Anyone see a online tool that tests if the php code is secure?

[dwhs]

Kind of a cut and paste option that checks for basic security flaws.

thanks!

[mburt]

Unless you're using variables in your url to correspond with php scripts using fread, fopen, mkdir, etc. there isn't much to check for security.
Generally php is a very language (in the aspect that it can't be read by the "view source").

An example of insecure code:

<?php
mkdir($_GET["dir"]);
?>

Would take the dir variable from the url and make a directory.