Community Learn Tools Library Leisure
search
English
Home > Backend Development > PHP Tutorial > 360 anti-cross-site attack script

360 anti-cross-site attack script

WBOY
Release： 2016-07-25 09:02:17
Original
1260 people have browsed it
360 anti-cross-site attack script转载地址： http://blog.qita.in/?post=275

使用方法：
require_once('360.php');
  1. //http://blog.qita.in
  2. function customError($errno, $errstr, $errfile, $errline)
  3. {
  4. echo "Error number: [$errno],error on line $errline in $errfile
    ";
  5. die();
  6. }
  7. set_error_handler("customError",E_ERROR);
  8. $getfilter="'|(and|or)\b.+?(>|$postfilter="\b(and|or)\b.{1,6}?(=|>|$cookiefilter="\b(and|or)\b.{1,6}?(=|>|function StopAttack($StrFiltKey,$StrFiltValue,$ArrFiltReq){
  10. if(is_array($StrFiltValue))
  11. {
  12. $StrFiltValue=implode($StrFiltValue);
  13. }
  14. if (preg_match("/".$ArrFiltReq."/is",$StrFiltValue)==1){
  15. //slog("

    操作IP: ".$_SERVER["REMOTE_ADDR"]."
    操作时间: ".strftime("%Y-%m-%d %H:%M:%S")."
    操作页面:".$_SERVER["PHP_SELF"]."
    提交方式: ".$_SERVER["REQUEST_METHOD"]."
    提交参数: ".$StrFiltKey."
    提交数据: ".$StrFiltValue);
  16. print "360websec notice:Illegal operation!";
  17. exit();
  18. }
  19. }
  20. //$ArrPGC=array_merge($_GET,$_POST,$_COOKIE);
  21. foreach($_GET as $key=>$value){
  22. StopAttack($key,$value,$getfilter);
  23. }
  24. foreach($_POST as $key=>$value){
  25. StopAttack($key,$value,$postfilter);
  26. }
  27. foreach($_COOKIE as $key=>$value){
  28. StopAttack($key,$value,$cookiefilter);
  29. }
  31. function slog($logs)
  32. {
  33. $toppath=$_SERVER["DOCUMENT_ROOT"]."/log.htm";
  34. $Ts=fopen($toppath,"a+");
  35. fputs($Ts,$logs."rn");
  36. fclose($Ts);
  37. }
  38. ?>
复制代码


Related labels：
360防跨站攻击脚本
source：php.cn
Previous article：Regularly extract style content Next article：Combo Script automatically merges/compresses scripts imitating Taobao
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
function_exists() cannot determine the custom function Function test () {return true;} if (function_exists ('test')) {echo "test is function...
From 2024-04-29 11:01:01
0
3
2207
How to display the mobile version of Google Chrome Hello teacher, how can I change Google Chrome into a mobile version?
From 2024-04-23 00:22:19
0
11
2360
The child window operates the parent window, but the output does not respond. The first two sentences are executable, but the last sentence cannot be implemented.
From 2024-04-19 15:37:47
0
1
1974
There is no output in the parent window document.onclick = function(){ window.opener.document.write('I am the output of the child ...
From 2024-04-18 23:52:34
0
1
1859
Where is the courseware about CSS mind mapping? Courseware
From 2024-04-16 10:10:18
0
0
1924
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template