SonarPHP security good practices

SonarQube Writing rules
6

A post was split to a new topic: No issue detected in “Damn Vulnerable Web App”