Add CodeChecker for PHP

PrivateBin / PrivateBin

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

https://privatebin.info/

Other

6.44k stars 802 forks source link

Add CodeChecker for PHP #22

Closed rugk closed 8 years ago

rugk commented 8 years ago

@rugk There are several code checkers for PHP files. So why not add them?

@rugk For adding this repo to https://insight.sensiolabs.com/ one must be the owner of the repo. Therefore, @elrido you have to do this. It's basically just a few clicks.

@rugk For https://scrutinizer-ci.com too.

@rugk

In codeclimate.com I cannot change the settings, but at least here is an analysis: https://codeclimate.com/github/elrido/ZeroBin The score is so bad, because the JS are not excluded from analysis yet.

rugk commented 8 years ago

I updated the badges, but there is still something to do:

CodeClimate coverage badge does not work right now. I think the coverage must somehow pushed to it. Or is it possibly Travis-related? Travis is not setup right now?
Scrutinizer-Ci - Can we get a link @elrido ?
And SensioLabsInside is still a ToDo.

elrido commented 8 years ago

codeclimate - fixed the paths and env vars in travis, coverage works now
Scrutinizer - https://scrutinizer-ci.com/g/PrivateBin/PrivateBin/

elrido commented 8 years ago

AFAIK this is now done. Let me know if anything is missing or close it if its fine for you, too.

rugk commented 8 years ago

Yes, all done. I also added all the badges.

rugk commented 8 years ago

BTW it's interesting to see how much the coverage varies depending on which service analyses it.

rugk commented 8 years ago

Wait no, https://insight.sensiolabs.com is missing...

elrido commented 8 years ago

Is it because the project was marked private? I just changed that...

rugk commented 8 years ago

Yes, think so. I found it. However I cannot access any settings (is there the possibility to add another user?). I cannot even access the badge code, so it would be nice if you could place the badge there. BTW pretty serious things it reports with the potentially SQL injection. I'll open an issue for it.

elrido commented 8 years ago

It says: "Collaborators: Upgrade to a Business plan to be able to share your analyses."

And these "SQL injections" could only be triggered by editing the config file. It's the table prefix it complains about.

Here is the badge code for future reference: [![SensioLabsInsight](https://insight.sensiolabs.com/projects/57c9e74e-c6f9-4de6-a876-df66ec2ea1ff/mini.png)](https://insight.sensiolabs.com/projects/57c9e74e-c6f9-4de6-a876-df66ec2ea1ff)