In the near future I have to check the source code of a web application on security vulnerabilities. The web application mainly consists of PHP files and contains more than 300 files. Do you know programs that can help me with the security analysis of the source code?
For PHP, you can consider tools such as SecureAssist (by Synopsys). Its decently comprehensive and helps find security related vulnerabilities.
Other options include tools such as RIPS.
More information can be found on the Owasp static analysis tools page: