Modules

Netquery 3.11 - Vulnerability Bugfix

RVirtue  02 Aug 2005 5:08 PM 6366 Reads   1 comment 
The Netquery v3.11 bugfix is especially important for those sites where Netquery's local ping and/or local traceroute operations are enabled. For those who may prefer manual application of their own patch, user input for both of those operations is now fully "sanitized" the by using the following function:

le="color: #000000"><?php function sanitizeSysString($string, $min = '', $max = '') { $pattern = '/(;|||`|>|<|&|^|"|'."n|r|'".'|{|}|[|]|)|()/i'; $string = preg_replace($pattern, '', $string); $string = '"'.preg_replace('/$/', '\$', $string).'"'; $len = strlen($string); if((($min != '') && ($len < $min)) || (($max != '') && ($len > $max))) return FALSE; return $string; }

Netquery links: Downloads | Manual | Live Demo | Forums
Rating 0/5
Rating: 0/5 (0 votes)
Voting is disabled!


Login

Donat-O-Meter

Stats
Goal: $15.00
Due Date: Aug 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $15.00
Make donations with PayPal!

Categories