Add check for CVE-2013-1635 (only for 5.3.22 and 5.4.x before 5.4.13) about iniscan HOT 5 CLOSED

Before I submit a pull request for this a couple of questions:

1. The naming scheme for rules dealing with CVEs. Would you prefer a class name that conforms to a particular naming scheme (e.g.: Psecio\Iniscan\Rule\Cve\2013\1635) or something a bit more descriptive (e.g.: Psecio\Iniscan\Rule\CheckSoapWsdlCacheDir)?
2. I'd like to extend Psecio\Iniscan\Rule to include a get/set version so the ini tool can be used to scan future problems with a php.ini before an upgrade/downgrade happens (also makes testing for version specific rules easier). Are you happy with that?

from iniscan.

1. I think I'd like to stick with the descriptive name and just provide a link to the CVE in the header docs of the class. I'd rather people know what it's checking than what specific CVE it relates to.
2. Yep, that's good by me - go for it.

from iniscan.

Found an interesting side-effect. Setting open_basedir to a folder that does not contain your CLI php.ini prevents PHP from being able to read the php.ini file which prevent the iniscan from working (obviously this is moot when scanning your apache/httpd/etc php.ini file).

from iniscan.

Huh, good point...chicken and egg sort of thing. I guess that's one limitation of using PHP to run a PHP check heh...

from iniscan.

Closing this issue as this check was added.

from iniscan.