redaguoti si faila:
./infusions/security_system/main_control.php
Surasti:
if ($hack) {
$user_agent= (SYS_USER_AGENT!="" ? stripinput(str_replace('||', ' ', SYS_USER_AGENT)) : "");
$resu=dbcount("(blacklist_ip)",DB_PREFIX."secsys_blacklist","blacklist_ip='".SYS_USER_IP."'");
if ($resu=="0") {
$resu2=dbquery("INSERT INTO ".DB_PREFIX."secsys_blacklist (blacklist_ip,blacklist_datestamp) VALUES('".SYS_USER_IP."','".time()."')");
}
$rsl=dbrows(dbquery("SELECT * FROM ".DB_PREFIX."secsys_logfile WHERE hack_ip='".SYS_USER_IP."' AND hack_type='hacks' AND hack_datestamp>='".(time()-3600)."'"));
if (!sec_proxyscan()) {
$resu2=dbcount("(proxy_ip)",DB_PREFIX."secsys_proxy_blacklist","proxy_ip='".SYS_USER_IP."' LIMIT 0,1");
if (@$resu2=="0") {
$result=dbquery("INSERT INTO ".DB_PREFIX."secsys_proxy_blacklist (proxy_ip,proxy_datestamp) VALUES ('".SYS_USER_IP."','".time()."')");
}
}
if ($rsl==0 && $sys_setting['ctracker_log']=='1') {
$sys_msg=stripinput($_SERVER['QUERY_STRING']);
$sys_msg=$sys_msg;
$sys_msg_entry=str_replace(" ","",$sys_msg);
$result=dbquery("INSERT INTO ".DB_PREFIX."secsys_logfile (hack_id,hack_type,hack_userid,hack_ip,hack_query,hack_referer,hack_agent,hack_datestamp) VALUES (NULL,'hacks','".SYS_USER_ID."','".SYS_USER_IP."','".$sys_msg_entry."','".stripinput(SYS_USER_REFERER)."','".$user_agent."','".time()."')");
}
$result=dbquery("UPDATE ".DB_PREFIX."secsys_statistics SET hacks=hacks+1");
mysql_close();
redirect("http://sourceprotection.de/attack.html");exit;
}
}
Pakeisti:
if ($hack) {
$user_agent= (SYS_USER_AGENT!="" ? stripinput(str_replace('||', ' ', SYS_USER_AGENT)) : "");
if (isset($_GET['error']) && isnum($_GET['error'])) { } else {
$resu=dbcount("(blacklist_ip)",DB_PREFIX."secsys_blacklist","blacklist_ip='".SYS_USER_IP."'");
if ($resu=="0") {
$resu2=dbquery("INSERT INTO ".DB_PREFIX."secsys_blacklist (blacklist_ip,blacklist_datestamp) VALUES('".SYS_USER_IP."','".time()."')");
}
}
$rsl=dbrows(dbquery("SELECT * FROM ".DB_PREFIX."secsys_logfile WHERE hack_ip='".SYS_USER_IP."' AND hack_type='hacks' AND hack_datestamp>='".(time()-3600)."'"));
if (!sec_proxyscan()) {
$resu2=dbcount("(proxy_ip)",DB_PREFIX."secsys_proxy_blacklist","proxy_ip='".SYS_USER_IP."' LIMIT 0,1");
if (@$resu2=="0") {
$result=dbquery("INSERT INTO ".DB_PREFIX."secsys_proxy_blacklist (proxy_ip,proxy_datestamp) VALUES ('".SYS_USER_IP."','".time()."')");
}
}
if (isset($_GET['error']) && isnum($_GET['error'])) { } else {
if ($rsl==0 && $sys_setting['ctracker_log']=='1') {
$sys_msg=stripinput($_SERVER['QUERY_STRING']);
$sys_msg=$sys_msg;
$sys_msg_entry=str_replace(" ","",$sys_msg);
$result=dbquery("INSERT INTO ".DB_PREFIX."secsys_logfile (hack_id,hack_type,hack_userid,hack_ip,hack_query,hack_referer,hack_agent,hack_datestamp) VALUES (NULL,'hacks','".SYS_USER_ID."','".SYS_USER_IP."','".$sys_msg_entry."','".stripinput(SYS_USER_REFERER)."','".$user_agent."','".time()."')");
}
$result=dbquery("UPDATE ".DB_PREFIX."secsys_statistics SET hacks=hacks+1");
mysql_close();
redirect("".INFUSIONS."security_system/attack.html");exit;
}
}
}
0
|