note 83806 added to function.eregi

Prevent XXS attack <?php // Prevent any possible XSS attacks via $_GET. foreach ($_GET as $check_url) { if ((eregi("<[^>]*script*\"?[^>]*>", $check_url)) || (eregi("<[^>]*object*\"?[^>]*>", $check_url)) || (eregi("<[^>]*iframe*\"?[^>]*>", $check_url)) || (eregi("<[^>]*applet*\"?[^>]*>", $check_url)) || (eregi("<[^>]*meta*\"?[^>]*>", $check_url)) || (eregi("<[^>]*style*\"?[^>]*>", $check_url)) || (eregi("<[^>]*form*\"?[^>]*>", $check_url)) || (eregi("\([^>]*\"?[^)]*\)", $check_url)) || (eregi("\"", $check_url))) { die (); } } unset($check_url); ?> ---- Server IP: 69.147.83.197 Probable Submitter: 203.91.140.18 (proxied: 124.41.196.160) ---- Manual Page -- http://www.php.net/manual/en/function.eregi.php Edit -- https://master.php.net/note/edit/83806 Del: integrated -- https://master.php.net/note/delete/83806/integrated Del: useless -- https://master.php.net/note/delete/83806/useless Del: bad code -- https://master.php.net/note/delete/83806/bad+code Del: spam -- https://master.php.net/note/delete/83806/spam Del: non-english -- https://master.php.net/note/delete/83806/non-english Del: in docs -- https://master.php.net/note/delete/83806/in+docs Del: other reasons-- https://master.php.net/note/delete/83806 Reject -- https://master.php.net/note/reject/83806 Search -- https://master.php.net/manage/user-notes.php