Webshell defence and version up

git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.3.2@12332 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ovclas 2012-11-30 01:17:15 +00:00
parent ea97a5db1e
commit 36a04a44ba
2 changed files with 4 additions and 4 deletions

View file

@ -117,10 +117,10 @@ class Context {
* Pattern for request vars check
* @var array
*/
var $pattern = array(
var $patterns = array(
'/<\?/iUsm',
'/<\%/iUsm',
'/<script(\s|\S)*language[\s]*=("|\')php("|\')(\s|\S)*/iUsm'
'/<script(\s|\S)*language[\s]*=[\s]*("|\')?[\s]*php[\s]*("|\')?(\s|\S)*/iUsm'
);
/**
* Check init
@ -837,7 +837,7 @@ class Context {
{
if(is_string($val))
{
foreach($this->pattern as $pattern)
foreach($this->patterns as $pattern)
{
$result = preg_match($pattern, $val);
if($result)

View file

@ -14,7 +14,7 @@
* Display XE's full version
* Even The file should be revised when releasing altough no change is made
*/
define('__XE_VERSION__', '1.5.3.6');
define('__XE_VERSION__', '1.5.3.7');
/**
* @deprecated __ZBXE_VERSION__ will be removed. Use __XE_VERSION__ instead.