manual testing or code review. For example, many PHP remote file inclusion
(RFI) vulnerabilities can be found using simple regular expressions that search for
the use of variables in include() or require() statements. This criterion has the
effect of emphasizing issues that are found in the most commonly used features of