Forgot your password?
typodupeerror
Security

New PHP Interpreter Finds XSS, Injection Holes 66

rkrishardy writes "A group of researchers from MIT, Stanford, and Syracuse has developed a new program, named 'Ardilla,' which can analyze PHP code for cross-site scripting (XSS) and SQL injection attack vulnerabilities. (Here is the paper, in PDF, and a table of results from scanning six PHP applications.) Ardilla uses a modified Zend interpreter to analyze the code, trace the data, and determine whether the threat is real or not, significantly decreasing false positives." Unfortunately, license issues prevent the tool in its current form from being released as open source.

Comment Re:Done right for once, I think. (Score 1) 153

This is a good thing (to the city of Madison anyway.) I am a DSL victim here in Madison and the thought of a relativity cheap alternative to the local telcos would be great! I worked on the University of WI campus for 10 years and the idea of an alternative option would rock. If they fail, they'd fail because they can't provide. I have TDS, and I am pretty happy. The idea of a company having sole access to a market to a market frightens me. The more options the better! Now the way it sounds, if you pay, you get access. If I am willing to pump up the "volume" of my signal to access it downtown (I have local hub with WiFi); no harm, no foul. But for a campus and city population of 200k+, God bless ya. The rate the city is asking ($20-30/month), is about equal or to or less than local tecos. Less then five years ago, for $30 a month all I could get was 128k asynch and a prayer for no traffic at 5am! I teach at a local tech college, and the biggest complaint is no access. If the poor bastards don't pay for access, make them. If they don't, I will (pay, for my share anyway)!!! If I can roam the city and get WiFi, well the revolution was worth it. The tech ain't hard. Schlotzskys and Starbucks did it, so why can't anybody else. From a fiscal conservative and social liberal! I pay the taxes, so I should have some say!

Slashdot Top Deals

Do you suffer painful elimination? -- Don Knuth, "Structured Programming with Gotos"

Working...