Analysis of php code regarding unscreened requests, etc.

Question

I wonder if there is a solution that statically parses PHP source files.

I know PHPLint and another solution which, for example, check the code style.

My interest is more general: I would like to analyze a problem specific to the Internet, for example. unshielded requests , etc.

Is there such a - perhaps conceptually incomplete - solution?

Answer 1

Perhaps this is useful to you? RIPS - Static Source Code Analyzer for Vulnerabilities in PHP Scripts