Frage zu Regi page

Fistofgod · 19. September 2010, 19:01

Hallo ich habe eine kleine frage und zwar suche ich eine sichere Regi page die gegen sql Injektionen geschüzt ist kann mir da wer weiter helfen?

der jenige der mir hilfe würde von mir eine pm bekommen mit einem nützlichem link ;)

Mfg

Yoda

Rapide · 19. September 2010, 19:28

PHP-Quellcode

[COLOR=#000000] [COLOR=#0000BB]<?php
$ip [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$_SERVER[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'REMOTE_ADDR'[/COLOR][COLOR=#007700]];
[/COLOR][COLOR=#0000BB]$time [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]date[/COLOR][COLOR=#007700]([/COLOR][COLOR=#DD0000]"l dS of F Y h:i:s A"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]$script [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$_SERVER[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]PATH_TRANSLATED[/COLOR][COLOR=#007700]];
[/COLOR][COLOR=#0000BB]$fp [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]fopen [/COLOR][COLOR=#007700]([/COLOR][COLOR=#DD0000]"[WEB]SQL_Injection.txt"[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"a+"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]$sql_inject_1 [/COLOR][COLOR=#007700]= array([/COLOR][COLOR=#DD0000]";"[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]"'"[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]"%"[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]'"'[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#Whoth need replace
[/COLOR][COLOR=#0000BB]$sql_inject_2 [/COLOR][COLOR=#007700]= array([/COLOR][COLOR=#DD0000]""[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]""[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]""[/COLOR][COLOR=#007700],[/COLOR][COLOR=#DD0000]"""[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#To wont replace
[/COLOR][COLOR=#0000BB]$GET_KEY [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]array_keys[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#array keys from $_GET
[/COLOR][COLOR=#0000BB]$POST_KEY [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]array_keys[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#array keys from $_POST
[/COLOR][COLOR=#0000BB]$COOKIE_KEY [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]array_keys[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700]); [/COLOR][COLOR=#FF8000]#array keys from $_COOKIE
/*begin clear $_GET */
[/COLOR][COLOR=#007700]for([/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]=[/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700];[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]<[/COLOR][COLOR=#0000BB]count[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700]);[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]++)
{
[/COLOR][COLOR=#0000BB]$real_get[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]];
[/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]] = [/COLOR][COLOR=#0000BB]str_replace[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$sql_inject_1[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]$sql_inject_2[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]HtmlSpecialChars[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]));
if([/COLOR][COLOR=#0000BB]$real_get[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] != [/COLOR][COLOR=#0000BB]$_GET[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$GET_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]])
{
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"IP: $ip\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Method: GET\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Value: $real_get[$i]\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Script: $script\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Time: $time\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"==================================\r\n"[/COLOR][COLOR=#007700]);
}
}
[/COLOR][COLOR=#FF8000]/*end clear $_GET */
/*begin clear $_POST */
[/COLOR][COLOR=#007700]for([/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]=[/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700];[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]<[/COLOR][COLOR=#0000BB]count[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700]);[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]++)
{
[/COLOR][COLOR=#0000BB]$real_post[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]];
[/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]] = [/COLOR][COLOR=#0000BB]str_replace[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$sql_inject_1[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]$sql_inject_2[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]HtmlSpecialChars[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]));
if([/COLOR][COLOR=#0000BB]$real_post[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] != [/COLOR][COLOR=#0000BB]$_POST[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$POST_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]])
{
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"IP: $ip\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Method: POST\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Value: $real_post[$i]\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Script: $script\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Time: $time\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"==================================\r\n"[/COLOR][COLOR=#007700]);
}
}
[/COLOR][COLOR=#FF8000]/*end clear $_POST */
/*begin clear $_COOKIE */
[/COLOR][COLOR=#007700]for([/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]=[/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700];[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]<[/COLOR][COLOR=#0000BB]count[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700]);[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]++)
{
[/COLOR][COLOR=#0000BB]$real_cookie[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]];
[/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]] = [/COLOR][COLOR=#0000BB]str_replace[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$sql_inject_1[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]$sql_inject_2[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]HtmlSpecialChars[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]]));
if([/COLOR][COLOR=#0000BB]$real_cookie[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]] != [/COLOR][COLOR=#0000BB]$_COOKIE[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$COOKIE_KEY[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$i[/COLOR][COLOR=#007700]]])
{
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"IP: $ip\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Method: COOKIE\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Value: $real_cookie[$i]\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Script: $script\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"Time: $time\r\n"[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]fwrite [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700], [/COLOR][COLOR=#DD0000]"==================================\r\n"[/COLOR][COLOR=#007700]);
}
}
[/COLOR][COLOR=#FF8000]/*end clear $_COOKIE */
[/COLOR][COLOR=#0000BB]fclose [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$fp[/COLOR][COLOR=#007700]);
[/COLOR][COLOR=#0000BB]?>[/COLOR] [/COLOR]

Alles anzeigen

Daten auf die Serverdaten ändern und fertig

Fistofgod · 19. September 2010, 19:39

muss das in das normale regi script einfach rein oder wie? kenne mich nicht so nit php. und so aus

Rapide · 19. September 2010, 20:00

jap einfach bei der regi page einfügen

PHP-Quellcode

Teilen