Welcome to Exakat’s documentation!¶
Contents:
- 1. Introduction
- 2. Exakat features
- 2.1. Features list
- 2.2. 350 analyzers
- 2.3. Compatible with PHP 5.2 to 7.3-dev
- 2.4. Migration guide from 5.2 to 7.3 and dev
- 2.5. List bug fixes for your code
- 2.6. appinfo(): the list of PHP features
- 2.7. List PHP directives that impact your code
- 2.8. Framework and application support
- 2.9. Class Hierarchy Diagram
- 3. Installation
- 3.1. Summary
- 3.2. Requirements
- 3.3. Download Exakat
- 3.4. Quick installation with OSX
- 3.5. Full installation with Debian/Ubuntu
- 3.6. Quick installation with Debian/Ubuntu
- 3.7. Installation guide with Composer
- 3.8. Using multiple PHP versions
- 3.9. Optional installations
- 3.10. Installation guide with Docker
- 3.11. Installation guide with Vagrant and Ansible
- 4. Upgrading
- 5. Exakat tutorial
- 6. Frequently Asked Questions
- 6.1. Summary
- 6.2. I need special command to get my code
- 6.3. Can I checkout that branch?
- 6.4. Can I clone with my ssh keys?
- 6.5. After init, my project has no code!
- 6.6. The project is too big
- 6.7. Java Out Of Memory Error
- 6.8. How can I run a very large project?
- 6.9. Does exakat runs on Java 8?
- 6.10. Where can I find the report
- 6.11. Can I run exakat on local code?
- 6.12. Can I ignore a dir or a file?
- 6.13. Can I audit only one folder in vendor?
- 6.14. Can I run Exakat with PHP 5?
- 6.15. I get the error ‘The executable ‘ansible-playbook’ Vagrant is trying to run was not found’
- 6.16. Can I run exakat on Windows?
- 6.17. Does exakat send my code to a central server?
- 6.18. “cat: write error: Broken pipe” : is it bad?
- 7. Exakat commands
- 8. Themes
- 9. Rules list
- 9.1. Introduction
- 9.2. $HTTP_RAW_POST_DATA
- 9.3. $this Belongs To Classes Or Traits
- 9.4. $this Is Not An Array
- 9.5. $this Is Not For Static Methods
- 9.6. ** For Exponent
- 9.7. ::class
- 9.8. @ Operator
- 9.9. Abstract Or Implements
- 9.10. Abstract Static Methods
- 9.11. Access Protected Structures
- 9.12. Accessing Private
- 9.13. Action Should Be In Controller
- 9.14. Add Default Value
- 9.15. Adding Zero
- 9.16. Aliases Usage
- 9.17. All Uppercase Variables
- 9.18. Already Parents Interface
- 9.19. Altering Foreach Without Reference
- 9.20. Alternative Syntax Consistence
- 9.21. Always Anchor Regex
- 9.22. Always Positive Comparison
- 9.23. Ambiguous Array Index
- 9.24. Ambiguous Static
- 9.25. Ambiguous Visibilities
- 9.26. Anonymous Classes
- 9.27. Argument Should Be Typehinted
- 9.28. Assert Function Is Reserved
- 9.29. Assign Default To Properties
- 9.30. Assign With And
- 9.31. Assigned Twice
- 9.32. Avoid Concat In Loop
- 9.33. Avoid Double Prepare
- 9.34. Avoid Large Array Assignation
- 9.35. Avoid Non Wordpress Globals
- 9.36. Avoid Optional Properties
- 9.37. Avoid PHP Superglobals
- 9.38. Avoid Parenthesis
- 9.39. Avoid Real
- 9.40. Avoid Self In Interface
- 9.41. Avoid Those Hash Functions
- 9.42. Avoid Using stdClass
- 9.43. Avoid array_push()
- 9.44. Avoid array_unique()
- 9.45. Avoid get_class()
- 9.46. Avoid glob() Usage
- 9.47. Avoid set_error_handler $context Argument
- 9.48. Avoid sleep()/usleep()
- 9.49. Bad Constants Names
- 9.50. Bail Out Early
- 9.51. Binary Glossary
- 9.52. Bracketless Blocks
- 9.53. Break Outside Loop
- 9.54. Break With 0
- 9.55. Break With Non Integer
- 9.56. Buried Assignation
- 9.57. Cache Variable Outside Loop
- 9.58. CakePHP 2.5.0 Undefined Classes
- 9.59. CakePHP 2.6.0 Undefined Classes
- 9.60. CakePHP 2.7.0 Undefined Classes
- 9.61. CakePHP 2.8.0 Undefined Classes
- 9.62. CakePHP 2.9.0 Undefined Classes
- 9.63. CakePHP 3.0 Deprecated Class
- 9.64. CakePHP 3.0.0 Undefined Classes
- 9.65. CakePHP 3.1.0 Undefined Classes
- 9.66. CakePHP 3.2.0 Undefined Classes
- 9.67. CakePHP 3.3 Deprecated Class
- 9.68. CakePHP 3.3.0 Undefined Classes
- 9.69. CakePHP 3.4.0 Undefined Classes
- 9.70. CakePHP Used
- 9.71. Callback Needs Return
- 9.72. Calltime Pass By Reference
- 9.73. Can’t Count Non-Countable
- 9.74. Can’t Disable Class
- 9.75. Can’t Extend Final
- 9.76. Can’t Throw Throwable
- 9.77. Cant Inherit Abstract Method
- 9.78. Cant Instantiate Class
- 9.79. Cant Use Return Value In Write Context
- 9.80. Case Insensitive Constants
- 9.81. Cast To Boolean
- 9.82. Catch Overwrite Variable
- 9.83. Check All Types
- 9.84. Check JSON
- 9.85. Child Class Removes Typehint
- 9.86. Class Const With Array
- 9.87. Class Could Be Final
- 9.88. Class Function Confusion
- 9.89. Class Name Case Difference
- 9.90. Class Should Be Final By Ocramius
- 9.91. Class, Interface Or Trait With Identical Names
- 9.92. Classes Mutually Extending Each Other
- 9.93. Classes/UnreachableConstant
- 9.94. Close Tags
- 9.95. Closure Could Be A Callback
- 9.96. Closure May Use $this
- 9.97. Common Alternatives
- 9.98. Compact Inexistant Variable
- 9.99. Compare Hash
- 9.100. Compared Comparison
- 9.101. Concrete Visibility
- 9.102. Configure Extract
- 9.103. Const Visibility Usage
- 9.104. Const With Array
- 9.105. Constant Class
- 9.106. Constant Comparison
- 9.107. Constant Scalar Expressions
- 9.108. Constants Created Outside Its Namespace
- 9.109. Constants With Strange Names
- 9.110. Continue Is For Loop
- 9.111. Could Be Abstract Class
- 9.112. Could Be Class Constant
- 9.113. Could Be Else
- 9.114. Could Be Private Class Constant
- 9.115. Could Be Protected Class Constant
- 9.116. Could Be Protected Method
- 9.117. Could Be Protected Property
- 9.118. Could Be Static
- 9.119. Could Be Static Closure
- 9.120. Could Be Typehinted Callable
- 9.121. Could Make A Function
- 9.122. Could Return Void
- 9.123. Could Typehint
- 9.124. Could Use Alias
- 9.125. Could Use Compact
- 9.126. Could Use Short Assignation
- 9.127. Could Use Try
- 9.128. Could Use __DIR__
- 9.129. Could Use array_fill_keys
- 9.130. Could Use array_unique
- 9.131. Could Use self
- 9.132. Could Use str_repeat()
- 9.133. Crc32() Might Be Negative
- 9.134. Curly Arrays
- 9.135. Dangling Array References
- 9.136. Deep Definitions
- 9.137. Define With Array
- 9.138. Defined View Property
- 9.139. Dependant Trait
- 9.140. Deprecated Functions
- 9.141. Deprecated Methodcalls in Cake 3.2
- 9.142. Deprecated Methodcalls in Cake 3.3
- 9.143. Deprecated Static calls in Cake 3.3
- 9.144. Deprecated Trait in Cake 3.3
- 9.145. Dereferencing String And Arrays
- 9.146. Detect Current Class
- 9.147. Direct Call To __clone
- 9.148. Direct Injection
- 9.149. Do In Base
- 9.150. Don’t Change Incomings
- 9.151. Don’t Echo Error
- 9.152. Don’t Loop On Yield
- 9.153. Don’t Read And Write In One Expression
- 9.154. Don’t Send $this In Constructor
- 9.155. Don’t Unset Properties
- 9.156. Dont Change The Blind Var
- 9.157. Dont Mix ++
- 9.158. Double Assignation
- 9.159. Double Instructions
- 9.160. Double array_flip()
- 9.161. Drop Else After Return
- 9.162. Drop Substr Last Arg
- 9.163. Dynamic Library Loading
- 9.164. Echo Or Print
- 9.165. Echo With Concat
- 9.166. Ellipsis Usage
- 9.167. Else If Versus Elseif
- 9.168. Empty Blocks
- 9.169. Empty Classes
- 9.170. Empty Function
- 9.171. Empty Instructions
- 9.172. Empty Interfaces
- 9.173. Empty List
- 9.174. Empty Namespace
- 9.175. Empty Slots In Arrays
- 9.176. Empty Traits
- 9.177. Empty Try Catch
- 9.178. Empty With Expression
- 9.179. Encoded Simple Letters
- 9.180. Error Messages
- 9.181. Eval() Usage
- 9.182. Exception Order
- 9.183. Exit() Usage
- 9.184. Exponent Usage
- 9.185. Failed Substr Comparison
- 9.186. Fetch One Row Format
- 9.187. Final Class Usage
- 9.188. Final Methods Usage
- 9.189. Find Key Directly
- 9.190. Flexible Heredoc
- 9.191. For Using Functioncall
- 9.192. Foreach Don’t Change Pointer
- 9.193. Foreach Needs Reference Array
- 9.194. Foreach On Object
- 9.195. Foreach Reference Is Not Modified
- 9.196. Foreach With list()
- 9.197. Forgotten Interface
- 9.198. Forgotten Thrown
- 9.199. Forgotten Visibility
- 9.200. Forgotten Whitespace
- 9.201. Fully Qualified Constants
- 9.202. Function Subscripting
- 9.203. Function Subscripting, Old Style
- 9.204. Functions Removed In PHP 5.4
- 9.205. Functions Removed In PHP 5.5
- 9.206. Getting Last Element
- 9.207. Global Inside Loop
- 9.208. Global Usage
- 9.209. Group Use Declaration
- 9.210. Group Use Trailing Comma
- 9.211. Hardcoded Passwords
- 9.212. Hash Algorithms
- 9.213. Hash Algorithms Incompatible With PHP 5.3
- 9.214. Hash Algorithms Incompatible With PHP 5.4/5.5
- 9.215. Hash Algorithms Incompatible With PHP 7.1-
- 9.216. Hash Will Use Objects
- 9.217. Heredoc Delimiter
- 9.218. Hexadecimal In String
- 9.219. Hidden Use Expression
- 9.220. Htmlentities Calls
- 9.221. Identical Conditions
- 9.222. Identical Consecutive Expression
- 9.223. Identical On Both Sides
- 9.224. If With Same Conditions
- 9.225. Iffectations
- 9.226. Illegal Name For Method
- 9.227. Implement Is For Interface
- 9.228. Implemented Methods Are Public
- 9.229. Implicit Global
- 9.230. Implied If
- 9.231. Inclusion Wrong Case
- 9.232. Incompatible Signature Methods
- 9.233. Incompilable Files
- 9.234. Inconsistent Elseif
- 9.235. Indices Are Int Or String
- 9.236. Indirect Injection
- 9.237. Instantiating Abstract Class
- 9.238. Integer As Property
- 9.239. Interpolation
- 9.240. Invalid Constant Name
- 9.241. Invalid Octal In String
- 9.242. Invalid Pack Format
- 9.243. Invalid Regex
- 9.244. Is Actually Zero
- 9.245. Is Zend Framework 1 Controller
- 9.246. Is Zend Framework 1 Helper
- 9.247. Is Zend View File
- 9.248. Isset Multiple Arguments
- 9.249. Join file()
- 9.250. List Short Syntax
- 9.251. List With Appends
- 9.252. List With Keys
- 9.253. List With Reference
- 9.254. Local Globals
- 9.255. Locally Unused Property
- 9.256. Logical Mistakes
- 9.257. Logical Should Use Symbolic Operators
- 9.258. Logical To in_array
- 9.259. Lone Blocks
- 9.260. Long Arguments
- 9.261. Lost References
- 9.262. Magic Visibility
- 9.263. Make Global A Property
- 9.264. Make One Call With Array
- 9.265. Malformed Octal
- 9.266. Method Collision Traits
- 9.267. Method Could Be Private Method
- 9.268. Method Signature Must Be Compatible
- 9.269. Methodcall On New
- 9.270. Mismatch Type And Default
- 9.271. Mismatched Default Arguments
- 9.272. Mismatched Ternary Alternatives
- 9.273. Mismatched Typehint
- 9.274. Missing Cases In Switch
- 9.275. Missing Include
- 9.276. Missing New ?
- 9.277. Missing Parenthesis
- 9.278. Mistaken Concatenation
- 9.279. Mixed Concat And Interpolation
- 9.280. Mixed Keys Arrays
- 9.281. Mkdir Default
- 9.282. Modernize Empty With Expression
- 9.283. Multiple Alias Definitions
- 9.284. Multiple Alias Definitions Per File
- 9.285. Multiple Class Declarations
- 9.286. Multiple Classes In One File
- 9.287. Multiple Constant Definition
- 9.288. Multiple Definition Of The Same Argument
- 9.289. Multiple Exceptions Catch()
- 9.290. Multiple Identical Trait Or Interface
- 9.291. Multiple Index Definition
- 9.292. Multiple Type Variable
- 9.293. Multiples Identical Case
- 9.294. Multiply By One
- 9.295. Must Call Parent Constructor
- 9.296. Must Return Methods
- 9.297. Named Regex
- 9.298. Negative Power
- 9.299. Nested Ifthen
- 9.300. Nested Ternary
- 9.301. Never Used Parameter
- 9.302. Never Used Properties
- 9.303. New Constants In PHP 7.2
- 9.304. New Functions In PHP 5.4
- 9.305. New Functions In PHP 5.5
- 9.306. New Functions In PHP 5.6
- 9.307. New Functions In PHP 7.0
- 9.308. New Functions In PHP 7.1
- 9.309. New Functions In PHP 7.2
- 9.310. New Functions In PHP 7.3
- 9.311. Next Month Trap
- 9.312. No Boolean As Default
- 9.313. No Choice
- 9.314. No Class As Typehint
- 9.315. No Class In Global
- 9.316. No Count With 0
- 9.317. No Direct Call To Magic Method
- 9.318. No Direct Input To Wpdb
- 9.319. No Direct Usage
- 9.320. No Echo In Route Callable
- 9.321. No Echo Outside View
- 9.322. No Empty Regex
- 9.323. No Global Modification
- 9.324. No Hardcoded Hash
- 9.325. No Hardcoded Ip
- 9.326. No Hardcoded Path
- 9.327. No Hardcoded Port
- 9.328. No List With String
- 9.329. No Magic With Array
- 9.330. No Need For Else
- 9.331. No Net For Xml Load
- 9.332. No Parenthesis For Language Construct
- 9.333. No Plus One
- 9.334. No Public Access
- 9.335. No Real Comparison
- 9.336. No Reference For Static Property
- 9.337. No Reference For Ternary
- 9.338. No Reference On Left Side
- 9.339. No Return For Generator
- 9.340. No Return Or Throw In Finally
- 9.341. No Return Used
- 9.342. No Self Referencing Constant
- 9.343. No String With Append
- 9.344. No Substr Minus One
- 9.345. No Substr() One
- 9.346. No array_merge() In Loops
- 9.347. No get_class() With Null
- 9.348. No isset() With empty()
- 9.349. Non Ascii Variables
- 9.350. Non Static Methods Called In A Static
- 9.351. Non-constant Index In Array
- 9.352. Non-lowercase Keywords
- 9.353. Nonce Creation
- 9.354. Not A Scalar Type
- 9.355. Not Not
- 9.356. Null On New
- 9.357. Objects Don’t Need References
- 9.358. Old Style Constructor
- 9.359. Old Style __autoload()
- 9.360. One If Is Sufficient
- 9.361. One Letter Functions
- 9.362. One Variable String
- 9.363. Only Variable For Reference
- 9.364. Only Variable Passed By Reference
- 9.365. Only Variable Returned By Reference
- 9.366. Or Die
- 9.367. Order Of Declaration
- 9.368. Overwriting Variable
- 9.369. Overwritten Exceptions
- 9.370. Overwritten Literals
- 9.371. PHP 7.0 New Classes
- 9.372. PHP 7.0 New Interfaces
- 9.373. PHP 7.0 Removed Directives
- 9.374. PHP 7.0 Scalar Typehints
- 9.375. PHP 7.1 Microseconds
- 9.376. PHP 7.1 Removed Directives
- 9.377. PHP 7.1 Scalar Typehints
- 9.378. PHP 7.2 Deprecations
- 9.379. PHP 7.2 Object Keyword
- 9.380. PHP 7.2 Removed Functions
- 9.381. PHP 7.2 Scalar Typehints
- 9.382. PHP 7.3 Last Empty Argument
- 9.383. PHP 7.3 Removed Functions
- 9.384. PHP 70 Removed Functions
- 9.385. PHP Keywords As Names
- 9.386. PHP5 Indirect Variable Expression
- 9.387. PHP7 Dirname
- 9.388. Parent First
- 9.389. Parent, Static Or Self Outside Class
- 9.390. Parenthesis As Parameter
- 9.391. Pathinfo() Returns May Vary
- 9.392. Php 7 Indirect Expression
- 9.393. Php 7.1 New Class
- 9.394. Php 7.2 New Class
- 9.395. Php7 Relaxed Keyword
- 9.396. Phpinfo
- 9.397. Possible Increment
- 9.398. Possible Infinite Loop
- 9.399. Pre-increment
- 9.400. Prepare Placeholder
- 9.401. Preprocess Arrays
- 9.402. Preprocessable
- 9.403. Print And Die
- 9.404. Printf Number Of Arguments
- 9.405. Private Function Usage
- 9.406. Processing Collector
- 9.407. Property Could Be Local
- 9.408. Property Could Be Private Property
- 9.409. Property Used In One Method Only
- 9.410. Property Variable Confusion
- 9.411. Queries In Loops
- 9.412. Raised Access Level
- 9.413. Random Without Try
- 9.414. Randomly Sorted Arrays
- 9.415. Redeclared PHP Functions
- 9.416. Redefined Class Constants
- 9.417. Redefined Default
- 9.418. Redefined Private Property
- 9.419. Redefined Property
- 9.420. Register Globals
- 9.421. Relay Function
- 9.422. Repeated Interface
- 9.423. Repeated Regex
- 9.424. Repeated print()
- 9.425. Reserved Keywords In PHP 7
- 9.426. Results May Be Missing
- 9.427. Rethrown Exceptions
- 9.428. Return True False
- 9.429. Return With Parenthesis
- 9.430. Reuse Variable
- 9.431. Safe Curl Options
- 9.432. Same Conditions In Condition
- 9.433. Same Variables Foreach
- 9.434. Scalar Or Object Property
- 9.435. Sequences In For
- 9.436. Session Lazy Write
- 9.437. Set Cookie Safe Arguments
- 9.438. Setlocale() Uses Constants
- 9.439. Several Instructions On The Same Line
- 9.440. Short Open Tags
- 9.441. Short Syntax For Arrays
- 9.442. Should Always Prepare
- 9.443. Should Be Single Quote
- 9.444. Should Chain Exception
- 9.445. Should Have Destructor
- 9.446. Should Make Alias
- 9.447. Should Make Ternary
- 9.448. Should Preprocess Chr
- 9.449. Should Regenerate Session Id
- 9.450. Should Typecast
- 9.451. Should Use Coalesce
- 9.452. Should Use Constants
- 9.453. Should Use Foreach
- 9.454. Should Use Function
- 9.455. Should Use Local Class
- 9.456. Should Use Math
- 9.457. Should Use Operator
- 9.458. Should Use Prepared Statement
- 9.459. Should Use SetCookie()
- 9.460. Should Use array_column()
- 9.461. Should Use array_filter()
- 9.462. Should Use session_regenerateid()
- 9.463. Should Yield With Key
- 9.464. Silently Cast Integer
- 9.465. Simple Global Variable
- 9.466. Simple Switch
- 9.467. Simplify Regex
- 9.468. Slice Arrays First
- 9.469. SlimPHP 1.0.0 Undefined Classes
- 9.470. SlimPHP 1.1.0 Undefined Classes
- 9.471. SlimPHP 1.2.0 Undefined Classes
- 9.472. SlimPHP 1.3.0 Undefined Classes
- 9.473. SlimPHP 1.5.0 Undefined Classes
- 9.474. SlimPHP 1.6.0 Undefined Classes
- 9.475. SlimPHP 2.0.0 Undefined Classes
- 9.476. SlimPHP 2.1.0 Undefined Classes
- 9.477. SlimPHP 2.2.0 Undefined Classes
- 9.478. SlimPHP 2.3.0 Undefined Classes
- 9.479. SlimPHP 2.4.0 Undefined Classes
- 9.480. SlimPHP 2.5.0 Undefined Classes
- 9.481. SlimPHP 2.6.0 Undefined Classes
- 9.482. SlimPHP 3.0.0 Undefined Classes
- 9.483. SlimPHP 3.1.0 Undefined Classes
- 9.484. SlimPHP 3.2.0 Undefined Classes
- 9.485. SlimPHP 3.3.0 Undefined Classes
- 9.486. SlimPHP 3.4.0 Undefined Classes
- 9.487. SlimPHP 3.5.0 Undefined Classes
- 9.488. SlimPHP 3.6.0 Undefined Classes
- 9.489. SlimPHP 3.7.0 Undefined Classes
- 9.490. SlimPHP 3.8.0 Undefined Classes
- 9.491. Slow Functions
- 9.492. Sqlite3 Requires Single Quotes
- 9.493. Static Loop
- 9.494. Static Methods Called From Object
- 9.495. Static Methods Can’t Contain $this
- 9.496. Strange Name For Constants
- 9.497. Strange Name For Variables
- 9.498. Strange Names For Methods
- 9.499. Strict Comparison With Booleans
- 9.500. String May Hold A Variable
- 9.501. Strings With Strange Space
- 9.502. Strpos Too Much
- 9.503. Strpos()-like Comparison
- 9.504. Strtr Arguments
- 9.505. Substring First
- 9.506. Suspicious Comparison
- 9.507. Switch Fallthrough
- 9.508. Switch To Switch
- 9.509. Switch With Too Many Default
- 9.510. Switch Without Default
- 9.511. Ternary In Concat
- 9.512. Test Then Cast
- 9.513. Throw Functioncall
- 9.514. Throw In Destruct
- 9.515. Thrown Exceptions
- 9.516. Throws An Assignement
- 9.517. Timestamp Difference
- 9.518. Too Many Children
- 9.519. Too Many Finds
- 9.520. Too Many Injections
- 9.521. Too Many Local Variables
- 9.522. Too Many Native Calls
- 9.523. Too Many Parameters
- 9.524. Trailing Comma In Calls
- 9.525. Typehinted References
- 9.526. Uncaught Exceptions
- 9.527. Unchecked Resources
- 9.528. Unconditional Break In Loop
- 9.529. Undeclared Static Property
- 9.530. Undefined ::class
- 9.531. Undefined Caught Exceptions
- 9.532. Undefined Class 2.0
- 9.533. Undefined Class 2.1
- 9.534. Undefined Class 2.2
- 9.535. Undefined Class 2.3
- 9.536. Undefined Class 2.4
- 9.537. Undefined Class 2.5
- 9.538. Undefined Class 3.0
- 9.539. Undefined Class Constants
- 9.540. Undefined Classes
- 9.541. Undefined Constants
- 9.542. Undefined Functions
- 9.543. Undefined Insteadof
- 9.544. Undefined Interfaces
- 9.545. Undefined Parent
- 9.546. Undefined Properties
- 9.547. Undefined Trait
- 9.548. Undefined Variable
- 9.549. Undefined Zend 1.10
- 9.550. Undefined Zend 1.11
- 9.551. Undefined Zend 1.12
- 9.552. Undefined Zend 1.8
- 9.553. Undefined Zend 1.9
- 9.554. Undefined static:: Or self::
- 9.555. Unescaped Variables In Templates
- 9.556. Unicode Escape Partial
- 9.557. Unicode Escape Syntax
- 9.558. Unitialized Properties
- 9.559. Unknown Directive Name
- 9.560. Unknown Pcre2 Option
- 9.561. Unkown Regex Options
- 9.562. Unpreprocessed Values
- 9.563. Unreachable Code
- 9.564. Unresolved Catch
- 9.565. Unresolved Classes
- 9.566. Unresolved Instanceof
- 9.567. Unresolved Use
- 9.568. Unserialize Second Arg
- 9.569. Unset In Foreach
- 9.570. Unthrown Exception
- 9.571. Unused Arguments
- 9.572. Unused Classes
- 9.573. Unused Constants
- 9.574. Unused Functions
- 9.575. Unused Global
- 9.576. Unused Inherited Variable In Closure
- 9.577. Unused Interfaces
- 9.578. Unused Label
- 9.579. Unused Methods
- 9.580. Unused Private Methods
- 9.581. Unused Private Properties
- 9.582. Unused Protected Methods
- 9.583. Unused Returned Value
- 9.584. Unused Use
- 9.585. Unusual Case For PHP Functions
- 9.586. Unverified Nonce
- 9.587. Upload Filename Injection
- 9.588. Use $wpdb Api
- 9.589. Use === null
- 9.590. Use Basename Suffix
- 9.591. Use Class Operator
- 9.592. Use Const And Functions
- 9.593. Use Constant As Arguments
- 9.594. Use Count Recursive
- 9.595. Use Instanceof
- 9.596. Use List With Foreach
- 9.597. Use Lower Case For Parent, Static And Self
- 9.598. Use Named Boolean In Argument Definition
- 9.599. Use Nullable Type
- 9.600. Use Object Api
- 9.601. Use PHP7 Encapsed Strings
- 9.602. Use Pathinfo
- 9.603. Use Positive Condition
- 9.604. Use Slim
- 9.605. Use System Tmp
- 9.606. Use The Blind Var
- 9.607. Use With Fully Qualified Name
- 9.608. Use Wordpress Functions
- 9.609. Use const
- 9.610. Use is_countable
- 9.611. Use json_decode() Options
- 9.612. Use password_hash()
- 9.613. Use pathinfo() Arguments
- 9.614. Use random_int()
- 9.615. Use session_start() Options
- 9.616. Used Once Property
- 9.617. Used Once Variables
- 9.618. Used Once Variables (In Scope)
- 9.619. Used Routes
- 9.620. Useless Abstract Class
- 9.621. Useless Brackets
- 9.622. Useless Casting
- 9.623. Useless Catch
- 9.624. Useless Check
- 9.625. Useless Constructor
- 9.626. Useless Final
- 9.627. Useless Global
- 9.628. Useless Instructions
- 9.629. Useless Interfaces
- 9.630. Useless Parenthesis
- 9.631. Useless Referenced Argument
- 9.632. Useless Return
- 9.633. Useless Switch
- 9.634. Useless Unset
- 9.635. Uses Default Values
- 9.636. Using $this Outside A Class
- 9.637. Using Short Tags
- 9.638. Usort Sorting In PHP 7.0
- 9.639. Var Keyword
- 9.640. Variable Global
- 9.641. Weak Typing
- 9.642. While(List() = Each())
- 9.643. Wordpress 4.0 Undefined Classes
- 9.644. Wordpress 4.1 Undefined Classes
- 9.645. Wordpress 4.2 Undefined Classes
- 9.646. Wordpress 4.3 Undefined Classes
- 9.647. Wordpress 4.4 Undefined Classes
- 9.648. Wordpress 4.5 Undefined Classes
- 9.649. Wordpress 4.6 Undefined Classes
- 9.650. Wordpress 4.7 Undefined Classes
- 9.651. Wordpress 4.8 Undefined Classes
- 9.652. Wordpress 4.9 Undefined Classes
- 9.653. Wordpress Usage
- 9.654. Wpdb Best Usage
- 9.655. Wpdb Prepare Or Not
- 9.656. Written Only Variables
- 9.657. Wrong Class Location
- 9.658. Wrong Number Of Arguments
- 9.659. Wrong Optional Parameter
- 9.660. Wrong Parameter Type
- 9.661. Wrong Range Check
- 9.662. Wrong fopen() Mode
- 9.663. Yoda Comparison
- 9.664. ZF3 Usage Of Deprecated
- 9.665. Zend Classes
- 9.666. Zend Interface
- 9.667. Zend Trait
- 9.668. Zend Typehinting
- 9.669. ZendConfig
- 9.670. __DIR__ Then Slash
- 9.671. __debugInfo() Usage
- 9.672. __toString() Throws Exception
- 9.673. crypt() Without Salt
- 9.674. error_reporting() With Integers
- 9.675. eval() Without Try
- 9.676. ext/apc
- 9.677. ext/dba
- 9.678. ext/ereg
- 9.679. ext/fdf
- 9.680. ext/mcrypt
- 9.681. ext/mhash
- 9.682. ext/ming
- 9.683. ext/mysql
- 9.684. filter_input() As A Source
- 9.685. func_get_arg() Modified
- 9.686. idn_to_ascii() New Default
- 9.687. include_once() Usage
- 9.688. isset() With Constant
- 9.689. list() May Omit Variables
- 9.690. mcrypt_create_iv() With Default Values
- 9.691. move_uploaded_file Instead Of copy
- 9.692. parse_str() Warning
- 9.693. preg_match_all() Flag
- 9.694. preg_replace With Option e
- 9.695. self, parent, static Outside Class
- 9.696. set_exception_handler() Warning
- 9.697. time() Vs strtotime()
- 9.698. var_dump()… Usage
- 9.699. zend-authentication 2.5.0 Undefined Classes
- 9.700. zend-authentication Usage
- 9.701. zend-barcode 2.5.0 Undefined Classes
- 9.702. zend-barcode 2.6.0 Undefined Classes
- 9.703. zend-barcode Usage
- 9.704. zend-cache 2.5.0 Undefined Classes
- 9.705. zend-cache 2.6.0 Undefined Classes
- 9.706. zend-cache 2.7.0 Undefined Classes
- 9.707. zend-cache Usage
- 9.708. zend-captcha 2.5.0 Undefined Classes
- 9.709. zend-captcha 2.6.0 Undefined Classes
- 9.710. zend-captcha 2.7.0 Undefined Classes
- 9.711. zend-captcha Usage
- 9.712. zend-code 2.5.0 Undefined Classes
- 9.713. zend-code 2.6.0 Undefined Classes
- 9.714. zend-code 3.0.0 Undefined Classes
- 9.715. zend-code 3.1.0 Undefined Classes
- 9.716. zend-code 3.2.0 Undefined Classes
- 9.717. zend-code Usage
- 9.718. zend-config 2.5.x
- 9.719. zend-config 2.6.x
- 9.720. zend-config 3.0.x
- 9.721. zend-config 3.1.x
- 9.722. zend-console 2.5.0 Undefined Classes
- 9.723. zend-console 2.6.0 Undefined Classes
- 9.724. zend-console Usage
- 9.725. zend-crypt 2.5.0 Undefined Classes
- 9.726. zend-crypt 2.6.0 Undefined Classes
- 9.727. zend-crypt 3.0.0 Undefined Classes
- 9.728. zend-crypt 3.1.0 Undefined Classes
- 9.729. zend-crypt 3.2.0 Undefined Classes
- 9.730. zend-crypt Usage
- 9.731. zend-db 2.5.0 Undefined Classes
- 9.732. zend-db 2.6.0 Undefined Classes
- 9.733. zend-db 2.7.0 Undefined Classes
- 9.734. zend-db 2.8.0 Undefined Classes
- 9.735. zend-db Usage
- 9.736. zend-debug 2.5.0 Undefined Classes
- 9.737. zend-debug Usage
- 9.738. zend-di 2.5.0 Undefined Classes
- 9.739. zend-di 2.6.0 Undefined Classes
- 9.740. zend-di Usage
- 9.741. zend-dom 2.5.0 Undefined Classes
- 9.742. zend-dom 2.6.0 Undefined Classes
- 9.743. zend-dom Usage
- 9.744. zend-escaper 2.5.0 Undefined Classes
- 9.745. zend-escaper Usage
- 9.746. zend-eventmanager 2.5.0 Undefined Classes
- 9.747. zend-eventmanager 2.6.0 Undefined Classes
- 9.748. zend-eventmanager 3.0.0 Undefined Classes
- 9.749. zend-eventmanager 3.1.0 Undefined Classes
- 9.750. zend-eventmanager 3.2.0 Undefined Classes
- 9.751. zend-eventmanager Usage
- 9.752. zend-feed 2.5.0 Undefined Classes
- 9.753. zend-feed 2.6.0 Undefined Classes
- 9.754. zend-feed 2.7.0 Undefined Classes
- 9.755. zend-feed 2.8.0 Undefined Classes
- 9.756. zend-feed Usage
- 9.757. zend-file 2.5.0 Undefined Classes
- 9.758. zend-file 2.6.0 Undefined Classes
- 9.759. zend-file 2.7.0 Undefined Classes
- 9.760. zend-file Usage
- 9.761. zend-filter 2.5.0 Undefined Classes
- 9.762. zend-filter 2.6.0 Undefined Classes
- 9.763. zend-filter 2.7.0 Undefined Classes
- 9.764. zend-filter Usage
- 9.765. zend-form 2.5.0 Undefined Classes
- 9.766. zend-form 2.6.0 Undefined Classes
- 9.767. zend-form 2.7.0 Undefined Classes
- 9.768. zend-form 2.8.0 Undefined Classes
- 9.769. zend-form 2.9.0 Undefined Classes
- 9.770. zend-form Usage
- 9.771. zend-http 2.5.0 Undefined Classes
- 9.772. zend-http 2.6.0 Undefined Classes
- 9.773. zend-http 2.7.0 Undefined Classes
- 9.774. zend-http Usage
- 9.775. zend-i18n 2.5.0 Undefined Classes
- 9.776. zend-i18n 2.6.0 Undefined Classes
- 9.777. zend-i18n 2.7.0 Undefined Classes
- 9.778. zend-i18n Usage
- 9.779. zend-i18n resources Usage
- 9.780. zend-i18n-resources 2.5.x
- 9.781. zend-inputfilter 2.5.0 Undefined Classes
- 9.782. zend-inputfilter 2.6.0 Undefined Classes
- 9.783. zend-inputfilter 2.7.0 Undefined Classes
- 9.784. zend-inputfilter Usage
- 9.785. zend-json 2.5.0 Undefined Classes
- 9.786. zend-json 2.6.0 Undefined Classes
- 9.787. zend-json 3.0.0 Undefined Classes
- 9.788. zend-json Usage
- 9.789. zend-loader 2.5.0 Undefined Classes
- 9.790. zend-loader Usage
- 9.791. zend-log 2.5.0 Undefined Classes
- 9.792. zend-log 2.6.0 Undefined Classes
- 9.793. zend-log 2.7.0 Undefined Classes
- 9.794. zend-log 2.8.0 Undefined Classes
- 9.795. zend-log 2.9.0 Undefined Classes
- 9.796. zend-log Usage
- 9.797. zend-mail 2.5.0 Undefined Classes
- 9.798. zend-mail 2.6.0 Undefined Classes
- 9.799. zend-mail 2.7.0 Undefined Classes
- 9.800. zend-mail 2.8.0 Undefined Classes
- 9.801. zend-mail Usage
- 9.802. zend-math 2.5.0 Undefined Classes
- 9.803. zend-math 2.6.0 Undefined Classes
- 9.804. zend-math 2.7.0 Undefined Classes
- 9.805. zend-math 3.0.0 Undefined Classes
- 9.806. zend-math Usage
- 9.807. zend-memory 2.5.0 Undefined Classes
- 9.808. zend-memory Usage
- 9.809. zend-mime 2.5.0 Undefined Classes
- 9.810. zend-mime 2.6.0 Undefined Classes
- 9.811. zend-mime Usage
- 9.812. zend-modulemanager 2.5.0 Undefined Classes
- 9.813. zend-modulemanager 2.6.0 Undefined Classes
- 9.814. zend-modulemanager 2.7.0 Undefined Classes
- 9.815. zend-modulemanager 2.8.0 Undefined Classes
- 9.816. zend-modulemanager Usage
- 9.817. zend-mvc 2.5.x
- 9.818. zend-mvc 2.6.x
- 9.819. zend-mvc 2.7.x
- 9.820. zend-mvc 3.0.x
- 9.821. zend-mvc 3.1.0 Undefined Classes
- 9.822. zend-mvc Usage
- 9.823. zend-navigation 2.5.0 Undefined Classes
- 9.824. zend-navigation 2.6.0 Undefined Classes
- 9.825. zend-navigation 2.7.0 Undefined Classes
- 9.826. zend-navigation 2.8.0 Undefined Classes
- 9.827. zend-navigation Usage
- 9.828. zend-paginator 2.5.0 Undefined Classes
- 9.829. zend-paginator 2.6.0 Undefined Classes
- 9.830. zend-paginator 2.7.0 Undefined Classes
- 9.831. zend-paginator Usage
- 9.832. zend-progressbar 2.5.0 Undefined Classes
- 9.833. zend-progressbar Usage
- 9.834. zend-serializer 2.5.0 Undefined Classes
- 9.835. zend-serializer 2.6.0 Undefined Classes
- 9.836. zend-serializer 2.7.0 Undefined Classes
- 9.837. zend-serializer 2.8.0 Undefined Classes
- 9.838. zend-serializer Usage
- 9.839. zend-server 2.5.0 Undefined Classes
- 9.840. zend-server 2.6.0 Undefined Classes
- 9.841. zend-server 2.7.0 Undefined Classes
- 9.842. zend-server Usage
- 9.843. zend-servicemanager 2.5.0 Undefined Classes
- 9.844. zend-servicemanager 2.6.0 Undefined Classes
- 9.845. zend-servicemanager 2.7.0 Undefined Classes
- 9.846. zend-servicemanager 3.0.0 Undefined Classes
- 9.847. zend-servicemanager 3.1.0 Undefined Classes
- 9.848. zend-servicemanager 3.2.0 Undefined Classes
- 9.849. zend-servicemanager 3.3.0 Undefined Classes
- 9.850. zend-servicemanager Usage
- 9.851. zend-session 2.5.0 Undefined Classes
- 9.852. zend-session 2.6.0 Undefined Classes
- 9.853. zend-session 2.7.0 Undefined Classes
- 9.854. zend-session 2.8.0 Undefined Classes
- 9.855. zend-session Usage
- 9.856. zend-soap 2.5.0 Undefined Classes
- 9.857. zend-soap 2.6.0 Undefined Classes
- 9.858. zend-soap Usage
- 9.859. zend-stdlib 2.5.0 Undefined Classes
- 9.860. zend-stdlib 2.6.0 Undefined Classes
- 9.861. zend-stdlib 2.7.0 Undefined Classes
- 9.862. zend-stdlib 3.0.0 Undefined Classes
- 9.863. zend-stdlib 3.1.0 Undefined Classes
- 9.864. zend-stdlib Usage
- 9.865. zend-tag 2.5.0 Undefined Classes
- 9.866. zend-tag 2.6.0 Undefined Classes
- 9.867. zend-tag Usage
- 9.868. zend-test 2.5.0 Undefined Classes
- 9.869. zend-test 2.6.0 Undefined Classes
- 9.870. zend-test 3.0.0 Undefined Classes
- 9.871. zend-test 3.1.0 Undefined Classes
- 9.872. zend-test Usage
- 9.873. zend-text 2.5.0 Undefined Classes
- 9.874. zend-text 2.6.0 Undefined Classes
- 9.875. zend-text Usage
- 9.876. zend-uri
- 9.877. zend-uri 2.5.x
- 9.878. zend-validator 2.6.x
- 9.879. zend-validator 2.7.x
- 9.880. zend-validator 2.8.x
- 9.881. zend-validator 2.9.0 Undefined Classes
- 9.882. zend-validator Usage
- 9.883. zend-view 2.5.0 Undefined Classes
- 9.884. zend-view 2.6.0 Undefined Classes
- 9.885. zend-view 2.7.0 Undefined Classes
- 9.886. zend-view 2.8.0 Undefined Classes
- 9.887. zend-view 2.9.0 Undefined Classes
- 9.888. zend-view Usage
- 9.889. zend-xmlrpc 2.5.0 Undefined Classes
- 9.890. zend-xmlrpc 2.6.0 Undefined Classes
- 9.891. zend-xmlrpc Usage
- 10. Real Code Cases
- 11. Reports
- 11.1. Configuring a report before the audit
- 11.2. Generating a report after the audit
- 11.3. Common behavior
- 11.4. Ambassador
- 11.5. Clustergrammer
- 11.6. Code Flower
- 11.7. Code Sniffer
- 11.8. Composer
- 11.9. Dependency Wheel
- 11.10. Inventories
- 11.11. Json
- 11.12. Marmelab
- 11.13. Owasp
- 11.14. PhpCompilation
- 11.15. PhpConfiguration
- 11.16. PlantUml
- 11.17. RadwellCode
- 11.18. SimpleTable
- 11.19. Stats
- 11.20. Text
- 11.21. Uml
- 11.22. Xml
- 12. Configuration
- 13. Custom analysis
- 14. Glossary
- 15. Ideas
- 16. List of contributors
- 17. Annex
- 17.1. Supported Themes
- 17.2. Supported Reports
- 17.3. Supported PHP Extensions
- 17.4. Supported Frameworks
- 17.5. Applications
- 17.6. Recognized Libraries
- 17.7. New analyzers
- 17.8. PHP Error messages
- 17.9. External services
- 17.10. External links
- 17.11. Themes configuration
- 17.12. Analyze
- 17.13. Cakephp
- 17.14. ClassReview
- 17.15. Coding Conventions
- 17.16. CompatibilityPHP53
- 17.17. CompatibilityPHP54
- 17.18. CompatibilityPHP55
- 17.19. CompatibilityPHP56
- 17.20. CompatibilityPHP70
- 17.21. CompatibilityPHP71
- 17.22. CompatibilityPHP72
- 17.23. CompatibilityPHP73
- 17.24. CompatibilityPHP74
- 17.25. Dead code
- 17.26. LintButWontExec
- 17.27. Performances
- 17.28. Security
- 17.29. Slim
- 17.30. Suggestions
- 17.31. Wordpress
- 17.32. ZendFramework