Merge pull request #43 from danepowell/issue-42

Fixed #42: Non-system exec calls incorrectly flagged.
FloeDesignTechnologies · Aug 4, 2019 · 510be5c · 510be5c
2 parents b098ae9 + 4d8db12
commit 510be5c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Security/Sniffs/BadFunctions/SystemExecFunctionsSniff.php b/Security/Sniffs/BadFunctions/SystemExecFunctionsSniff.php
@@ -30,6 +30,9 @@ public function process(File $phpcsFile, $stackPtr) {
 		$tokens = $phpcsFile->getTokens();
 
 		if (in_array($tokens[$stackPtr]['content'], $utils::getSystemexecFunctions())) {
+            if ($tokens[$stackPtr - 1]['code'] == T_OBJECT_OPERATOR) {
+                return;
+            }
             $opener = $phpcsFile->findNext(T_OPEN_PARENTHESIS, $stackPtr, null, false, null, true);
 			$closer = $tokens[$opener]['parenthesis_closer'];
             $s = $stackPtr + 1;