Perhaps this tool has already been mentioned on this list...
SpikeSource released the Spike PHP Security Audit Tool on June 30:
http://developer.spikesource.com/projects/phpsecaudit
This is a new Open Source tools based on the popular RATS C based
auditing tool. PHP5 and call-time pass-by-reference are currently
required, but a PHP4 version is coming out this week.
cheers
SAM :)
--
Sam Stevens, solutions_PHP
http://www.solutionsphp.com/
Open source? Of course!
phpdirectory - a coder's arsenal
http://www.phpdirectory.com/
**************************************************
Tired of sifting through all that SPAM? We recommend using
MailWasher, an excellent tool for socking it to spammers.
Download a free trial:
http://fta.firetrust.com/index.cgi?id=5966&page=1
**************************************************
IMPORTANT - CONFIDENTIAL INFORMATION
Privileged/Confidential Information may be contained in this message.
If you are not the addressee indicated in this message (or
responsible for delivery of the message to such person), you may not
copy or deliver this message to anyone. In such case, you should
destroy this message and kindly notify the sender by reply email.
-------------------------------------------------------------------------
Sponsored by: Watchfire
AppScan 6.5 is now available! New features for Web Services Testing,
Advanced Automated Capabilities for Penetration Testers, PCI Compliance
Reporting, Token Analysis, Authentication testing, Automated JavaScript
execution and much more.
Download a Free Trial of AppScan today!
https://www.watchfire.com/securearea/appscancamp.aspx?id=70150000000CYkc
-------------------------------------------------------------------------
