summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-01-11enable strict_mode in example configBen Fuhrmannek
2022-01-11skip test if pcntl is missingBen Fuhrmannek
2022-01-10renamed ini protection example rulesBen Fuhrmannek
2022-01-10added conditions to ini protection exampleBen Fuhrmannek
2022-01-10removed some debugging outputBen Fuhrmannek
2022-01-07added docker start rule and linked-clone to makefileBen Fuhrmannek
2022-01-07remove slides from source repoBen Fuhrmannek
2022-01-07added dangerous extension checkBen Fuhrmannek
2022-01-07proper test case cleanupBen Fuhrmannek
2022-01-07fixed invalid return valueBen Fuhrmannek
2022-01-06prevent double checks and fixed segfault on return value accessBen Fuhrmannek
2022-01-06make tests for running tests w/ and w/o debug modeBen Fuhrmannek
2022-01-06added stderr debug output option to configure instead of CFLAGSBen Fuhrmannek
2022-01-05Delete coverity.ymlBeF
2022-01-05added codeql workflowBeF
2022-01-05skip old php check for testingBen Fuhrmannek
2022-01-05.Ben Fuhrmannek
2022-01-05removed test case for github actions + PHP 7Ben Fuhrmannek
2022-01-05better github build scriptBen Fuhrmannek
2022-01-05fix test case for php7Ben Fuhrmannek
2021-12-20allow '@set' as a synonym for 'set' in rules filesBen Fuhrmannek
2021-12-20make set + @log/@info/@error conditionalBen Fuhrmannek
2021-12-20removed upload script x-bit check at load time, thus allowing root-user to ↵Ben Fuhrmannek
execute test cases
2021-12-20check compatibility with linuxBen Fuhrmannek
2021-12-20removed confusung newlines for better reading/searchingBen Fuhrmannek
2021-12-20updated cached scanner fileBen Fuhrmannek
2021-12-20added @warn/@err to config syntaxBen Fuhrmannek
2021-12-14test cases for testing edge cases, eval and cmd executionBen Fuhrmannek
2021-12-14fix: apply checks to internal function calls, too, so we can match internal ↵Ben Fuhrmannek
class methods that are not hooked
2021-12-14fix: include class name in eval whitelist matchingBen Fuhrmannek
2021-12-14code cleanup + removed line breaks for easier IDE integrationBen Fuhrmannek
2021-12-14get class name from execution_dataBen Fuhrmannek
2021-12-14fixed typo where execution hook may not have been activeBen Fuhrmannek
2021-12-13build sp for php8.1Ben Fuhrmannek
2021-12-13fixed use after free + PHP 7 compatibilityBen Fuhrmannek
2021-12-13fixed test case with new behaviourBen Fuhrmannek
2021-11-30fixed test case for PHP 8.1.Ben Fuhrmannek
ini_set argument types changed with PHP 8.1, so the test is using ini_get now.
2021-11-30PHP 8.1 compatibility with streams/includes + fix for ticksBen Fuhrmannek
2021-11-30clarify control flowBen Fuhrmannek
2021-11-30fixed crash when parsing arguments with PHP 8.1Ben Fuhrmannek
2021-11-30added @log logging feature to config parserBen Fuhrmannek
2021-11-30php 8.1 compatibilityBen Fuhrmannek
2021-11-26PHP8 update parameters name in "move_uploaded_file" (#406)pfdutot
In the 8.0.8 and 8.1 version of PHP, the parameters name for move_uploaded_file are "from" and "to". This config file fail to apply the relevant rules unless the parameter names are updated using "to" instead of "destination".
2021-11-22docs fix: path in filename() must be absolute (#404)Jakub Onderka
2021-11-19added old php version checkBen Fuhrmannek
2021-11-19replaced call_user_func with C level callBen Fuhrmannek
2021-11-19fixed test skip conditionBen Fuhrmannek
2021-11-11more tests for xxe + optional xml supportBen Fuhrmannek
2021-11-11inverted logic. set xxe_protection.enable() instead of disable_xxe.disable()Ben Fuhrmannek
2021-11-11detect dummy or short encryption keyBen Fuhrmannek