with \ 2024-02-19T15:14:06Z Christoph Amthor 2024-02-19T13:16:59Z urn:sha1:697a6c0a8c1fa601caf201e8a2ea470f312dc11b Replace broken magic number with constant 2020-11-18T09:28:20Z Dirk Weise 2020-11-18T09:28:20Z urn:sha1:3c3048032fb0a79d04765d2b4f064f012208ced8 PHP's parser token constants are dynamically generated, values can change from version to version. See: https://www.php.net/manual/en/tokens.php Provide a php script, to get rid of the python one for test suite 2018-12-15T14:35:21Z Remi Collet 2018-12-15T14:35:21Z urn:sha1:19fcea2853bd95195b1c43e119ad8d870d82e587 This commit adds a php version of the upload_validation.py script. Add ignore hash feature in `generate_rules.php` (#208) 2018-08-17T13:44:21Z xXx-caillou-xXx 2018-08-17T13:44:21Z urn:sha1:d538eef4fb62174ea32d94e28f1f5a20c5094426 https://github.com/nbs-system/snuffleupagus/issues/206 php-nightly is now allowed to fail 2018-02-22T15:35:39Z jvoisin 2018-02-22T15:35:39Z urn:sha1:884bbbdf5f0916a840bb9fc8f40c14163d58fad8 PHP is breaking too many things on nightly, we'll only support releases from now on. This should also make our vld-based file-upload checker more resilient: no more random warnings on stderr. Provide a script for upload validation 2018-02-12T12:55:33Z jvoisin 2018-02-12T12:55:33Z urn:sha1:696ebc4ae68f4c7c2b803c917de365b98621b3a8 The Python script is using vld (https://derickrethans.nl/projects.html#vld) to check for malicious opcodes. Add `curl_multi_exec` to the magic php script 2017-10-12T21:40:35Z jvoisin 2017-10-12T21:40:35Z urn:sha1:428c1098031fefb0ef73e3b8be8cecad148a6ab5