[PHP] trying to get a list of functions used in a php script

2001-10-01 Thread Howie Oakes

Hello-

I am trying to find a way to scan a php script and list all of the functions
used in that script. Does anyone know if there is anything out there. (In
Perl or PHP) I know that Perl has the C::scan module to do this with C code,
but I have not seen anything for PHP. I am working on a secure
implementation of PHP that will only allow certain functions to be used by
end users. (But I still want to have full functionality for other scripts,
so disable_function is out of the question)

Thanks!
Howie



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




RE: [PHP] trying to get a list of functions used in a php script

2001-10-01 Thread Howie Oakes

Hi Ramsus,

Thanks for the reply. I am trying to implement PHP in a very secure
environment. My security department wants our developers to only be able to
use functions from an approved list. My plan was to scan any PHP files when
they get saved, get a list of the functions used and compare those to the
approved list. The problem is that many of the functions that would not be
available for general use need to be used by some master scripts in the
same directory, so I can't use disable_function...








-Original Message-
From: Rasmus Lerdorf [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 01, 2001 3:16 PM
To: Howie Oakes
Cc: '[EMAIL PROTECTED]'
Subject: Re: [PHP] trying to get a list of functions used in a php
script


 I am trying to find a way to scan a php script and list all of the
functions
 used in that script. Does anyone know if there is anything out there. (In
 Perl or PHP) I know that Perl has the C::scan module to do this with C
code,
 but I have not seen anything for PHP. I am working on a secure
 implementation of PHP that will only allow certain functions to be used by
 end users. (But I still want to have full functionality for other scripts,
 so disable_function is out of the question)

But you can use disable_functions in your httpd.conf file and only disable
fnuctions in certain directories or virtual hosts on your server.

And no, I don't know of anything that gets you such a list of used
functions.

-Rasmus

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]