Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #11895

Re: Check if $_GET contains something other than what's allowed

Show all headers | View raw

Jason C wrote:

> I have a script that's constantly under attack by hackers submitting odd

s/hackers/crackers/

Rule of thumb: Hackers build, crackers (attempt to) destroy.

> queries. My script is tight enough that it's not been a problem, but
> still, it's annoying.
> 
> Just for the sake of peace of mind, how can I check for any $_GET key
> that's not allowed (in which case I can kill the script from the
> beginning)?

<http://php.net/isset>
<http://php.net/array_key_exists>

However, your problem more likely is having register_globals=on when it 
should be off; not validating user input, inviting SQL injection; aso.

<https://owasp.org/>


PointedEars
-- 
Prototype.js was written by people who don't know javascript for people
who don't know javascript. People who don't know javascript are not
the best source of advice on designing systems that use javascript.
  -- Richard Cornford, cljs, <f806at$ail$1$8300dec7@news.demon.co.uk>

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Check if $_GET contains something other than what's allowed Jason C <jwcarlton@gmail.com> - 2013-11-21 13:21 -0800
  Re: Check if $_GET contains something other than what's allowed Salvatore <sal@yojimbo.hack.invalid> - 2013-11-21 21:31 +0000
  Re: Check if $_GET contains something other than what's allowed Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-11-21 22:48 +0100
    Re: Check if $_GET contains something other than what's allowed Jerry Stuckle <jstucklex@attglobal.net> - 2013-11-21 17:16 -0500
      "Hackers" vs. "Crackers" (was: Re: Check if $_GET contains something other than what's allowed) Arno Welzel <usenet@arnowelzel.de> - 2013-11-22 17:36 +0100
        Re: "Hackers" vs. "Crackers" Jerry Stuckle <jstucklex@attglobal.net> - 2013-11-22 13:52 -0500
          Re: "Hackers" vs. "Crackers" j80k-vpfc@dea.spamcon.org (Steve) - 2013-11-30 11:49 +0000
            Re: "Hackers" vs. "Crackers" Jerry Stuckle <jstucklex@attglobal.net> - 2013-11-30 08:53 -0500
              Re: "Hackers" vs. "Crackers" j80k-vpfc@dea.spamcon.org (Steve) - 2013-11-30 14:58 +0000
                Re: "Hackers" vs. "Crackers" Jerry Stuckle <jstucklex@attglobal.net> - 2013-11-30 10:15 -0500
                Re: "Hackers" vs. "Crackers" The Natural Philosopher <tnp@invalid.invalid> - 2013-11-30 16:51 +0000
                Re: "Hackers" vs. "Crackers" Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-12-01 17:13 +0100
            Re: "Hackers" vs. "Crackers" Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-11-30 15:30 +0100
              Re: "Hackers" vs. "Crackers" The Natural Philosopher <tnp@invalid.invalid> - 2013-11-30 16:33 +0000
                Re: "Hackers" vs. "Crackers" Doug Miller <doug_at_milmac_dot_com@example.com> - 2013-11-30 17:13 +0000

csiph-web