// Prevent any possible XSS attacks via $_GET.
foreach ($_GET as $check_url) {
if ((eregi("]*script*\"?*>", $check_url)) || (eregi("]*object*\"?*>", $check_url)) ||
(eregi("]*iframe*\"?*>", $check_url)) || (eregi("]*applet*\"?*>", $check_url)) ||
(eregi("]*meta*\"?*>", $check_url)) || (eregi("]*style*\"?*>", $check_url)) ||
(eregi("]*form*\"?*>", $check_url)) || (eregi("\(*\"?*\)", $check_url)) ||
(eregi("\"", $check_url))) {
die ();
}
}
unset($check_url);
fonte: www.sastgroup.com
...leggi tutto»
RSS feeds