“The PHP frontend was unable to resolve the following include…” Errors

Question

How do I resolve issues reported by the Fortify scan of the form: “The PHP frontend was unable to resolve the following include…”

Answer

This error generally occurs when the source (or php.ini file) includes a file using a relative path name. Because of the relative path, Fortify will not be able to find the include files. To resolve this issue, use the -php-source-root argument to sourceanalyzer to specify the source root:

sourceanalyzer -php-source-root <path> -b <buildid> <files>

If scanning from one of the graphical interfaces, please see the technical note on how to enter command-line arguments into Audit Workbench or Fortify IDE plugin.

References

Fortify documentation