Union Tap Beta 3 Release
Date: Sunday, April 25 @ 23:21:16 CEST
Topic: Security


Union Tap Beta 2 took care of many of the false positives encountered when Beta 1 was distributed. This is Beta 3 which hopefully reduces the false positives from check_num and sid values. Two versions are being released here.

Die Version:

//Union Tap
//Copyright Zhen-Xjell 2004 http://nukecops.com
//Beta 3 Code to prevent UNION SQL Injections
unset($matches);
unset($loc);
if (preg_match("/([OdWo5NIbpuU4V2iJT0n]{5}) /", rawurldecode($loc=$_SERVER["QUERY_STRING"]), $matches)) {
die("YOU ARE SLAPPED BY <a href=\"http://nukecops.com\">NUKECOPS</a> BY USING '$matches[1]' INSIDE '$loc'.");
}

Sting's Modified HA Version:

/* Hack Attempt Hybrid thanks to Zhen-Xjell's Union Tap from http://www.nukecops.com
and Raven from http://www.ravenphpscripts.com/
To whom the Nuke community owes a lot
Posted by Sting to Nuke Cops on 04/23/2004 (See http://www.nukecops.com/postp120356.html#120356) */
unset($matches);
unset($loc);
if (preg_match("/([OdWo5NIbpuU4V2iJT0n]{5}) /", rawurldecode($loc=$_SERVER["QUERY_STRING"]), $matches)) {
header("Location: hackattempt.php?$loc");
die();
}






This article comes from NukeCops
http://www.nukecops.com

The URL for this story is:
http://www.nukecops.com/modules.php?name=News&file=article&sid=1992