RE: [PHP] Apache blocking certain requests instead of php
| From: | Arno Kuhl | Date: | Thu, 24 Jul 2008 07:35:21 +0000 |
| Subject: | RE: [PHP] Apache blocking certain requests instead of php | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-277229@lists.php.net to get a copy of this message | ||
> I was hoping there's a way to tell apache to block requests where
> id=non_numeric.
It's trying to do a remote inclusion.
It's easy for you to fix in php:
if (isset($_GET['id'])) {
if (!is_numeric($_GET['id'])) {
die("Die hacker die!");
}
}
I'm sure there would be a way to do it with ModRewrite or something but it's
5 lines of code in php so I'd do it there *shrug*.
--
Thanks, I'm already doing something like that, but I want to stop it getting
to php.
Cheers
Arno