22 Pixy: PHP Security Scanner
Pixy is a Java program that performs automatic scans of PHP 4 source code, meant to detect XSS and SQL injection weakness. Pixy takes a PHP program as input and creates a report that lists possible susceptible points in the program, along with additional information for understanding it.
