lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Amelioration protection sql injection

Browse Source
This commit is contained in:
Rodolphe Quiedeville 2007-01-19 19:27:01 +00:00
parent d55c82039d
commit 576b93e7a8
1 changed files with 6 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
htdocs/main.inc.php
View File

@ -63,21 +63,15 @@ function test_sql_inject($val)
return $sql_inj;
}
$sql_inj = 0;
foreach ($_GET as $val)
foreach ($_GET as $key => $val)
{
$sql_inj += test_sql_inject($val);
if (test_sql_inject($val) > 0)
unset($_GET[$key]);
}
foreach ($_POST as $val)
foreach ($_POST as $key => $val)
{
$sql_inj += test_sql_inject($val);
}
if ($sql_inj > 0 )
{
// Si attaque detectee on vide GET et POST
$_GET = array();
$_POST = array();
if (test_sql_inject($val) > 0)
unset($_POST[$key]);
}
// Fin filtre des GET et POST