lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Amelioration protection sql injection

Browse Source
This commit is contained in:
Rodolphe Quiedeville 2007-01-19 19:27:01 +00:00
parent d55c82039d
commit 576b93e7a8
1 changed files with 6 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
htdocs/main.inc.php
View File

@ -63,21 +63,15 @@ function test_sql_inject($val)
return $sql_inj; return $sql_inj;
} }
$sql_inj = 0; foreach ($_GET as $key => $val)
foreach ($_GET as $val)
{ {
$sql_inj += test_sql_inject($val); if (test_sql_inject($val) > 0)
unset($_GET[$key]);
} }
foreach ($_POST as $val) foreach ($_POST as $key => $val)
{ {
$sql_inj += test_sql_inject($val); if (test_sql_inject($val) > 0)
} unset($_POST[$key]);
if ($sql_inj > 0 )
{
// Si attaque detectee on vide GET et POST
$_GET = array();
$_POST = array();
} }
// Fin filtre des GET et POST // Fin filtre des GET et POST