diff --git a/reference/taint/book.xml b/reference/taint/book.xml new file mode 100644 index 0000000000..372c9fc104 --- /dev/null +++ b/reference/taint/book.xml @@ -0,0 +1,81 @@ + + + + + Taint + Taint + + + &reftitle.intro; + + Taint is an extension, which is used for detecting XSS codes(tainted + string). + And also can be used to spot sql injection vulnerabilities, and shell + inject, etc. + + + When taint is enabled, if you pass a tainted string(comes from $_GET, + $_POST or $_COOKIE) to some functions, taint will warn you about that. + + + <function>Taint</function>example + + + + &example.outputs.similar; + + + + + + + &reference.taint.setup; + &reference.taint.reference; + + + + diff --git a/reference/taint/configure.xml b/reference/taint/configure.xml new file mode 100644 index 0000000000..852df607c1 --- /dev/null +++ b/reference/taint/configure.xml @@ -0,0 +1,35 @@ + + + +
+ &reftitle.install; + + + &pecl.info; + &url.pecl.package;taint + + + +
+ + + diff --git a/reference/taint/detail.xml b/reference/taint/detail.xml new file mode 100644 index 0000000000..2b675041f3 --- /dev/null +++ b/reference/taint/detail.xml @@ -0,0 +1,87 @@ + + + +
+ Details + + + Taint + + + + Function/Statement + &Default; + &Changeable; + &Changelog; + + + + + taint.enable + 1 + its PHP_INI_SYS value + + + + taint.error_level + E_WARNING + its PHP_INI_SYS value + + + + +
+
+ + &ini.descriptions.title; + + + + + + taint.enable + integer + + + + Whether enable the taint. + + + + + + taint.error_level + integer + + + + the error type which taint will report as when taint find a tainted + string. + + + + + + +
+ + diff --git a/reference/taint/entities.functions.xml b/reference/taint/entities.functions.xml new file mode 100644 index 0000000000..7862b4c6d9 --- /dev/null +++ b/reference/taint/entities.functions.xml @@ -0,0 +1,3 @@ +&reference.taint.functions.is-tainted; +&reference.taint.functions.taint; +&reference.taint.functions.untaint; diff --git a/reference/taint/functions/is-tainted.xml b/reference/taint/functions/is-tainted.xml new file mode 100644 index 0000000000..84a986531a --- /dev/null +++ b/reference/taint/functions/is-tainted.xml @@ -0,0 +1,65 @@ + + + + + + is_tainted + Checks whether a string is tainted + + + + &reftitle.description; + + boolis_tainted + stringstring + + + Checks whether a string is tainted + + + + + + &reftitle.parameters; + + + string + + + + + + + + + + + &reftitle.returnvalues; + + Return TRUE if the string is tainted, FALSE otherwise. + + + + + + + diff --git a/reference/taint/functions/taint.xml b/reference/taint/functions/taint.xml new file mode 100644 index 0000000000..5e088b5780 --- /dev/null +++ b/reference/taint/functions/taint.xml @@ -0,0 +1,73 @@ + + + + + + taint + Taint a string + + + + &reftitle.description; + + ReturnTypetaint + stringstring + string... + + + Make a string tainted. this is used for testing purpose only. + + + + + &reftitle.parameters; + + + string + + + + + + + + ... + + + + + + + + + + &reftitle.returnvalues; + + Return TURE if the transform done. and always Return TRUE if the taint + extension is not enabled. + + + + + + + diff --git a/reference/taint/functions/untaint.xml b/reference/taint/functions/untaint.xml new file mode 100644 index 0000000000..4dc62c671d --- /dev/null +++ b/reference/taint/functions/untaint.xml @@ -0,0 +1,73 @@ + + + + + + untaint + Untaint strings + + + + &reftitle.description; + + booluntaint + stringstring + string... + + + Untaint strings + + + + + &reftitle.parameters; + + + string + + + + + + + + ... + + + + + + + + + + + &reftitle.returnvalues; + + + + + + + + + diff --git a/reference/taint/ini.xml b/reference/taint/ini.xml new file mode 100644 index 0000000000..a154cd6de4 --- /dev/null +++ b/reference/taint/ini.xml @@ -0,0 +1,88 @@ + + + +
+ &reftitle.runtime; + &extension.runtime; + + + Taint &ConfigureOptions; + + + + &Name; + &Default; + &Changeable; + &Changelog; + + + + + taint.enable + 1 + its PHP_INI_SYS value + + + + taint.error_level + E_WARNING + its PHP_INI_SYS value + + + + +
+
+ + &ini.descriptions.title; + + + + + + taint.enable + integer + + + + Whether enable the taint. + + + + + + taint.error_level + integer + + + + the error type which taint will report as when taint find a tainted + string. + + + + + + +
+ + diff --git a/reference/taint/reference.xml b/reference/taint/reference.xml new file mode 100644 index 0000000000..1c818daa51 --- /dev/null +++ b/reference/taint/reference.xml @@ -0,0 +1,30 @@ + + + + + Taint &Functions; + + &reference.taint.entities.functions; + + + + diff --git a/reference/taint/setup.xml b/reference/taint/setup.xml new file mode 100644 index 0000000000..e8884eb369 --- /dev/null +++ b/reference/taint/setup.xml @@ -0,0 +1,63 @@ + + + + + &reftitle.setup; + +
+ &reftitle.required; + &no.requirement; + + + +
+ +
+ &reftitle.install; + + &pecl.moved; + + + &pecl.info; + &url.pecl.package;taint. + + + &pecl.windows.download; + +
+ +
+ &reftitle.runtime; + &reference.taint.ini; +
+ +
+ &reftitle.resources; + &no.resource; + + + +
+ +
+ + diff --git a/reference/taint/versions.xml b/reference/taint/versions.xml new file mode 100644 index 0000000000..e73211a272 --- /dev/null +++ b/reference/taint/versions.xml @@ -0,0 +1,33 @@ + + + + + + + + + + + +