Please, elaborate.
Anyway, I said this on LET:
So curtisg decided to run a PHP Analyzer (http://sourceforge.net/projects/rips-scanner/) on decoded WHMCS code, and he's posting all the false positives, including "exploits" generated by the analyzer that don't actually do anything.
Can he be...