diff options
| author | jvoisin | 2016-07-16 18:45:38 +0200 |
|---|---|---|
| committer | jvoisin | 2016-07-16 18:45:38 +0200 |
| commit | 36c4a697f91cb17518ae2cb11375fba13278e570 (patch) | |
| tree | ba31c91c2bbb847b36aad2be78d6bb9c8ab7fe56 | |
| parent | a57878b13cb5b202b14dc36c4bde0b1cb2deead0 (diff) | |
Remove an obsolete test
| -rw-r--r-- | php-malware-finder/php.yar | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/php-malware-finder/php.yar b/php-malware-finder/php.yar index fce5ea3..ba1130e 100644 --- a/php-malware-finder/php.yar +++ b/php-malware-finder/php.yar | |||
| @@ -54,7 +54,6 @@ rule ObfuscatedPhp | |||
| 54 | $too_many_chr = /(chr\([\d]+\)\.){8}/ // concatenation of more than eight `chr()` | 54 | $too_many_chr = /(chr\([\d]+\)\.){8}/ // concatenation of more than eight `chr()` |
| 55 | $concat = /(\$[^\n\r]+\.){5}/ // concatenation of more than 5 words | 55 | $concat = /(\$[^\n\r]+\.){5}/ // concatenation of more than 5 words |
| 56 | $var_as_func = /\$_(GET|POST|COOKIE|REQUEST)\s*\[[^\]]+\]\s*\(/ | 56 | $var_as_func = /\$_(GET|POST|COOKIE|REQUEST)\s*\[[^\]]+\]\s*\(/ |
| 57 | $gif = /^GIF89/ | ||
| 58 | condition: | 57 | condition: |
| 59 | any of them and not IsWhitelisted | 58 | any of them and not IsWhitelisted |
| 60 | } | 59 | } |