Continued:
authorRoland Häder <roland@mxchange.org>
Wed, 22 Aug 2018 18:28:29 +0000 (20:28 +0200)
committerRoland Häder <roland@mxchange.org>
Wed, 22 Aug 2018 18:28:29 +0000 (20:28 +0200)
- banned suhosin entirely from GET parameters (makes really no sense)
- also banned some other php.ini settings

libs/lib_detector.php

index 21a15d8e5e54d808a7a15bf744ba403da5120e49..505df9ec7c2869412e54c258687e14c1f648f9b9 100644 (file)
@@ -96,7 +96,7 @@ function initCrackerTrackerArrays () {
 
                // php.ini settings
                'allow_url_fopen', 'allow_url_include', 'auto_prepend_file', 'disable_functions', 'safe_mode',
-               'open_basedir',
+               'open_basedir', 'suhosin', 'cgi.force_redirect', 'cgi.redirect_status_env',
 
                // PHP commands/scripts
                'fopen', 'fwrite', 'phpinfo()', '\<?', '?\>', 'base64_decode', 'file_put_contents',