kainsk
(27 Авг 2017 в 08:04)
?php
$time = time();
$bad_words = "UNION SELECT INSERT INSERT%20INTO FROM DROP TRUNCATE OUTFILE INTO";
$bad_list = explode(' ', $bad_words);
$line = $_POST?implode(" ", $_POST):$_SERVER['QUERY_STRING'];
$Gde=$_SERVER['SCRIPT_NAME'];
$Site=$_SERVER['SERVER_NAME'];
$Ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
$Cuseragent = $_SERVER['HTTP_USER_AGENT'];
$Querry=$_SERVER['QUERY_STRING'];
foreach ($bad_list as $re) {
$re = preg_quote($re, '/');
if (preg_match("/$re/i", $line
{
die("".header("Location: /index.php")."");
} }
|
жалоба