Added some php.ini settings to block

[ctracker.git] / libs / lib_detector.php

diff --git a/libs/lib_detector.php b/libs/lib_detector.php
index b2f6a68ce43f5ab4bb156464f6b1d554bfbb6e9a..3511de9896a5d03023dd82d99a9ffc08765c17bb 100644 (file)
--- a/libs/lib_detector.php
+++ b/libs/lib_detector.php
@@ -123,6 +123,12 @@ function initCrackerTrackerArrays () {
                // Windows XP (?) hacks
                'xp_enumdsn', 'xp_availablemedia', 'xp_filelist', 'xp_cmdshell',
 
+               // Attempts to insert links into a badly secured URL
+               '%3E%3C',
+
+               // php.ini settings
+               'allow_url_fopen', 'allow_url_include', 'auto_prepend_file', 'disable_functions',
+
                // @TODO Misc/unsorted
                'cgi-', '.eml', '$_request', '$_get', '$request', '$get', '.system',
                '&aim', 'new_password', '&icq', '.conf', 'motd ', 'HTTP/1.',