CaFc_Versace

Anti SQL Injection Login (v.2) with Log

Jun 28th, 2014
712
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 2.93 KB | None | 0 0
  1. <?php
  2.   /**
  3.     Agency CaFc
  4.     http://cafc.agency/
  5.     ---
  6.     CaFc Versace made this, 2014
  7.     Anti SQL Injection Login (v.2) with Log
  8.     ---
  9.     ---
  10.   **/
  11.  
  12. $ip              = $_SERVER['REMOTE_ADDR'];
  13. $taimJon         = new DateTime("now", new DateTimeZone('Asia/Jakarta'));
  14. $jamBaraTeh      = $taimJon->format("Y-m-d H:i:s");
  15. $script          = $_SERVER[PATH_TRANSLATED];
  16. $aingLog         = fopen("log-SQLi.txt", "a+");
  17. // Ngaray-nya tambahin sendiri ajah yagh =))
  18. $aingNgaray      = array(
  19.     ";",
  20.     "'",
  21.     "%",
  22.     '"',
  23.     "-"
  24.     "union",
  25.     "select",
  26.     "order by"
  27. );
  28. $aingGantiNgaray = array(
  29.     "",
  30.     "",
  31.     "",
  32.     "&quot;",
  33.     "",
  34.     "",
  35.     "",
  36.     ""
  37. );
  38. $ngambilKunci    = array_keys($_GET);
  39. $ngirimKunci     = array_keys($_POST);
  40. $kukiAing        = array_keys($_COOKIE);
  41.  
  42. //---------- NGAPUS PERMINTAAN ----------\\
  43. for ($i = 0; $i < count($ngambilKunci); $i++) {
  44.     $ciyusan[$i]             = $_GET[$ngambilKunci[$i]];
  45.     $_GET[$ngambilKunci[$i]] = str_replace($aingNgaray, $aingGantiNgaray, HtmlSpecialChars($_GET[$ngambilKunci[$i]]));
  46.     if ($ciyusan[$i] != $_GET[$ngambilKunci[$i]]) {
  47.         fwrite($aingLog, "IP     : $ip\r\n");
  48.         fwrite($aingLog, "Method : GET\r\n");
  49.         fwrite($aingLog, "Value  : $ciyusan[$i]\r\n");
  50.         fwrite($aingLog, "Script : $script\r\n");
  51.         fwrite($aingLog, "Time   : $jamBaraTeh\r\n");
  52.         fwrite($aingLog, "==================================\r\n");
  53.     }
  54. }
  55. //---------------------------------------\\
  56.  
  57. //--------- NGAPUS PENGIRIMAN -----------\\
  58. for ($i = 0; $i < count($ngirimKunci); $i++) {
  59.     $enelan[$i]              = $_POST[$ngirimKunci[$i]];
  60.     $_POST[$ngirimKunci[$i]] = str_replace($aingNgaray, $aingGantiNgaray, HtmlSpecialChars($_POST[$ngirimKunci[$i]]));
  61.     if ($enelan[$i] != $_POST[$ngirimKunci[$i]]) {
  62.         fwrite($aingLog, "IP     : $ip\r\n");
  63.         fwrite($aingLog, "Method : POST\r\n");
  64.         fwrite($aingLog, "Value  : $enelan[$i]\r\n");
  65.         fwrite($aingLog, "Script : $script\r\n");
  66.         fwrite($aingLog, "Time   : $jamBaraTeh\r\n");
  67.         fwrite($aingLog, "==================================\r\n");
  68.     }
  69. }
  70. //---------------------------------------\\
  71.  
  72. //------- NGAPUS KUKI AING COOYY --------\\
  73. for ($i = 0; $i < count($kukiAing); $i++) {
  74.     $kukiEnelan[$i]         = $_COOKIE[$kukiAing[$i]];
  75.     $_COOKIE[$kukiAing[$i]] = str_replace($aingNgaray, $aingGantiNgaray, HtmlSpecialChars($_COOKIE[$kukiAing[$i]]));
  76.     if ($kukiEnelan[$i] != $_COOKIE[$kukiAing[$i]]) {
  77.         fwrite($aingLog, "IP     : $ip\r\n");
  78.         fwrite($aingLog, "Method : COOKIE\r\n");
  79.         fwrite($aingLog, "Value  : $kukiEnelan[$i]\r\n");
  80.         fwrite($aingLog, "Script : $script\r\n");
  81.         fwrite($aingLog, "Time   : $time\r\n");
  82.         fwrite($aingLog, "==================================\r\n");
  83.     }
  84. }
  85. //---------------------------------------\\
  86.  
  87. fclose($aingLog);
  88. ?>
Advertisement
Add Comment
Please, Sign In to add comment