From 10a83bd9d89eeb1e41aa3550fe7c4f08781f7706 Mon Sep 17 00:00:00 2001
From: Roland Haeder <roland@mxchange.org>
Date: Wed, 14 Sep 2011 10:59:31 +0000
Subject: [PATCH] .pl harms also legitime requests

---
 libs/lib_detector.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libs/lib_detector.php b/libs/lib_detector.php
index b2a48f0..b4044d9 100644
--- a/libs/lib_detector.php
+++ b/libs/lib_detector.php
@@ -56,7 +56,7 @@ function initCrackerTrackerArrays () {
 		'new_password', '&icq','/etc/passwd','/etc/shadow', '/etc/groups', '/etc/gshadow',
 		'HTTP_USER_AGENT', 'HTTP_HOST', 'wget%20', 'uname\x20-', 'uname%20-', 'bin/id', '/bin/', '/chgrp',
 		'/chown', '/usr/bin', 'g\+\+', 'bin/python', 'bin/tclsh', 'bin/nasm', 'perl%20', 'traceroute%20',
-		'ping%20', '.pl', 'bin/xterm', 'lsof%20', '.conf', 'motd%20', 'HTTP/1.', '.inc.php', '.lib.php',
+		'ping%20', 'bin/xterm', 'lsof%20', '.conf', 'motd%20', 'HTTP/1.', '.inc.php', '.lib.php',
 		'config.php', 'file\://', 'window.open', '<SCRIPT>', 'javascript\://', 'img src', 'img%20src', '.jsp',
 		'ftp.exe', 'xp_enumdsn', 'xp_availablemedia', 'xp_filelist', 'xp_cmdshell', 'nc.exe', '.htpasswd',
 		'servlet', '/etc/passwd', 'wwwacl', '~root', '~ftp', '.js', '.jsp', '.history', 'bash_history',
-- 
2.39.5