1.2.1066. Sensitive Argument

Spot the argument that are sensitive for security. The functioncalls that are hosting a sensitive argument are called a sink.

<?php

// first argument $query is a sensitive argument
mysqli_query($query);

?>

1.2.1066.1. Specs

Short name

Security/SensitiveArgument

Rulesets

All, Changed Behavior

Exakat since

0.8.4

PHP Version

All

Severity

Minor

Time To Fix

Quick (30 mins)

Precision

Medium

Available in

Entreprise Edition, Exakat Cloud