Version: v1.1
Update Time: 2013-05-25
What's NEW: Optimizing Performance
Function Description:
can effectively protect xss,sql injection, code execution, file inclusion and many other high-risk vulnerabilities.
How to use:
- Upload waf.php to the directory of files to include
- To add protection to the page, there are two ways to do this, depending on the situation two:
a). Page anti-injection, cross-site, add code
to the page you need to protect
Copy Code
- Require_once (' waf.php ');
If you want to prevent the whole station, in a common file in the site, such as the database link file config.inc.php, to invoke this code. Frequently used PHP system to add files
Reference
Phpcms V9 \phpcms\base.php
PHPWIND8.7 \data\sql_config.php
DEDECMS5.7 \data\common.inc.php
DiscuzX2 \config\config_global.php
Wordpress \wp-config.php
Metinfo \include\head.php
b). At the top of each file, add the code as follows: Find the Auto_prepent_file in php.ini and modify it to:
Copy Code
- Automatically add files before or after any PHP document;
- Auto_prepend_file = waf.php path;
:
- PHP Code Patch php_patch.zip (3 K) Download number of times: 3193
- ASP code patch asp.zip (2 K) Download number of times: 1521
Cloud Checkup Universal Code patch