Back to Library

Find PHP Files

Finds PHP files displaying parse error messages that reveal source code file paths and line numbers.

Intermediate
Safe to use
files

Google Dork Query:

Parse error: parse error, unexpected T_VARIABLE" "on line" filetype:php
0
Not verified

What It Does

This dork searches for PHP parse error messages containing 'unexpected T_VARIABLE' with 'filetype:php' to find scripts with syntax errors. These error messages expose the full server file path, the line number where the error occurs, and sometimes portions of the source code surrounding the error.

Common Use Cases

  • Information Disclosure Detection: Find servers exposing internal file paths and code structure through unhandled PHP parse errors.
  • Development Environment Discovery: Identify development or staging servers accidentally exposed to the internet with debug error display enabled.
  • Code Quality Assessment: Locate PHP applications with syntax errors that indicate poor code review and deployment practices.

How to Use Safely

  1. Execute the dork in Google to find PHP pages displaying parse error messages.
  2. Extract file paths and directory structures revealed in the error output.
  3. Determine if the server is a production or development environment based on the path structure.
  4. Recommend setting display_errors=Off in production and implementing proper error logging.

Responsible Use Required

This dork should only be used on systems you own or have explicit authorization to test. Unauthorized access to computer systems is illegal. Always follow ethical guidelines and obtain proper permission before testing.

TAGS

php

Related Dorks

Find MODERATOR Files

Finds exposed vBulletin moderator control panels that may allow unauthorized forum moderation actions.

Exposed Configuration Files

Finds exposed configuration files (.config, .cfg, .ini) containing plaintext passwords and database credentials.

Find Backup-Management (phpMyBackup v.0.4 beta * ) Pages

Finds exposed phpMyBackup management interfaces that could allow unauthorized access to MySQL database backup operations.