From 2eaca5164f8ba9ad43ddb645a547d393508d0590 Mon Sep 17 00:00:00 2001
From: shaddai
Date: Tue, 22 Oct 2019 08:12:26 +0200
Subject: Remove a duplicate keyword in php.yar

This should fix issue #94---
 php-malware-finder/php.yar | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/php-malware-finder/php.yar b/php-malware-finder/php.yar
index 6a93fe1..029aaf9 100644
--- a/php-malware-finder/php.yar
+++ b/php-malware-finder/php.yar
@@ -159,7 +159,7 @@ rule DangerousPhp
         $ = "suhosin.executor.func.blacklist" nocase
         $ = "unregister_tick_function" fullword nocase
         $ = "win32_create_service" fullword nocase
-        $ = "xmlrpc_decode" fullword nocase nocase
+        $ = "xmlrpc_decode" fullword nocase 
         $ = /ob_start\s*\(\s*[^\)]/  //ob_start('assert'); echo $_REQUEST['pass']; ob_end_flush();
 
         $whitelist = /escapeshellcmd|escapeshellarg/ nocase
-- 
cgit v1.3