note 111466 deleted from security.database.sql-injection by danbrown
| From: | danbrown@php.net | Date: | Mon, 04 Mar 2013 17:56:20 +0000 |
| Subject: | note 111466 deleted from security.database.sql-injection by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-193855@lists.php.net to get a copy of this message | ||
Note Submitter: info at djdb dot be
----
Sorry there must be an upgrade of the script
modurator can you delete the past
<?php
/**
* @author Lieven Roegiers
* @copyright 2009
* @CMS autosite
* opensource http://code.google.com/p/autosite/
* <script language='JavaScript' src='<?php print
$autosite['javascript']?>form.val.js'></script>
* <form onsubmit="return formCheck()" enctype="text/plain"
method="GET"></form>
*/
class valid{
public function is_valid(&$GETorPOST){
if(is_array($GETorPOST)){
foreach($GETorPOST as $key=>$value){
$V2 = strtoupper($value);
//print_r($GETorPOST);
//print "XXXXXXXX".$key;
if($this->is_phpkeyinject($V2)){
//print "1";
return false;
}
if( $this->is_phpinject($V2)||
$this->is_sqlinject($V2)
){
//print "2";
return false;
}
}
}
//print "3";
return true;
}
/**
* Prevention of
* files.php?login_id=1234567890 OR 1=1
* De volgende SQL query wordt uitgevoerd:
* SELECT * FROM files WHERE id = 1234567890 OR 1=1
*
*
* @param mixed $var
* @return
*/
function is_sqlinject($var){//DROP TABLE
return strpos($var,"DROP TABLE")||
strpos($var,"DROP")||
strpos($var,"OR 1=1")||
(strpos($var," WHERE ") && strpos($var," OR "))||
(strpos($var," OR ") && strpos($var," LIKE "))||
(strpos($var,"\'' ") < strpos($var," LIKE "))||
(strpos($var,"UPDATE ") && (strpos($var,"SET ") <
strpos($var,"WHERE ")))||
(strpos($var,"INSERT INTO ") && strpos($var,"VALUES
"))||
strpos($var,"SELECT * FROM");
}
/**
* @param mixed $var
* @return
*/
function is_phpinject($var){
return false;//($var,"DROP");//||strpos($var,"print_r(");
}
/**
* prevention of
* .php?a[]=asd&a[]=asdasd&b[]=$a
* @param mixed $var
* @return
*/
function is_phpkeyinject($var){
return strpos($var,"[");
}
/**
* @param mixed $var
* @return
*/
function is_spaminject($var){
return strpos($var,"sex")||strpos($var,"SEX");
}
// %% (( ))
function illegalcharconverter($str){
$chars=array("&" ,"<" , ">" ,"!"
,'"' ,"," ,"$" ,"'" ,"*"
,"+" );
$ascii=array("&","<",
">","!",""",",","$","'","*","+");
return str_replace($chars,$ascii , $str);
}
}
?>