Dangerous PHP sinks reference

Dangerous PHP sinks reference

TL;DR: Catalogue of PHP function families that turn user input into impact — eval / exec / include / unserialize / preg_replace-e / extract / mail.

Stub — to be filled in.

What it is

TODO

Preconditions / where it applies

TODO

Technique

TODO

Detection and defence

TODO

References

  • TODO