Code Analyzer

Scans plugin files for matches to custom regex patterns. Useful for checking whether your plugins don’t do anything shady.

Default search patterns match the following:

• Exploitable PHP and JS functions and HTML tags
• Code (de)obfuscation
• Remote requests (including pingbacks, trackbacks and mail sending)
• Filesystem modification
• Direct database queries
• User creation
• Inline and enqueued scripts
• Unicode and ASCII character literals, integer literals
• URL addresses
• Strings containing “swf”
• Google Analytics and AdSense IDs