v-p-b/DangerousPHPFunctions — pull request #3 by cktricky (2014-12-12 16:03:48+00:00)
Title: change to regex versus include method

The use of .include?() when checking a string will check the entire "line" for the presence of that string. So, if we are checking for a vulnerable method named "dl" for instance, every line that has the word "handle" in it will be placed into our results file.

In my case this resulted in something in the thousands range for false positives. This regex checks for the presence of a lower and upper case "a-z" characters both prepended or appended to the method we are checking for. This first step in the regex helped reduce false positives by 1/3 and cut out a lot of noise.