Using PHP itself to parse/find function calls

Question

I'm wondering if it's possible to use PHP's parser to parse files and search/find a given function call.

For example, I want to know from which files the function eval is called. I could use find with -exec and some regex, but that returns a lot of false positives, and it also returns commented code.

My question is: can I use somehow PHP's own parser to search in files and say if a given function/reserved word is used in that file?

Why not just open it with fopen() and do a search for your keyword ? — Shankar Narayana Damodaran
– Shankar Narayana Damodaran, Commented Mar 20, 2014 at 12:08
Not with regex. There is infinite count of options to call some function named $function in PHP. call_user_func or $function() are most easiest from them — Alma Do
– Alma Do, Commented Mar 20, 2014 at 12:09
@ShankarDamodaran I'm not really sure I understand what you suggest. Can you elaborate a little bit further your idea? — Alexander Nestorov
– Alexander Nestorov, Commented Mar 20, 2014 at 12:09
@AlmaDo Those are corner cases. I'm be more than happy if I could get at least the direct calls. Also, if I'm using PHP's parser it should be possible (somehow) to let it know that there is actually a call to what I'm looking for. — Alexander Nestorov
– Alexander Nestorov, Commented Mar 20, 2014 at 12:10

Jesper Blaase · Accepted Answer · 2014-03-20 12:19:20Z

3

You can use PHP's internal tokenizer to find direct calls to eval:

<?php
$data = file_get_contents('test.php');
$tokens = token_get_all($data);

foreach($tokens as $token){
        if($token[0]==T_EVAL){
                echo "Eval found on line: ".$token[2]."\n";
        }
}

If you want to look for other things you can change the constant from T_EVAL to one of the constants specified here: Tokens

answered Mar 20, 2014 at 12:19

Jesper Blaase

2,41018 silver badges13 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Using PHP itself to parse/find function calls

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related