You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 387 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: Sec-Fix Patch SFP (Score: 1)
by chatserv on Thursday, February 05 @ 10:54:19 CET
(User Info | Send a Message) http://nukeresources.com
I haven't made one but there are at least two things you can do to protect the site, not sure if they'll post correctly here but here goes anyway:

Near the top of header.php insert:
if (stristr($_SERVER["QUERY_STRING"],'%20union%20')) {
echo "die";
exit;
}

Near the top of Reviews/index.php insert:
if (isset($id)) {
$id = intval($id);
}


| Parent

Re: Sec-Fix Patch SFP (Score: 1)
by kipuka on Thursday, February 05 @ 13:03:54 CET
(User Info | Send a Message)
If you are on windows, there are some pretty decent file comparison tools out there. One is ExamDiff which is a freeware to do comparisons across two files. http://www.prestosoft.com/ps.asp?page=edp_examdiff Their paid version allows you to do it across multiple directories. I haven't found a freeware capable of doing the latter.

If you are on Linux, you can use the diff command to get the differences.

chatserv: Your suggestion to add to header can be bypassed.


| Parent
Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.075 Seconds - 181 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::