detecting a forbidden function raises an error now, not only a warning
exclude some non-php files from the scan, this should work a bit faster