Are there any pre-coded security scripts out there that I can implement to my site?

Discussion in 'PHP' started by x0x, Jul 14, 2009.

  1. #1
    I am looking for good cookie and session security scripts and whatever there is... Security filters for sql injection, whatever. Is anyone out there offering service or selling/giving for free scripts like that?
     
    x0x, Jul 14, 2009 IP
  2. arunn

    arunn Active Member

    Messages:
    347
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    60
    #2
    it depends on what code you are using and how you handle session and mysql. anyway there are a lot to choose. or you can hire someone to do it for you. please allow me peek into your site so that i can suggest what can be done
     
    arunn, Jul 14, 2009 IP
  3. Goramba

    Goramba Peon

    Messages:
    128
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    0
    #3
    I found it pretty useful to just check all variables for dangerous words. For example, my system deals mostly with part numbers so I just check the whole query string for them. As such:


    $get = $_SERVER["QUERY_STRING"];
    	 if(strstr($get,'http') || strstr($get,' ') || strstr($get,'www.') || strstr($get,'.com') || strstr($get,'%20') || strstr($get,' and ') || strstr($get,' or ') || strstr($get,'select') || strstr($get,'update') || strstr($get,'insert') || strstr($get,'%20and%20') || strstr($get,'%20or%20') || strstr($get,'%20like%20') || strstr($get,' like ') || strstr($get,'drop') || strstr($get,'table') || strstr($get,'values')){
    	 echo "Sorry, invalid URL.";
    	 exit;
    	 }
    PHP:
     
    Goramba, Jul 14, 2009 IP
  4. anthonywebs

    anthonywebs Banned

    Messages:
    657
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    0
    #4
    hmmm... I will code one for some cash
     
    anthonywebs, Jul 14, 2009 IP