0

I'm trying to figure out if it is possible to make an extension that monitors every assignment that is made in PHP.

I want to do some taint detection, I've seen the PHP taint project, but it would be nicer to have it as an extension for my project.

Additionally, where can I find API documentation and similar for Zend/PHP extensions, I haven't been able to find anything good :/

4
  • Unless it's for learning (it's an interesting enough field!) - would using classes with getters/setters not be an easier alternative? Commented Sep 29, 2011 at 9:25
  • Lets call it learning then ;) It would be easier, but code like $name = $_GET["name"]; would not be tracable then. Commented Sep 29, 2011 at 9:27
  • Source code is available here: wiki.php.net/rfc/taint - This shows as well how to use the API. You won't be able to build this with a sole extension, as you need to track every assignment I assume. Commented Sep 29, 2011 at 10:02
  • So it is completely impossible to track the assignments from an extension? If so, drop an answer and I'll look more into the taint project. Commented Sep 30, 2011 at 6:38

1 Answer 1

2

http://pecl.php.net/package/taint

Sign up to request clarification or add additional context in comments.

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.