note 17609 deleted from function.system by zak
| From: | zak@php.net | Date: | Mon, 17 Dec 2001 06:14:13 +0000 |
| Subject: | note 17609 deleted from function.system by zak | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-22973@lists.php.net to get a copy of this message | ||
To make sure someone doesn't rm -rf $SERVER_ROOT or something of that nature when taking user
feedback in a command here is a below limiter, $server is the input from a form.
<?php
$bad1=";";
$bad2="|";
$bad3="&";
if(strstr($server,$bad1) || strstr($server,$bad2) || strstr($server,$bad3)) {
echo "<H1>You will not hack me!</H1>";
} else if ((isset($server)) && ($server!="")) {
strip_tags($server);
system("ab -w $server/");
}
?>