From 36c4a697f91cb17518ae2cb11375fba13278e570 Mon Sep 17 00:00:00 2001 From: jvoisin Date: Sat, 16 Jul 2016 18:45:38 +0200 Subject: Remove an obsolete test --- php-malware-finder/php.yar | 1 - 1 file changed, 1 deletion(-) diff --git a/php-malware-finder/php.yar b/php-malware-finder/php.yar index fce5ea3..ba1130e 100644 --- a/php-malware-finder/php.yar +++ b/php-malware-finder/php.yar @@ -54,7 +54,6 @@ rule ObfuscatedPhp $too_many_chr = /(chr\([\d]+\)\.){8}/ // concatenation of more than eight `chr()` $concat = /(\$[^\n\r]+\.){5}/ // concatenation of more than 5 words $var_as_func = /\$_(GET|POST|COOKIE|REQUEST)\s*\[[^\]]+\]\s*\(/ - $gif = /^GIF89/ condition: any of them and not IsWhitelisted } -- cgit v1.3