Fitim schreef:
Spoiler tonen
Dit is gewoon gratis wat jij betaald aan bied.
Even includen met Config.php en je hebt een anti sql script.
[COLOR= #0000BB]<?
$ReportHackMailAdres[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]jouwemail@jouwemail.nl[/COLOR][COLOR= #007700];[/COLOR] [COLOR= #FF8000]//HIER JE EMAIL ADRES INVULLEN
//dit is voor de injectie[/COLOR]
[COLOR= #0000BB]$locatie[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$_SERVER[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]REQUEST_URI[/COLOR][COLOR= #007700]];[/COLOR]
[COLOR= #0000BB]$array[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/Array"]Array[/URL][COLOR= #007700]();[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"mysql"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"query"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]";"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"}"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"SELECT"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"INSERT"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"%40"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"DROPTABLE"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"TRUNCATE"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"<script>"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"</script>"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"UPDATE"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"COOKIE"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"ENV"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"FILES"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$array[/COLOR][COLOR= #007700][] =[/COLOR] [COLOR= #DD0000]"SERVER"[/COLOR][COLOR= #007700];[/COLOR]
[URL="http://www.php.net/foreach"]foreach[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$array[/COLOR] [COLOR= #007700]As[/COLOR] [COLOR= #0000BB]$foutbezig[/COLOR][COLOR= #007700])
{[/COLOR]
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/eregi"]eregi[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$foutbezig[/COLOR][COLOR= #007700],[/COLOR][COLOR= #0000BB]$locatie[/COLOR][COLOR= #007700]))
{[/COLOR]
?>
<html>
<head>
<title>Injectie</title>
<style>
body,td,th {
color: #FFFFFF;
font-family: Arial, Helvetica, sans-serif
}
body {
background-color: #333333;
font-family: Arial, Helvetica, sans-serif
</style>
</head>
<p>
U heeft een injectie gedaan wij hebben u IP opgeslagen.<br />
IP [COLOR= #0000BB]<?php[/COLOR] [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #0000BB]$_SERVER[/COLOR][COLOR= #007700][[/COLOR]REMOTE_ADDR [COLOR= #007700]<[/COLOR]br /[COLOR= #007700]>[/COLOR]
De gegevens zijn opgeslagen en gemailt naar de beheerder[COLOR= #007700]!
<[/COLOR]/p[COLOR= #007700]>
<[/COLOR]/html[COLOR= #007700]>[/COLOR]
[COLOR= #0000BB]<?php[/COLOR]
[COLOR= #FF8000]//mail uitvoeren[/COLOR]
[URL="http://www.php.net/if"]if[/URL] [COLOR= #007700]([/COLOR][COLOR= #0000BB]$ReportHackMailAdres[/COLOR] [COLOR= #007700]!=[/COLOR] [COLOR= #DD0000][/COLOR][COLOR= #007700])
{[/COLOR]
[URL="http://www.php.net/mail"]mail[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$ReportHackMailAdres[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #DD0000]"Hack attempt"[/COLOR][COLOR= #007700],[/COLOR]
[COLOR= #DD0000]"Er is een mogelijke hack poging geregistreerd door: n"[/COLOR][COLOR= #007700].[/COLOR]
[COLOR= #DD0000]"IP-Adres : ["[/COLOR] [COLOR= #007700].[/COLOR] [COLOR= #0000BB]$_SERVER[/COLOR][COLOR= #007700][[/COLOR]REMOTE_ADDR[COLOR= #007700]] .[/COLOR][COLOR= #DD0000]"]nn"[/COLOR][COLOR= #007700].[/COLOR]
[COLOR= #DD0000]"Blokkeer dit IPnn"[/COLOR][COLOR= #007700],[/COLOR]
[COLOR= #DD0000]"From: Injectie report<"[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$ReportHackMailAdres[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]">"[/COLOR][COLOR= #007700]);
}[/COLOR]
[URL="http://www.php.net/exit"]exit[/URL][COLOR= #007700]();
}
}[/COLOR]
?>
Dat script zet ik dus in mijn config en klaar is kees?
Maar dan moet ik denk ik als nog gebruik maken van mysql_real_escape_string etc??