We've got a standard PHP-based shared hosting for some non-profit organizations. Users can upload over FTP any PHP apps, and we're worrying that some of them aren't properly maintained, f.e. updated.
Are there any scripts or programs that could automatically find what apps are installed, where are they and what versions?
I'd imagine them to work like anti-virus scanners, that is: have a database of "signatures" (for example a set of strings to be matched against .php files). It has been suggested that simple md5/sha1 sums won't work, as many of the configuration files are modified by user.