lang:

PHP

regex:

(echo(\s*\()?|(print(_r)?|exit|die|printf|vprintf|trigger_error|user_error|odbc_result_all|ovrimos_result_all|ifx_htmltbl_result)\s*\()\s*[^;]*\$_(GET|POST|REQUEST|SERVER|COOKIE)

description:

Sinks taken from RIPS
tags:
xss multiple sinks
results