Hallo ich habe eine kleine frage und zwar suche ich eine sichere Regi page die gegen sql Injektionen geschüzt ist kann mir da wer weiter helfen?
der jenige der mir hilfe würde von mir eine pm bekommen mit einem nützlichem link ;)
Mfg
Yoda
Frage zu Regi page
-
-
PHP
Alles anzeigen[COLOR=#000000] [COLOR=#0000BB]<?php $ip [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$_SERVER[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'REMOTE_ADDR'[/COLOR][COLOR=#007700]]; [/COLOR][COLOR=#0000BB]$time [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]date[/COLOR][COLOR=#007700]([/COLOR][COLOR=#DD0000]"l dS of F Y h:i:s A"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]$script [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$_SERVER[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]PATH_TRANSLATED[/COLOR][COLOR=#007700]]; [/COLOR][COLOR=#0000BB]$fp [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]fopen [/COLOR][COLOR=#007700]([/COLOR][COLOR=#DD0000]"[WEB]SQL_Injection.txt"[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"a+"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]$sql_inject_1 [/COLOR][COLOR=#007700]= array([/COLOR][COLOR=#DD0000]";"[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]"'"[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]"%"[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]'"'[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#Whoth need replace [/COLOR][COLOR=#0000BB]$sql_inject_2 [/COLOR][COLOR=#007700]= array([/COLOR][COLOR=#DD0000]""[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]""[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]""[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]"""[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#To wont replace [/COLOR][COLOR=#0000BB]$GET_KEY [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]array_keys[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#array keys from $_GET [/COLOR][COLOR=#0000BB]$POST_KEY [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]array_keys[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#array keys from $_POST [/COLOR][COLOR=#0000BB]$COOKIE_KEY [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]array_keys[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#array keys from $_COOKIE /*begin clear $_GET */ [/COLOR][COLOR=#007700]for([/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]=[/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700];[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]<[/COLOR][COLOR=#0000BB]count[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700]);[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]++) { [/COLOR][COLOR=#0000BB]$real_get[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]; [/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]] = [/COLOR][COLOR=#0000BB]str_replace[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$sql_inject_1[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]$sql_inject_2[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]HtmlSpecialChars[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]])); if([/COLOR][COLOR=#0000BB]$real_get[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] != [/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]) { [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"IP: $ip\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Method: GET\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Value: $real_get[$i]\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Script: $script\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Time: $time\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"==================================\r\n"[/COLOR][COLOR=#007700]); } } [/COLOR][COLOR=#FF8000]/*end clear $_GET */ /*begin clear $_POST */ [/COLOR][COLOR=#007700]for([/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]=[/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700];[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]<[/COLOR][COLOR=#0000BB]count[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700]);[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]++) { [/COLOR][COLOR=#0000BB]$real_post[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]; [/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]] = [/COLOR][COLOR=#0000BB]str_replace[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$sql_inject_1[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]$sql_inject_2[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]HtmlSpecialChars[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]])); if([/COLOR][COLOR=#0000BB]$real_post[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] != [/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]) { [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"IP: $ip\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Method: POST\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Value: $real_post[$i]\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Script: $script\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Time: $time\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"==================================\r\n"[/COLOR][COLOR=#007700]); } } [/COLOR][COLOR=#FF8000]/*end clear $_POST */ /*begin clear $_COOKIE */ [/COLOR][COLOR=#007700]for([/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]=[/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700];[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]<[/COLOR][COLOR=#0000BB]count[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700]);[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]++) { [/COLOR][COLOR=#0000BB]$real_cookie[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]; [/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]] = [/COLOR][COLOR=#0000BB]str_replace[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$sql_inject_1[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]$sql_inject_2[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]HtmlSpecialChars[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]])); if([/COLOR][COLOR=#0000BB]$real_cookie[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] != [/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]) { [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"IP: $ip\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Method: COOKIE\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Value: $real_cookie[$i]\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Script: $script\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Time: $time\r\n"[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"==================================\r\n"[/COLOR][COLOR=#007700]); } } [/COLOR][COLOR=#FF8000]/*end clear $_COOKIE */ [/COLOR][COLOR=#0000BB]fclose [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#0000BB]?>[/COLOR] [/COLOR]
Daten auf die Serverdaten ändern und fertig -
muss das in das normale regi script einfach rein oder wie? kenne mich nicht so nit php. und so aus
-
jap einfach bei der regi page einfügen
Jetzt mitmachen!
Sie haben noch kein Benutzerkonto auf unserer Seite? Registrieren Sie sich kostenlos und nehmen Sie an unserer Community teil!