OXPUS.de

Code: Alles auswählen

<?php

if (!isset($_SESSION) || !is_array($_SESSION))
{
    $_SESSION = array();
}
if (!isset($_GET) || !is_array($_GET))
{
    $_GET = array();
}
if (!isset($_POST) || !is_array($_POST))
{
    $_POST = array();
}
$sn = session_name();
if (isset($_GET[$sn]))
if (strlen($_GET[$sn]) != 32)
unset($_GET[$sn]);
if (isset($_POST[$sn]))
if (strlen($_POST[$sn]) != 32)
unset($_POST[$sn]);
if (isset($_COOKIE[$sn]))
if (strlen($_COOKIE[$sn]) != 32)
unset($_COOKIE[$sn]);
if (isset($PHPSESSID))
if (strlen($PHPSESSID) != 32)
unset($PHPSESSID);
foreach ($_GET as $key => $val)
{
    $_GET[$key] = htmlspecialchars($val);
}
foreach ($_GET as $key => $val)
{
    $_GET[$key] = strtolower($val);
}
if (get_magic_quotes_gpc() == 0)
{
    foreach ($_GET as $key => $val)
    {
        $_GET[$key] = addslashes($val);
    }
}
$_GET = preg_replace('(\/|\.\.|"|\'|\x00|.ht(.*)|(.*).php|<?php|\?>|%20cmd|cmd%20|fopen|fwrite|password|union%20|%20union|union|union=|script|update|img|src)', '', $_GET);
$_GET = str_replace('%00', '', $_GET);
$_SERVER['QUERY_STRING'] = strtolower($_SERVER['QUERY_STRING']);
$_SERVER['QUERY_STRING'] = preg_replace('(\/|\.\.|"|\'|\x00|.ht(.*)|(.*).php|<?php|\?>|%20cmd|cmd%20|fopen|fwrite|password|union%20|%20union|union|union=|<script|update)', '', $_SERVER['QUERY_STRING']);
$_SERVER['QUERY_STRING'] = htmlspecialchars($_SERVER['QUERY_STRING']);
$_SERVER['QUERY_STRING'] = str_replace('%00', '', $_SERVER['QUERY_STRING']);
if (get_magic_quotes_gpc() == 0)
{
    $_SERVER['QUERY_STRING'] = addslashes($_SERVER['QUERY_STRING']);
}

?>

Code: Alles auswählen

<?php

foreach($_POST as $k => $v)
{
$s = str_split($v);
$_POST[$k] = null;
foreach($s as $c=>$vv)
{
if(preg_match("/[^a-zA-Z0-9.]/i", $vv))
{
unset($s[$c]);
}
}
foreach($s as $muh)
{
$_POST[$k] .= $muh;
}
}

?>