diff options
| author | shaddai | 2019-10-22 08:12:26 +0200 |
|---|---|---|
| committer | jvoisin | 2019-10-22 06:12:26 +0000 |
| commit | 2eaca5164f8ba9ad43ddb645a547d393508d0590 (patch) | |
| tree | 4490e1bc1eff3f994a81a113aff82d2b91e78b6a | |
| parent | cbea06c526cc8f2dfb024d68f90557c3c96663e9 (diff) | |
Remove a duplicate keyword in php.yar
This should fix issue #94
| -rw-r--r-- | php-malware-finder/php.yar | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/php-malware-finder/php.yar b/php-malware-finder/php.yar index 6a93fe1..029aaf9 100644 --- a/php-malware-finder/php.yar +++ b/php-malware-finder/php.yar | |||
| @@ -159,7 +159,7 @@ rule DangerousPhp | |||
| 159 | $ = "suhosin.executor.func.blacklist" nocase | 159 | $ = "suhosin.executor.func.blacklist" nocase |
| 160 | $ = "unregister_tick_function" fullword nocase | 160 | $ = "unregister_tick_function" fullword nocase |
| 161 | $ = "win32_create_service" fullword nocase | 161 | $ = "win32_create_service" fullword nocase |
| 162 | $ = "xmlrpc_decode" fullword nocase nocase | 162 | $ = "xmlrpc_decode" fullword nocase |
| 163 | $ = /ob_start\s*\(\s*[^\)]/ //ob_start('assert'); echo $_REQUEST['pass']; ob_end_flush(); | 163 | $ = /ob_start\s*\(\s*[^\)]/ //ob_start('assert'); echo $_REQUEST['pass']; ob_end_flush(); |
| 164 | 164 | ||
| 165 | $whitelist = /escapeshellcmd|escapeshellarg/ nocase | 165 | $whitelist = /escapeshellcmd|escapeshellarg/ nocase |