php-codeigniter-audit

To perform a static security audit on a CodeIgniter application, run the audit process from the project root directory to inspect configuration and code paths. This identifies CSRF, XSS, and SQL risks while producing structured findings with remediation guidance.

A white-box security review detects CodeIgniter vulnerabilities including CSRF token misconfigurations, XSS output filtering gaps, insecure SQL query construction, and weak session cookie or authentication handling flows.

The audit checks CodeIgniter XSS protection by analyzing the correctness of global output filtering settings and verifying if view-layer escaping mechanisms are properly applied to prevent malicious script execution.

Yes, you can detect SQL injection risks by auditing database query construction to find direct user input concatenation. The review checks for proper use of Query Builder and parameter binding to ensure secure SQL execution.

Yes, the audit generates remediation guidance for CodeIgniter CSRF configuration issues by mapping evidence of missing token validation or incorrect skip rules to structured findings with actionable security recommendations.