Description: Tool to review PL/SQL for secure coding issues; PFCLCode
pl/sql (75) oracle security (16) secure coding (13) pfclcode (1)
PeteFinnigan.com Limited have developed a static source code analyser for PL/SQL. Its primary function is to scan and review your PL/SQL source code. It works by connecting to the database and analyses your PL/SQL packages, procedures, functions and types by extracting them from the database first. The reason we start in the database is because PL/SQL is a database langauge and does not run in isolation from the database. Also we need to assess how and where your PL/SQL code is deployed and obviously the se
Here is the PFCLCode main interface:
PFCLCode also includes a detailed dashboard to give you an overview of the code that you are analysing and number of issues located. It also allows you to compare the current situation in your PL/SQL code and compare to any previous analysis that you have done. Here is a screen shot of the dashboard: PFCLCode is a Windows based software and it can be used by a developer or a tester or a security analyst to review source code already deployed to a database. It needs to connect to a development or test databa