Set harder security constraints

phpcs-errors:0 phpunit-status:successful phpstan-errors:665

phpstan.neon

@@ -10,3 +10,56 @@ parameters:
     ignoreErrors:
         - '#Class MDDBConnectionImpossible not found.#'
         - '#Class MDMysqliExpectedError not found.#'
+    bootstrapFiles:
+        - inc/constants.php
+    excludes_analyse:
+        - classes/MDAllowedValueSets/l18n
+    disallowedFunctionCalls:
+        -
+            function: 'ini_alter()'
+            message: 'use ini_set instead'
+        -
+            function: 'diskfreespace()'
+            message: 'use disk_free_space instead'
+        -
+            function: 'php_sapi_name()'
+            message: 'use PHP_SAPI instead'
+        -
+            function: 'set_file_buffer()'
+            message: 'use stream_set_write_buffer instead'
+        - function: 'dl()'
+        - function: 'opcache_get_status()'
+        - function: 'phpinfo()'
+        - function: 'parse_ini_file()'
+        - function: 'show_source()'
+        - function: 'highlight_file()'
+        - function: 'php_uname()'
+        - function: 'phpcredits()'
+        - function: 'php_strip_whitespace()'
+        - function: 'popen()'
+        - function: 'pclose()'
+        - function: 'virtual()'
+        - function: 'passthru()'
+        - function: 'proc_close()'
+        - function: 'proc_get_status()'
+        - function: 'proc_nice()'
+        - function: 'proc_open()'
+        - function: 'proc_terminate()'
+        - function: 'system()'
+        - function: 'get_current_user()'
+        - function: 'getmyuid()'
+        - function: 'getmygid()'
+        - function: 'getmypid()'
+        - function: 'getmyinode()'
+        - function: 'getlastmod()'
+        - function: 'putenv()'
+        - function: 'chgrp()'
+        - function: 'chgrp()'
+        - function: 'lchgrp()'
+        - function: 'lchown()'
+        - function: 'link()'
+        - function: 'linkinfo()'
+        - function: 'symlink()'
+includes:
+    - classes/MD_QA/rules/phpstan-rules.neon
+    - vendor/spaze/phpstan-disallowed-calls/extension.neon