Zen Cart 源代码 security_patch_v138

Zen Cart 源代码 security_patch_v138_20080919.php

下载文件

文件名: security_patch_v138_20080919.php
文件类型: PHP文件
文件大小: 1.97 KiB
MD5: de17f9c76a96e0e7c4d1bcdd436318d7

security_patch_v138_20080919.php - 打开高亮: <?php /** * Security Patch v1.3.8 20080919 * * @package initSystem * @copyright Copyright 2003-2010 Zen Cart Development Team * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0 * @version $Id: security_patch_v138_20080919.php 15882 2010-04-11 16:37:54Z wilt $ */ /** * Security Patch * * Multiple Vulnerabilities * * SQL Injection - $_POST['products_id'] * SQL Injection - $_POST['id'] * * Please Note : This file should be placed in includes/extra_configures and will automatically load. * */ if (isset($_POST['id']) && is_array($_POST['id']) && count($_POST['id']) > 0) { $_POST['id'] = securityPatchSanitizePostVariableId($_POST['id']); } if (isset($_POST['products_id']) && is_array($_POST['products_id']) && count($_POST['products_id']) > 0) { $_POST['products_id'] = securityPatchSanitizePostVariableProductsId($_POST['products_id']); } if (isset($_POST['notify']) && is_array($_POST['notify']) && count($_POST['notify']) > 0) { $_POST['notify'] = securityPatchSanitizePostVariableProductsId($_POST['notify']); } function securityPatchSanitizePostVariableId ($arrayToSanitize) { foreach ($arrayToSanitize as $key => $variableToSanitize) { { if (is_integer($key)) { if (is_array($arrayToSanitize[$key])) { $arrayToSanitize[$key] = securityPatchSanitizePostVariableId($arrayToSanitize[$key]); } else { $arrayToSanitize[$key] = (int) $variableToSanitize; } } } if (preg_replace('/[0-9a-zA-z:_]/', '', $key) != '') unset($arrayToSanitize[$key]); } return $arrayToSanitize; } function securityPatchSanitizePostVariableProductsId ($arrayToSanitize) { foreach ($arrayToSanitize as $key => $variableToSanitize) { { $arrayToSanitize[$key] = preg_replace('/[^0-9a-fA-F:.]/', '', $variableToSanitize); } if (preg_replace('/[0-9a-zA-z_:.]/', '', $key) != '') unset($arrayToSanitize[$key]); } return $arrayToSanitize; }