server_name and script_name can now be NULL and set all empty strings to NULL, added...

diff --git a/libs/lib_detector.php b/libs/lib_detector.php
index e08a49744de036b9a36348032552d5d41d26a102..a6f8435897fea393f852eb40a24a0b9f5bbeab54 100644 (file)
--- a/libs/lib_detector.php
+++ b/libs/lib_detector.php
@@ -123,6 +123,9 @@ function initCrackerTrackerArrays () {
                // Windows XP (?) hacks
                'xp_enumdsn', 'xp_availablemedia', 'xp_filelist', 'xp_cmdshell',
 
+               // Attempts to insert links into a badly secured URL
+               '%3E%3C',
+
                // @TODO Misc/unsorted
                'cgi-', '.eml', '$_request', '$_get', '$request', '$get', '.system',
                '&aim', 'new_password', '&icq', '.conf', 'motd ', 'HTTP/1.',

diff --git a/libs/lib_updates.php b/libs/lib_updates.php
index 51e8ea2bd6c1754e9fb4959e69dbb1fce75844aa..1b8bcc9a0116a9e784fc6e2492431b8ad571ae0e 100644 (file)
--- a/libs/lib_updates.php
+++ b/libs/lib_updates.php
@@ -52,6 +52,14 @@ FOREIGN KEY ( `ctracker_data_id` ) REFERENCES `' . $GLOBALS['ctracker_dbname'] .
 `id`
 ) ON DELETE CASCADE
 ) TYPE=InnoDB',
+               ),
+
+               // NULL for missing values
+               1 => array(
+                       "ALTER TABLE `ctracker_data` CHANGE `script_name` `script_name` VARCHAR( 255 ) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL COMMENT 'Full script name",
+                       "UPDATE `ctracker_data` SET `script_name`=NULL WHERE `script_name`=''",
+                       "ALTER TABLE `ctracker_data` CHANGE `server_name` `server_name` TINYTEXT CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL COMMENT 'Server''s host name'",
+                       "UPDATE `ctracker_data` SET `server_name`=NULL WHERE `server_name`=''",
                )
        );
 }