Skip to content
GitLab
Commit 6257c16f authored by mh's avatar mh
Browse files

this blocks inserts of json or php pickles

parent e0e23c89
Show whitespace changes
Inline Side-by-side
files/snuffleupagus/base.rules
View file @ 6257c16f
...@@ -47,7 +47,7 @@ sp.disable_function.function("ini_get").param("var_name").value_r("(?:allow_url_ ...@@ -47,7 +47,7 @@ sp.disable_function.function("ini_get").param("var_name").value_r("(?:allow_url_
sp.disable_function.function("mysql_query").param("query").value_r("/\\*").drop(); sp.disable_function.function("mysql_query").param("query").value_r("/\\*").drop();
sp.disable_function.function("mysql_query").param("query").value_r("--").drop(); sp.disable_function.function("mysql_query").param("query").value_r("--").drop();
sp.disable_function.function("mysql_query").param("query").value_r("#").drop(); sp.disable_function.function("mysql_query").param("query").value_r("#").drop();
sp.disable_function.function("mysql_query").param("query").value_r(";.*;").drop(); #sp.disable_function.function("mysql_query").param("query").value_r(";.*;").drop();
sp.disable_function.function("mysql_query").param("query").value_r("benchmark").drop(); sp.disable_function.function("mysql_query").param("query").value_r("benchmark").drop();
sp.disable_function.function("mysql_query").param("query").value_r("sleep").drop(); sp.disable_function.function("mysql_query").param("query").value_r("sleep").drop();
# some CMS and ORM's use this to predict the current schema f.e doctrine # some CMS and ORM's use this to predict the current schema f.e doctrine
...@@ -57,7 +57,7 @@ sp.disable_function.function("mysql_query").param("query").value_r("information_ ...@@ -57,7 +57,7 @@ sp.disable_function.function("mysql_query").param("query").value_r("information_
sp.disable_function.function("mysqli_query").param("query").value_r("/\\*").drop(); sp.disable_function.function("mysqli_query").param("query").value_r("/\\*").drop();
sp.disable_function.function("mysqli_query").param("query").value_r("--").drop(); sp.disable_function.function("mysqli_query").param("query").value_r("--").drop();
sp.disable_function.function("mysqli_query").param("query").value_r("#").drop(); sp.disable_function.function("mysqli_query").param("query").value_r("#").drop();
sp.disable_function.function("mysqli_query").param("query").value_r(";.*;").drop(); #sp.disable_function.function("mysqli_query").param("query").value_r(";.*;").drop();
sp.disable_function.function("mysqli_query").param("query").value_r("benchmark").drop(); sp.disable_function.function("mysqli_query").param("query").value_r("benchmark").drop();
sp.disable_function.function("mysqli_query").param("query").value_r("sleep").drop(); sp.disable_function.function("mysqli_query").param("query").value_r("sleep").drop();
# some CMS and ORM's use this to predict the current schema f.e doctrine # some CMS and ORM's use this to predict the current schema f.e doctrine
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment