113 Rules
| ID | Name | Severity |
|---|---|---|
| 1007002 | Avoid artifacts directly accessing database tables (PHP) |
medium
|
| 1007004 | Avoid Methods and Functions with High Fan-In (PHP) |
medium
|
| 1007006 | Avoid Methods and Functions with High Fan-Out (PHP) |
medium
|
| 1007008 | Avoid JavaScript Functions with High Fan-In (PHP) |
medium
|
| 1007010 | Avoid JavaScript Functions with High Fan-Out (PHP) |
medium
|
| 1007012 | Avoid using embedded CSS in Web Pages (PHP) |
medium
|
| 1007014 | Avoid direct definition of JavaScript Functions in a Web page (PHP) |
medium
|
| 1007016 | Avoid artifacts with High Cyclomatic Complexity (PHP) |
medium
|
| 1007020 | Avoid Sections with High Cyclomatic Complexity (PHP) |
medium
|
| 1007022 | Avoid artifacts using "for" loops which can be simplified to a "while" loop (PHP) |
medium
|
| 1007024 | Avoid incrementer jumbling in loops (PHP) |
high
|
| 1007026 | Use identical type operator rather than "equal" operator (PHP) |
medium
|
| 1007028 | Use increment/decrement operators where possible (PHP) |
medium
|
| 1007030 | Avoid using empty statement (PHP) |
medium
|
| 1007034 | Avoid empty style definition (PHP) |
medium
|
| 1007036 | Avoid classes having excessive number of derived classes(PHP) |
medium
|
| 1007038 | Avoid classes having excessive number of dependencies (PHP) |
medium
|
| 1007042 | Avoid Classes implementing excessive number of Interfaces (PHP) |
medium
|
| 1007046 | Avoid Classes with High Depth of Inheritance Tree (PHP) |
medium
|
| 1007048 | Avoid Interfaces with excessive number of methods (PHP) |
medium
|
| 1007050 | Avoid method invocation in loop termination expression (PHP) |
medium
|
| 1007052 | Avoid unreferenced PHP Files (PHP) |
medium
|
| 1007054 | Avoid unreferenced JavaScript Functions (PHP) |
medium
|
| 1007056 | Avoid unnecessary final modifiers inside final Classes (PHP) |
medium
|
| 1007058 | Avoid artifacts with unused parameters (PHP) |
medium
|
| 1007060 | Avoid unreferenced Classes (PHP) |
medium
|
| 1007062 | Avoid unreferenced Interfaces (PHP) |
medium
|
| 1007064 | Avoid unreferenced Methods (PHP) |
medium
|
| 1007070 | Avoid method and functions without comments denoting scope end (PHP) |
medium
|
| 1007072 | Avoid files with names not following naming convention (PHP) |
medium
|
| 1007074 | Avoid having Methods and Functions without naming convention (PHP) |
medium
|
| 1007078 | A class name should start with an upper case letter (PHP) |
medium
|
| 1007080 | Avoid Class name not matching parent file name (PHP) |
medium
|
| 1007086 | Use lowercase for control structures (PHP) |
medium
|
| 1007088 | Avoid having variable with too short name (PHP) |
medium
|
| 1007090 | Avoid having variable with too long name (PHP) |
medium
|
| 1007092 | Avoid Classes with lines more than 120 characters in length (PHP) |
medium
|
| 1007094 | Avoid Methods and Functions with lines more than 120 characters in length (PHP) |
medium
|
| 1007096 | Avoid "elseif" statements (PHP) |
medium
|
| 1007098 | Avoid undocumented artifacts (PHP) |
medium
|
| 1007100 | Avoid artifacts with a very low comment/code ratio (PHP) |
medium
|
| 1007102 | Avoid undocumented classes (PHP) |
medium
|
| 1007104 | Avoid classes with a very low comment/code ratio (PHP) |
medium
|
| 1007106 | Avoid undocumented Sections (PHP) |
medium
|
| 1007108 | Avoid Sections with a very low comment/code ratio (PHP) |
medium
|
| 1007110 | Avoid undocumented JavaScript Functions (PHP) |
medium
|
| 1007112 | Avoid JavaScript Functions with a very low comment/code ratio (PHP) |
medium
|
| 1007114 | Avoid unnecessary string concatenations (PHP) |
medium
|
| 1007116 | Avoid artifacts with Object Instantiation in loops (PHP) |
medium
|
| 1007118 | Avoid artifacts with sql statements referring more than 4 Tables (PHP) |
medium
|
| 1007120 | Avoid artifacts with Group By sql statement (PHP) |
medium
|
| 1007122 | Avoid empty catch blocks (PHP) |
high
|
| 1007124 | Avoid artifacts throwing exceptions without @Throws tag in doc comments (PHP) |
medium
|
| 1007126 | Avoid classes with excessive lines of code (PHP) |
medium
|
| 1007128 | Avoid artifacts with excessive number of parameters (PHP) |
medium
|
| 1007130 | Avoid Artifacts with excessive lines of code (PHP) |
medium
|
| 1007132 | Avoid classes with excessive number of fields (PHP) |
medium
|
| 1007134 | Avoid classes with excessive number of methods (PHP) |
medium
|
| 1007136 | Avoid classes having with excessive number of public methods and fields (PHP) |
medium
|
| 1007138 | Avoid unused local variables (PHP) |
medium
|
| 1007140 | Avoid unused private fields (PHP) |
medium
|
| 1007142 | Avoid unused private methods (PHP) |
medium
|
| 1007144 | Avoid classes with excessive number of weighted methods (PHP) |
medium
|
| 1007146 | Avoid unconditional "if" and "else if\elseif" statements (PHP) |
medium
|
| 1007148 | Avoid methods and constructor overridden only with parent artifact call (PHP) |
medium
|
| 1007150 | Avoid artifacts with optional parameters before required parameters (PHP) |
high
|
| 1007154 | Avoid using goto statements (PHP) |
high
|
| 1007156 | Avoid using eval expressions (PHP) |
critical
|
| 1007158 | Avoid artifacts using exit and die expressions (PHP) |
high
|
| 1007166 | Avoid classes without matching __get and __set (PHP) |
medium
|
| 1007172 | Avoid having constructors with return value (PHP) |
medium
|
| 1007176 | Avoid using break or continue statements in loops with high cyclomatic complexity (PHP) |
medium
|
| 1007180 | Use file inclusion based on API suitability (PHP) |
medium
|
| 1007184 | Avoid using size functions inside loops (PHP) |
medium
|
| 1007190 | Avoid using relative path for including files (PHP) |
medium
|
| 1007192 | Avoid using PHP short tags (PHP) |
high
|
| 1007202 | Avoid direct access to superglobals (PHP) |
high
|
| 1007206 | Avoid using @error suppression (PHP) |
high
|
| 1007210 | Avoid using time() to get the system time (PHP) |
medium
|
| 1007212 | Avoid having variables without naming conventions (PHP) |
medium
|
| 1007218 | Avoid fetching database rows as array and accessing using subscript (PHP) |
medium
|
| 1007220 | Avoid artifacts with "select *" Sql statement (PHP) |
medium
|
| 1007228 | Avoid control structures without proper spacing before and after open\close braces - PSR2 (PHP) |
medium
|
| 1007230 | Avoid artifacts without proper switch case declarations (PSR2) (PHP) |
medium
|
| 1007232 | Avoid artifacts with variables passed by reference when calling a function (PHP) |
medium
|
| 1007234 | Avoid having inline control statements (PHP) |
medium
|
| 1007236 | Avoid having Class Methods or Constructor without scope modifiers - Symfony STD (PHP) |
medium
|
| 1007238 | Avoid having multiple classes defined in a single file - Symfony STD (PHP) |
medium
|
| 1007240 | Avoid artifacts having object instantiation without parenthesis - Symfony STD (PHP) |
medium
|
| 1007242 | Avoid Methods and Functions having recursive calls (PHP) |
medium
|
| 1007244 | Avoid cross-site scripting - Improper Neutralization of script-related HTML tags in a web page (PHP) |
medium
|
| 1007246 | Avoid Remote File Inclusion - Improper Control of Filename for Include/Require Statement in PHP Program (PHP) |
medium
|
| 1007248 | Use sufficient SSL\TLS context (PHP) |
medium
|
| 1007250 | Avoid preg_replace with /e option (PHP) |
critical
|
| 1007252 | Avoid filesystem function calls without sanitizing user input (PHP) |
medium
|
| 1007254 | Avoid files that declare both symbols and execute logic with side effects (PHP) |
medium
|
| 1007256 | DEPRECATED: CWE-79: Avoid cross-site scripting - Improper Neutralization of input in script tag during web page generation (PHP) |
medium
|
| 1007258 | DEPRECATED: CWE-79: Avoid cross-site scripting - Improper Neutralization of input during web page generation (PHP) |
medium
|
| 1007260 | DEPRECATED: CWE-78: Avoid Command Injection - Improper Neutralization of Special Elements used in an OS Command (PHP) |
high
|
| 1007264 | DEPRECATED: CWE-434: Avoid unrestricted file upload (PHP) |
medium
|
| 1007266 | DEPRECATED: CWE-89: Avoid SQL Injection - Improper Neutralization of Special Elements used in an SQL Command within single quotes (PHP) |
high
|
| 1007268 | DEPRECATED: CWE-89: Avoid SQL Injection - Improper Neutralization of Special Elements used in an SQL Command without quotes (PHP) |
high
|
| 1007270 | DEPRECATED: CWE-89: Avoid SQL Injection - Improper Neutralization of Special Elements used in an SQL Command in dynamic query (PHP) |
medium
|
| 1007272 | DEPRECATED: CWE-384: Avoid Session Fixation (PHP) |
medium
|
| 1007274 | DEPRECATED: CWE-502: Avoid Object Injection (PHP) |
medium
|
| 1007276 | DEPRECATED: CWE-287: Avoid Cookie Misconfiguration (path) (PHP) |
medium
|
| 1007278 | DEPRECATED: CWE-328: Avoid weak hash functions (PHP) |
medium
|
| 1007280 | DEPRECATED: CWE-214: Avoid System Information Leakage (PHP) |
medium
|
| 1007282 | DEPRECATED: CWE-614: Avoid Cookie Misconfiguration (secure flag) (PHP) |
medium
|
| 1007284 | DEPRECATED: CWE-200: Avoid Cookie Misconfiguration (httpOnly flag) (PHP) |
medium
|
| 1007286 | DEPRECATED: CWE-242: Avoid PHP Dangerous Feature (PHP) |
medium
|
| 1007288 | DEPRECATED: CWE-489: Avoid debug code in the production system (PHP) |
medium
|
| 1007290 | DEPRECATED: CWE-79: Avoid cross site scripting (single quoted attribute) (PHP) |
medium
|