Back to Psalm

TaintedShell

docs/running_psalm/issues/TaintedShell.md

6.16.1223 B
Original Source

TaintedShell

Emitted when user-controlled input can be passed into an exec call or similar.

php
<?php

$command = $_GET["command"];

runCode($command);

function runCode(string $command) {
    exec($command);
}