a Joomla! and WordPress Security script that automatically scans the Joomla! or Wordpress files for some patterns and "fingerprints" of malware, trojans or other injections into PHP code
That is one of the things I plan for future versions, since it requires a bit more sophisticated approach than regex. I will implement some sort of tokenization, though didn't choose which one yet.
Please consider detecting variable named functions.
\$[a-zA-Z0-9_]+\s+\(
so:$
, valid variable name characters, maybe whitespaces and(
.Thank you!