More PHP function calls (I don't like such RPCs) blocked
authorRoland Häder <roland@mxchange.org>
Wed, 20 Jul 2016 08:26:41 +0000 (10:26 +0200)
committerRoland Häder <roland@mxchange.org>
Wed, 20 Jul 2016 08:26:41 +0000 (10:26 +0200)
Signed-off-by: Roland Häder <roland@mxchange.org>
libs/lib_detector.php

index 9f3694f216fb0327b034b92d31099ce91528388b..9e61ff11f0d1285c1408ee2c781c12db1d7f975e 100644 (file)
@@ -93,12 +93,16 @@ function initCrackerTrackerArrays () {
                'allow_url_fopen', 'allow_url_include', 'auto_prepend_file', 'disable_functions', 'safe_mode',
 
                // PHP commands/scripts
-               'fopen', 'fwrite', 'phpinfo()', '\<?', '?\>',
+               'fopen', 'fwrite', 'phpinfo()', '\<?', '?\>', 'base64_decode', 'file_put_contents',
+               'set_magic_quotes_runtime', 'set_magic_quotes_runtime', 'display_errors', 'passthru',,
 
                // Typical PHP script remote-inclusions and typical include file names
                '.inc.php', '.lib.php', '.class.php', 'config.php', '.inc', '_php',
                'php_', 'class_', '_class.php', 'db_mysql.inc',
 
+               // PHP arrays
+               '_PHPLIB',
+
                // Generic remote inclusion
                '=http://', '=https://',
                'path=', 'sql=',