WordPress.org
Get WordPress

Plugin Directory

Changeset 185102


Ignore:
Timestamp:
12/19/2009 11:59:55 PM (16 years ago)
Author:
ljmacphee
Message:

security fix

Location:
ttc-wordpress-security-plugin/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • ttc-wordpress-security-plugin/trunk/readme.txt

    r95413 r185102  
    44Requires at least: 2.5
    55Tested up to: 2.5.1
    6 Stable tag: 2.0
     6Stable tag: 2.1
    77
    88This plugin blocks scrapers, cross-site scripting attempts, and other ill behaved bots.  This is the second of three security plugins.

  • ttc-wordpress-security-plugin/trunk/ttc_security.php

    r95413 r185102  
    33/*
    44Plugin Name: TimesToCome Security Plugin
    5 Version: 2.0
     5Version: 2.1
    66Plugin URI:  http://herselfswebtools.com/2008/06/wordpress-security-plugin-block-scrapers-hackers-and-more.html
    77Description: Security plugin for Wordpress
    … …  
    207207    if ( strlen($http_user_agent ) > 200 ) { $http_user_agent = substr ( $http_user_agent, 0, 200 ); }
    208208   
     209
     210    // clean input for database
     211    $http_accept = htmlentities($http_accept);
     212    $http_user_agent = htmlentities($http_user_agent);
     213    $http_remote_addr = htmlentities($http_remote_addr);
     214    $http_request_uri = htmlentities($html_request_uri);
     215
     216
    209217    $sql = "INSERT INTO " . $log_table_name . " ( ip, problem, accept, agent, request, day )
    210218            VALUES ( '$http_remote_addr', '$error', '$http_accept', '$http_user_agent', '$http_request_uri', NOW() )";
Note: See TracChangeset for help on using the changeset viewer.