script monitors your site for dangerous SQL injection and RFI vulnerabilities

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • ksg91
    replied
    Originally posted by opera View Post
    PHP Code:
    echo good job; 
    
    thanx
    lol wrong code
    PHP Code:
    echo "good job"; 
    
    is correct ;)

    Leave a comment:


  • opera
    replied
    Originally posted by wapmetal View Post
    you can monitor but you cant prevent hacking LOL


    btw theres also codes here posted by subzero
    sanitize all inputs from user

    Leave a comment:


  • opera
    replied
    Gr8

    PHP Code:
    echo good job; 
    
    thanx

    Leave a comment:


  • makvanpor2000
    replied
    Monitor has in how, how did u got the monitor

    Leave a comment:


  • wapmetal
    replied
    you can monitor but you cant prevent hacking LOL


    btw theres also codes here posted by subzero

    Leave a comment:


  • script monitors your site for dangerous SQL injection and RFI vulnerabilities

    this php script help u to protect ur site for dangerous SQL injection and RFI vulnerabilities :

    Installation

    1. make "logs " dir

    2. chmod the directory 'logs' to 777

    3. Add the following line to the .htaccess file in root folder to monitor the requests.

    php_value auto_append_file /home/username/public_html/requestlogger.php

    replace /home/username/public_html/ with your root path.

    php script here :

    PHP Code:
    <? // Security module by 12345 xmen
        // Please do not change anything in this file
    log_requests();
    
    function log_requests(){
    
    $aurl=urldecode($_SERVER['REQUEST_URI']);
    
        if($GLOBALS['logged']!=1){
    
            $GLOBALS['logged']=1;
    
    if(!(
    strstr($aurl,'\'') ||
    strstr($aurl,'"')
    )
    )return;
    
            $filename = $_SERVER['DOCUMENT_ROOT'].'/crappylog/crap-'.date("d-M-y", time()).'.txt';
            $somecontent = date("D d M y-H:i:s", time());
    
            $somecontent .= "|| TIME: ".$timespent;
            $somecontent .= "|| URI: ";
            $somecontent.=$_SERVER['REQUEST_URI'];
            $somecontent .= "|| URIU: ";
            //$somecontent.=$aurl;
            
    /*
            $somecontent .= "|| BROWSER: ";
            $somecontent.=$_SERVER['HTTP_USER_AGENT'];
    
            
            $somecontent .= "|| IP: ";
            $somecontent.=$_SERVER['REMOTE_ADDR'];
            
            $somecontent .= "|| FORWARDED: ";
            $somecontent.=$_SERVER['HTTP_X_FORWARDED_FOR'];        
    
    
            $somecontent .= "|| POST: ";
            foreach($_POST as $k=>$v){
                $k=preg_replace("/[\s]/", " ", $k);
                $v=preg_replace("/[\s]/", " ", $v);
                $somecontent.="$k==$v::";
            }
    */
    
            touch($filename);
    
            if (is_writable($filename)) {
                $handle = fopen($filename, 'a');
                flock($handle, LOCK_EX);
                if (!$handle) {
                     echo "Cannot open";
                }
                if (fwrite($handle, $somecontent."\n") === FALSE) {
                    echo "Cannot write";
                }
                flock($handle, LOCK_UN);
                fclose($handle);
    
            }
            else {
                echo "logger not writable";
            }
        }
    }
        
    ?>
    i hope its hlp you if u like say thanks !
Working...
X