* -------------------------------------------------------------------- *
* Copyright (c) 2003 - 2009 by Roland Haeder *
* Copyright (c) 2009 - 2011 by Mailer Developer Team *
- * For more information visit: http://www.mxchange.org *
+ * For more information visit: http://mxchange.org *
* *
* This program is free software; you can redistribute it and/or modify *
* it under the terms of the GNU General Public License as published by *
// Generate arrays which holds the relevante chars to replace
$GLOBALS['security_chars'] = array(
// The chars we are looking for...
- 'from' => array('/', '.', "'", '$', '(', ')', '{--', '--}', '{?', '?}', '%', ';', '[', ']', ':', '--'),
+ 'from' => array('/', '.', "'", '$', '(', ')', '{--', '--}', '{?', '?}', '%', ';', '[', ']', ':', '--', "\\"),
// ... and we will replace to.
'to' => array(
'{SLASH}',
'{OPEN_INDEX}',
'{CLOSE_INDEX}',
'{DBL_DOT}',
- '{COMMENT}'
+ '{COMMENT}',
+ '{BACKSLASH}'
),
);
} // END - foreach
} // END - if
+// Secure also $_POST data (only simple, no replace)
+if (is_array($_POST)) {
+ // Secure only simple data
+ foreach ($_POST as $seckey => $secvalue) {
+ // Is it an array?
+ if (!is_array($secvalue)) {
+ // Strip all other out
+ $_POST[$seckey] = secureString($_POST[$seckey]);
+ } // END - if
+ } // END - foreach
+} // END - if
+
// Detect PHP caching
detectPhpCaching();