Hi! We are looking at Panopticon to do our sites management. It's looking very promising. Great.
In Panopticon the PHP file scanner from Admin Tools is used. We have not been using this feature because we use a external tool for this. But when we use Panopticon I need to understand the way the PHP file scanner works. And I get the basic principal.
I have stared scanning one of our sites. But we get a lot of suspicious files. I am pretty sure non of those fields are actually 'bad'. The just use code that looks suspicious. But to be able to use the filescanner effectively we don;t want to inspect 300 files. So we need to set some 'baseline'. And then only inspect changes / new suspicious files.
So would this be the best way to get started? -> Scan all files. Mark all of the as safe and then start actually inspecting files at the next scan?