[cooly]

Originally Posted by Optix

Nice try, but be careful : in stripos() , parameters of this function are inverted. Over that, it's perfect ;)

yeh a bit too sensitive but this is good.

//Access Security check
function instr($haystack, $needle) {
  $pos = strpos($haystack, $needle, 0);
  if ($pos != 0) return true;
  return false;
} 
if (instr($_SERVER['PHP_SELF'],"mysql")) {
    die("fishy");
}