From 4b34fc5a481f52b57b0293c825392dcabe7d2321 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Roland=20H=C3=A4der?= Date: Wed, 12 Aug 2020 01:09:33 +0200 Subject: [PATCH] Continued: - maybe lame but those statements shall never happen in a user-agent string MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Roland Häder --- libs/lib_detector.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libs/lib_detector.php b/libs/lib_detector.php index 1dc02b1..7dc5c47 100644 --- a/libs/lib_detector.php +++ b/libs/lib_detector.php @@ -168,6 +168,9 @@ function initCrackerTrackerArrays () { // BLock these words found in User-Agent $GLOBALS['ctracker_ua_blacklist'] = [ + // SQL commands + 'drop database', 'drop table', + // Compiler/interpreter 'bin/g++ ', 'bin/c++ ', 'cc ', 'bin/python', 'bin/python', 'bin/tclsh', 'bin/tclsh', 'bin/nasm', '/perl', 'wget ', 'system(', 'curl ', -- 2.39.5