Implement LFI

[estringana]

Description

This PR implements the first exploit prevention added to PHP. That means that apart of wrapping the LFI php functions, it also implements everything else to report exploits. This PR consists on:

• Wrapped certain file operations
  • file_get_contents
  • file_put_contents
  • fopen
  • readfile
• Add exploit preventions metrics
• Add LFI capability to RC
• Add rasp configurations

Related Jiras: APPSEC-52929, APPSEC-53812, APPSEC-53813

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 39.70588% with 41 lines in your changes missing coverage. Please review.

Project coverage is 72.75%. Comparing base (8273bb7) to head (1526965).
Report is 1 commits behind head on master.

Files with missing lines	Patch %	Lines
.../Integrations/Filesystem/FilesystemIntegration.php	0.00%	37 Missing ⚠️
appsec/src/extension/ddappsec.c	87.50%	0 Missing and 2 partials ⚠️
appsec/src/extension/tags.c	75.00%	1 Missing and 1 partial ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #2770      +/-   ##
============================================
- Coverage     72.90%   72.75%   -0.16%     
- Complexity     2741     2750       +9     
============================================
  Files           137      138       +1     
  Lines         14978    15038      +60     
  Branches       1016     1020       +4     
============================================
+ Hits          10920    10941      +21     
- Misses         3506     3543      +37     
- Partials        552      554       +2     

Flag	Coverage Δ
appsec-extension	67.97% <87.09%> (+0.13%)	⬆️
tracer-php	74.56% <0.00%> (-0.26%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
appsec/src/extension/backtrace.c	70.88% <100.00%> (+0.18%)	⬆️
appsec/src/extension/commands/request_exec.c	100.00% <100.00%> (ø)
appsec/src/extension/configuration.h	100.00% <ø> (ø)
appsec/src/extension/user_tracking.c	71.69% <100.00%> (ø)
appsec/src/extension/ddappsec.c	79.07% <87.50%> (+1.20%)	⬆️
appsec/src/extension/tags.c	79.80% <75.00%> (-0.07%)	⬇️
.../Integrations/Filesystem/FilesystemIntegration.php	0.00% <0.00%> (ø)

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8273bb7...1526965. Read the comment docs.

[pr-commenter]

Benchmarks

Benchmark execution time: 2024-09-20 09:39:55

Comparing candidate commit eb254e3 in PR branch estringana/implement-lfi with baseline commit 339adfc in branch estringana/add-appsec-benchmarks.

Found 0 performance improvements and 1 performance regressions! Performance is the same for 11 metrics, 0 unstable metrics.

scenario:WordPressBench/benchWordPressOverhead-appsec

• 🟥 execution_time [+3.357ms; +3.691ms] or [+12.342%; +13.570%]