WordPress.org
Get WordPress

Plugin Directory

Changeset 185105


Ignore:
Timestamp:
12/20/2009 12:05:39 AM (16 years ago)
Author:
ljmacphee
Message:

security fix

Location:
ttc-user-registration-bot-detector/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • ttc-user-registration-bot-detector/trunk/readme.txt

    r83919 r185105  
    44Requires at least: 2.5
    55Tested up to: 2.5.1
    6 Stable tag: 1.8
     6Stable tag: 1.9
    77
    88This plugin blocks and logs most bot user registrations.

  • ttc-user-registration-bot-detector/trunk/ttc_user_registration.php

    r83919 r185105  
    33/*
    44Plugin Name: TimesToCome Stop Bot Registration
    5 Version: 1.8
     5Version: 1.9
    66Plugin URI:  http://herselfswebtools.com/2008/06/wordpress-plugin-to-prevent-bot-registrations.html
    77Description: Stop bots from registering as users
    … …  
    3434            if ( strlen($http_accept ) > 200 ) { $http_accept = substr ( $http_accept, 0, 200 ); }
    3535            if ( strlen($http_user_agent ) > 200 ) { $http_user_agent = substr ( $http_user_agent, 0, 200 ); }
     36           
     37            // clean input for database
     38            $http_accept = htmlentities($http_accept);
     39            $http_user_agent = htmlentities($http_user_agent);
     40            $http_remote_addr = htmlentities($http_remote_addr);
     41            $http_request_uri = htmlentities($html_request_uri);
     42
     43
    3644           
    3745            $sql = "INSERT INTO " . $registration_log_table_name . " ( ip, email, problem, accept, agent, day )
Note: See TracChangeset for help on using the changeset viewer.