Submission + - MIT/Stanford/Syracuse Team Develop New PHP Intepre (rkrishardy.com)
rkrishardy writes: "A group of researchers from MIT, Stanford and Syracuse have developed a new program, named "Ardilla", which can analyze PHP code for Cross-Site Scripting (XSS) and SQL injection attack vulnerabilities. Ardilla uses a modified Zend Interpreter to analyze the code, trace the data, and determine whether the threat is real or not, significantly decreasing false-positives."