note 114899 added to security.database.sql-injection
| From: | NikolayMihaylov | Date: | Tue, 22 Apr 2014 21:29:16 +0000 |
| Subject: | note 114899 added to security.database.sql-injection | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-199319@lists.php.net to get a copy of this message | ||
Because we host several websites, written by different clients, I prepend this file on every php
file on my server:
function armor_1234567890_abc(){
foreach($_REQUEST as $key => $data){
$data = strtolower($data);
if (strpos($data, "base64_") !== false)
exit;
if (strpos($data, "union") !== false && strpos($data, "select") !==
false)
exit;
}
}
armor_1234567890_abc();
----
Server IP: 72.52.91.14
Probable Submitter: 94.190.227.38
----
Manual Page -- http://php.net/manual/en/security.database.sql-injection.php
Edit -- https://master.php.net/note/edit/114899
Del: integrated -- https://master.php.net/note/delete/114899/integrated
Del: useless -- https://master.php.net/note/delete/114899/useless
Del: bad code -- https://master.php.net/note/delete/114899/bad+code
Del: spam -- https://master.php.net/note/delete/114899/spam
Del: non-english -- https://master.php.net/note/delete/114899/non-english
Del: in docs -- https://master.php.net/note/delete/114899/in+docs
Del: other reasons-- https://master.php.net/note/delete/114899
Reject -- https://master.php.net/note/reject/114899
Search -- https://master.php.net/manage/user-notes.php