Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Sponsored by: █ Sparkhost - Hosting Without Compromises! █ Hybrid Performance Web Hosting █ Spark Host Stream Hosting █ Hybrid IRC & IRCd Server Shell Accounts

Phpcodechecker V0.1

Started by brOmstar , Jul 28 2006 09:58 AM

Please log in to reply

7 replies to this topic

#1 brOmstar

Staff Sergeant

Members
353 posts

Posted 28 July 2006 - 09:58 AM

Hi

i coded a tool for analysing php-based webapps- that's version 0.1.

Features are

+ analyse src code for file inclusions/sql injections/system cmd execution
+ check remote sql statements for number of columns in an union statement

2do for version 0.2 -> follows soon

-> clean up the gui

-> add config file
-> better variable tracing through the code(analysing included files)

Ok here is a little video how to use it

CodeChecker

and here is the application -> u need .net framework to run it !!

phpCodeChecker

I need some feedback

Back to top

#2 Jeremy

Commander in Chief

GSO Management
2,459 posts

Posted 28 July 2006 - 10:23 AM

That's blasphemy!!! How could you require .NET to check a PHP app? That's like requiring a Mac to analyze a Windows app.

Back to top

#3 brOmstar

Staff Sergeant

Members
353 posts

Posted 28 July 2006 - 10:34 AM

That's blasphemy!!! How could you require .NET to check a PHP app? That's like requiring a Mac to analyze a Windows app.

.net is easy to use - most newer windows programs are written in .net. The idea is to support php developers 2 write secure code, and most of them like guis more than only perl/php/ruby scripts with cmd output.

Back to top

#4 toe

Staff Sergeant

Members
271 posts

Posted 30 July 2006 - 02:08 AM

great tool easy to use very effective, 1 problem its a windows tool

. keep up the good work.

-toe

Back to top

#5 S3M73X

Private First Class

Members
36 posts

Posted 31 July 2006 - 10:16 AM

Nice idea, nice tool... but for something like php i think its a MUST to do it in a plattform-independendt language not in .NET.

Back to top

#6 illegal-city

Private

Members
9 posts

Posted 02 August 2006 - 02:11 PM

These guys winge too much.
The app is great, just downloading it now to test it on my php script before i put it online for sale.

See it has more than one use!.. Developers can use it toooo!.

thanks (p.s will use it for other use also

)

Back to top

#7 satknis

Corporal

Members
162 posts

Posted 03 August 2006 - 05:47 AM

hmm i always get access denied error..

See the end of this message for details on invoking 
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.UnauthorizedAccessException: Access to the path 'X:\xampplite\htdocs\phpBB2' is denied.
   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)
   at System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks, Int32 bufferSize)
   at System.IO.StreamReader..ctor(String path)
   at System.IO.File.OpenText(String path)
   at Bromstars.TextImportLib.Bromstars.TextImportLib.TextImport.GetNumberOfLines(String strFile)
   at Bromstars.TextImportLib.Bromstars.TextImportLib.TextImport.ReadLinesToArray(String strFile)
   at PhpCodeChecker.PhpCodeChecker.showFile(String filename)
   at PhpCodeChecker.PhpCodeChecker.scanCodeFile(String filename, String mode)
   at PhpCodeChecker.PhpCodeChecker.analyseInclusionCommandsToolStripMenuItem_Click(Object sender, EventArgs e)
   at System.Windows.Forms.ToolStripItem.RaiseEvent(Object key, EventArgs e)
   at System.Windows.Forms.ToolStripMenuItem.OnClick(EventArgs e)
   at System.Windows.Forms.ToolStripItem.HandleClick(EventArgs e)
   at System.Windows.Forms.ToolStripItem.HandleMouseUp(MouseEventArgs e)
   at System.Windows.Forms.ToolStripItem.FireEventInteractive(EventArgs e, ToolStripItemEventType met)
   at System.Windows.Forms.ToolStripItem.FireEvent(EventArgs e, ToolStripItemEventType met)
   at System.Windows.Forms.ToolStrip.OnMouseUp(MouseEventArgs mea)
   at System.Windows.Forms.ToolStripDropDown.OnMouseUp(MouseEventArgs mea)
   at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, Int32 clicks)
   at System.Windows.Forms.Control.WndProc(Message& m)
   at System.Windows.Forms.ScrollableControl.WndProc(Message& m)
   at System.Windows.Forms.ToolStrip.WndProc(Message& m)
   at System.Windows.Forms.ToolStripDropDown.WndProc(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
   at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
	Assembly Version: 2.0.0.0
	Win32 Version: 2.0.50727.42 (RTM.050727-4200)
	CodeBase: file:///C:/WINDOWS/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
----------------------------------------
PhpCodeChecker
	Assembly Version: 1.0.2400.34004
	Win32 Version: 1.0.2400.34004
	CodeBase: file:///X:/Desktop/phpCodeChecker/PhpCodeChecker.exe
----------------------------------------
System.Windows.Forms
	Assembly Version: 2.0.0.0
	Win32 Version: 2.0.50727.42 (RTM.050727-4200)
	CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System
	Assembly Version: 2.0.0.0
	Win32 Version: 2.0.50727.42 (RTM.050727-4200)
	CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Drawing
	Assembly Version: 2.0.0.0
	Win32 Version: 2.0.50727.42 (RTM.050727-4200)
	CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
TextImportLib
	Assembly Version: 1.0.1400.33051
	Win32 Version: 1.0.1400.33051
	CodeBase: file:///X:/Desktop/phpCodeChecker/TextImportLib.DLL
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
	<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

Back to top

#8 Zimmergren

Staff Sergeant

Sergeant Major
487 posts

Posted 04 August 2006 - 04:17 AM

I havn't looked on the code, but that access denied error usually comes from the asp.net account (YOURCOMPUTERNAME\ASPNET on IIS 5 or
Network Service on IIS 6) not having read/write (and sometimes modify)-access to the directory/file which is to be modified.

Allow the asp.net account to modify the folder/file, and the error should vanish.

Another reason could be inproper use of FileAccess, but I dont think that's the problem since nobody else has complained.

But I'm just throwing out qualified guesses here, havn't looked at the app.

http://www.zimmergren.net

Formerly known as t0bban.