Name: Eric Bouwers Mail: Try my wikiname with gmail Homepage URL: http://eric.bouwers.info Country: Netherlands Personal Preferences (details in TWIKIWEB .TWikiVariables ...
List of TWiki users Please take the time and add yourself to the list. To do that fill out the form in TWIKIWEB .TWikiRegistration. This will create an account for ...
Statistics for TWiki.Main Web Month: Topic views: Topic saves: File uploads: Most popular topic views: Top contributors for topic save and uploads: Jun 2011 5347 ...
PHP-Sat offers the functionality to automatically analyze files which are included with the require / include functions of PHP. Many projects use some kind of include ...
The Nix buildfarm continuously builds PHP-front and PHP-sat packages. Reports Reports and logs from the build tasks are available at: DIST Some more direct links: ...
This page describes how you can set up your development environment for PHP-Sat/PHP-Front. Most of the information is located elsewhere, if a link is dead please let ...
There are two mailing lists that you may want to subscribe to. psat-commits All SVN-, Jira- and Buildfarm-messages. To stay really up to date. psat-dev List for ...
The following programming constructs are currently supported by the MCV000-pattern: Operator Expressions Control-flow statements This means that the security check ...
Syntax definition The syntax definition can be browsed online: PHP4 syntax definition PHP5 syntax definition The syntax definition of the PHP versions identify which ...
Stable Releases There is no stable release of PHP-Front (yet). Check the road map for the current status of the 0.1 release. Latest Developments Distributions of ...
TOC Features Some of the (unique) features of PHP-sat are: Documented bug-patterns Configurable security check (status) Option to preserve comments Pretty printer ...
TOC What is a bug-pattern? Let us start with a definition: A bug-pattern describes a common mistake at the application level. So each bug-pattern describes a pattern ...
TOC Why configuration? The configuration file is used to configure the security-analysis within php-sat. It contains information about three things: Which variables ...
PHP-Sat is always on the lookout for developers. If you are interested in working on PHP-Sat there are a couple of things that can come in handy. The source of the ...
TOC Installation The installation process is the same as for PHP-Front. Usage Getting started with PHP-Sat PHP-Sat configuration explained Development If you want ...
TOC Analyzing a file After you have installed php-sat you can run it by typing: php-sat h If this command does not produce a list of all the options that are available ...
The PHP-Sat logo is made by Robert van Geenhuizen. We are very grateful that he took the time to develop this logo. We think it is 'compleet hip', which means so much ...
!! Under construction !! This page will hold the description of the security algorithm of PHP-Sat as flagged by pattern MCV000. The information is already available ...
PHP-Sat was originally called PSAT. This stands for PHP Static Analysis Tool. This name should not come as a surprise. When the time came to publish the project on ...
There where two sources that made the idea for PHP-Sat. The first source of inspiration came from my work as a assistant at the course "internet programmeren" (Internet ...
Bugpatterns Each bugpattern category within PHP-Sat has his own testsuite. Each bugpattern has is own section within the testsuite to test different properties of ...
There is no stable release of PHP-Sat (yet). Check the road map for the current status of the 0.1 release. You can always download, install and try the latest version ...
TOC Introduction Within the documentation of PHP-front the TheExampleProject is used to explain how you can setup your own project. This documentation uses PHP-Tools ...
The pretty printer that comes with PHP is designed to pretty print an AST-representation of a PHP-program according to a set of rules. It is not designed to return ...
Safety levels are used to represent the level of security a variable has within the security analysis. The set of safety levels is finite and has a partial order by ...
A sensitive sink is every construct/function that can cause a vulnerability when it is given TaintedData as a parameter. The following constructs are listed as a SensitiveSink ...
The following text was submitted as my proposal for Google's Summer of Code 2006: Project Title Using static analysis to find vulnerabilities Synopsis Applications ...
Any data that comes from outside the script should be considered tainted data. This includes user-input, database-results, file-system data or anything else that is ...
The pr-department proudly presents the following list of activities. Talks PHP-sat has been the subject of the following talks: 2006-11-09: Software Technology Colloquium ...
We would like to thank the following people/projects/institutes for contributing to PHP-SAT: (In alphabetical order) Bravenboer, Martin For being my mentor during ...
The empty module is a top-level directory in the SVN-repository which contains everything you need to start your own project based on PHP-Front. The special name that ...
These pages describe how you can set-up your PHP-Front-based project. We will use a real-life example to explain all the steps that are involved in making a PHP-Front ...
PHP-Sat is a Static Analysis tool that can be used to check for common mistakes in PHP source code. One of the key-features of PHP-Sat is the automatic detection of ...
2007 02 18 Added page to archive talks and papers 2007 02 18 Added page for the PHP-Tools-package 2007 01 27 Official launch of PHP-Sat.org 2006 08 24 PHP ...
TWiki.PHP Web Preferences The following settings are web preferences of the TWiki.PHP web. These preferences overwrite the site-level preferences in TWIKIWEB . WIKIPREFSTOPIC ...
Statistics for TWiki.PHP Web Month: Topic views: Topic saves: File uploads: Most popular topic views: Top contributors for topic save and uploads: Feb 2008 3910 0 ...
Eric Bouwers, Martin Bravenboer, and Eelco Visser. Grammar Engineering Support for Precedence Rule Recovery and Compatibility Checking. In Proceedings of LDTA'07, ...
TOC Introduction The Stratego/XT Grammar Engineering Tools is a collection of tools for the recovery, development, testing, and maintenance of grammars. Currently ...
November 30 and December 1, 2006 Delft University of Technology Delft, The Netherlands TOC Scope The Stratego User Days are a yearly meeting of Stratego/XT developers ...
Delft University of Technology The Program Transformation project of the Software Engineering Research Group at the Delft University of Technology takes care of most ...
INCLUDE{WebNotice} Full bibliography of Stratego Bibliography of Stratego/XT related publications at researchr by year and type strategoxt.bib Overview transformation ...
See also the WebChanges page. STARTINCLUDE 2010-05-28 Version 0.5 of the Spoofax Language Workbench has been released. Read the announcement on the main page. 2010 ...
Statistics for TWiki.Stratego Web Month: Topic Views: Topic Saves: Attachment Uploads: Most Popular Topic Views: Top Contributors for Topic Save and Uploads: Apr ...
Statistics for TWiki.WebDSL Web Month: Topic Views: Topic Saves: Attachment Uploads: Most Popular Topic Views: Top Contributors for Topic Save and Uploads: Feb 2008 ...