• There is NO official Otland's Discord server and NO official Otland's server list. The Otland's Staff does not manage any Discord server or server list. Moderators or administrator of any Discord server or server lists have NO connection to the Otland's Staff. Do not get scammed!

Check URL

N

Natrov

New Member
Joined
Dec 14, 2013
Messages
72
Reaction score
2
Siemka,
Co robię tu nie tak:
Code: 
function stripget($check_url) {
  $return = false;
  if (is_array($check_url)) {
      foreach ($check_url as $value) {
        $return = stripget($value);
        if ($return == true) { return true; }
      }
  } else {
      $check_url = str_replace("\"", "", $check_url);
      $check_url = str_replace("\'", "", $check_url);
      if ((preg_match("/<[^>]*script*\"?[^>]*>/i", $check_url)) || (preg_match("/<[^>]*object*\"?[^>]*>/i", $check_url)) ||
        (preg_match("/<[^>]*iframe*\"?[^>]*>/i", $check_url)) || (preg_match("/<[^>]*applet*\"?[^>]*>/i", $check_url)) ||
        (preg_match("/<[^>]*meta*\"?[^>]*>/i", $check_url)) || (preg_match("/<[^>]*style*\"?[^>]*>/i", $check_url)) ||
        (preg_match("/<[^>]*form*\"?[^>]*>/i", $check_url)) || (preg_match("/\([^>]*\"?[^)]*\)/i", $check_url))) {
        $return = true;
      }
  }
  return $return;
}
  // Prevent any possible XSS attacks via $_GET.
if (stripget($_GET)) {
  die("XSS atak nie działa na tej stronie");
}

Oczywiście dodaje all do index.php a po wpisaniu błędnych znaków w urlu nic nie powoduje. Proszę o jaką podpowiedz ;//
 
$name = stripslashes(ucwords(strtolower(trim($_REQUEST['name']))));
masz sie pobaw
 
Back
Top