note 114899 added to security.database.sql-injection

From: Date: Tue, 22 Apr 2014 21:29:16 +0000
Subject: note 114899 added to security.database.sql-injection
Groups: php.notes 
Request: Send a blank email to php-notes+get-199319@lists.php.net to get a copy of this message
Because we host several websites, written by different clients, I prepend this file on every php file on my server: function armor_1234567890_abc(){ foreach($_REQUEST as $key => $data){ $data = strtolower($data); if (strpos($data, "base64_") !== false) exit; if (strpos($data, "union") !== false && strpos($data, "select") !== false) exit; } } armor_1234567890_abc(); ---- Server IP: 72.52.91.14 Probable Submitter: 94.190.227.38 ---- Manual Page -- http://php.net/manual/en/security.database.sql-injection.php Edit -- https://master.php.net/note/edit/114899 Del: integrated -- https://master.php.net/note/delete/114899/integrated Del: useless -- https://master.php.net/note/delete/114899/useless Del: bad code -- https://master.php.net/note/delete/114899/bad+code Del: spam -- https://master.php.net/note/delete/114899/spam Del: non-english -- https://master.php.net/note/delete/114899/non-english Del: in docs -- https://master.php.net/note/delete/114899/in+docs Del: other reasons-- https://master.php.net/note/delete/114899 Reject -- https://master.php.net/note/reject/114899 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#199319) next »