note 114899 deleted from security.database.sql-injection by cmb
| From: | cmb@php.net | Date: | Fri, 09 Dec 2016 09:48:10 +0000 |
| Subject: | note 114899 deleted from security.database.sql-injection by cmb | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-208288@lists.php.net to get a copy of this message | ||
Note Submitter: Nikolay Mihaylov
----
Because we host several websites, written by different clients, I prepend this file on every php
file on my server:
function armor_1234567890_abc(){
foreach($_REQUEST as $key => $data){
$data = strtolower($data);
if (strpos($data, "base64_") !== false)
exit;
if (strpos($data, "union") !== false && strpos($data, "select") !==
false)
exit;
}
}
armor_1234567890_abc();