Detection of attempt of SQL injections added
authorRoland Haeder <roland@mxchange.org>
Wed, 24 Oct 2012 22:16:00 +0000 (22:16 +0000)
committerRoland Haeder <roland@mxchange.org>
Wed, 24 Oct 2012 22:16:00 +0000 (22:16 +0000)
libs/lib_detector.php

index c8e44636adcbb5e60a53d190e15973737e6eb175..cef8fd6de96b935800bf286fb0ad600998a2bc86 100644 (file)
@@ -68,7 +68,7 @@ function initCrackerTrackerArrays () {
                'page=http', 'module=http', 'op=http', 'id=http', 'id%3Dhttp', 'action%3Dhttp', 'page%3Dhttp',
                'module%3Dhttp', 'op%3Dhttp', 'starhack', '../../','..//', 'directory=http', 'dir=http', 'busca',
                'uol.com', '=http://', '=https://','=ftp://','=file://','_SESSION','CFG_ROOT','/proc/', ',0x', '(0x',
-               '=%7BQUOT%7D', '=%5C', 'DOCUMENT_ROOT', '_SERVER'
+               '=%7BQUOT%7D', '=%5C', 'DOCUMENT_ROOT', '_SERVER','=%22http','=%22ftp','=%22file'
        );
 
        // Block these words found in POST requests