diff --git a/definitions/patterns_re.txt b/definitions/patterns_re.txt index e90d604..1165e66 100644 --- a/definitions/patterns_re.txt +++ b/definitions/patterns_re.txt @@ -105,3 +105,6 @@ function\s+_[0-9]{8,}\( # escaped include with error hiding @include ".*?(\\x[0-9a-f]{2,}.*?){2,}.*?"; + +# create_function is dangerous as like eval() see http://php.net/manual/en/function.create-function.php +create_function\s*\(\s*['"]{2} \ No newline at end of file