View Single Post
  #3  
Old 25th August 2011, 15:05
smoky28's Avatar
smoky28 smoky28 is offline
Senior Member
 
Join Date: Aug 2010
Hungary
Posts: 82
Smile Security update fresh
these words give to the censorship which means it does XSS = x * s and so viewed from the malicious code can run on either side

XSS,xss,union,textarea,TEXTAREA,script,Script,SCRI PT,drop,DROP,killall,KILLALL,UNION,Union,union,

admin/settings.php/SECURITY Settings/Censored Words

Bump: Add code globalfuntcions.php
top
This is a method of my database class which let me sift the unsafe data inputs down.
PHP Code:
function siftDown($dataStack){        if(!is_array($dataStack)){            $dataStack ereg_replace("[\'\")(;|`,<>]","",$dataStack);            $dataStack mysql_real_escape_string(trim($dataStack),$this->connection);            $dataStack stripslashes($dataStack);            return $dataStack;            }        $safeData = array();        foreach($dataStack as $p=>$data){                    $data ereg_replace("[\'\")(;|`,<>]","",$data);                    $data mysql_real_escape_string(trim($data),$this->connection);                    $data stripslashes($data);                    $safeData[$p] = $data;                    }        return $safeData;        } 
__________________
Sky-Tech Developer Team Hungary


Last edited by smoky28; 19th October 2011 at 11:08.
Reply With Quote