Block UNION SELECT

  • Resolved Vlada Smitka

    (@smitka)


    11 years ago

    Hi, I think that blocking SQLi via UNION SELECT doesn’t work properly:

    There is in the $request_uri_array: UNION\+SELECT

    It checks exact string “UNION+SELECT” case insensitive, real sting may be “UNION SELECT”.

    The rule “UNION.*SELECT” can be better way.

    https://ww.wp.xz.cn/plugins/block-bad-queries/

Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Block UNION SELECT’ is closed to new replies.