Пример #1
0
int prevent_sqli(t_session *session) {
	int result;

	if (session->request_limit == false) {
		return 0;
	}

	if (session->request_uri != NULL) {
		if ((result = prevent_sqli_str(session, session->request_uri, strlen(session->request_uri))) != 0) {
			return result;
		}
	}

	if (session->body != NULL) {
		if ((result = prevent_sqli_str(session, session->body, session->content_length)) != 0) {
			return result;
		}
	}

	if (session->cookies != NULL) {
		if ((result = prevent_sqli_str(session, session->cookies, strlen(session->cookies))) != 0) {
			return result;
		}
	}

	return 0;
}
Пример #2
0
int prevent_sqli(t_session *session) {
	if (session->request_uri != NULL) {
		switch (prevent_sqli_str(session, session->request_uri, strlen(session->request_uri))) {
			case -1:
				return 500;
			case 0:
				break;
			default:
				session->error_cause = ec_SQL_INJECTION;
				return -1;
		}
	}
/*
	if (session->vars != NULL) {
		switch (prevent_sqli_str(session, session->vars, strlen(session->vars))) {
			case -1:
				return 500;
			case 0:
				break;
			default:
				session->error_cause = ec_SQL_INJECTION;
				return -1;
		}
	}
*/

	if (session->body != NULL) {
		switch (prevent_sqli_str(session, session->body, session->content_length)) {
			case -1:
				return 500;
			case 0:
				break;
			default:
				session->error_cause = ec_SQL_INJECTION;
				return -1;
		}
	}

	if (session->cookie != NULL) {
		switch (prevent_sqli_str(session, session->cookie, strlen(session->cookie))) {
			case -1:
				return 500;
			case 0:
				break;
			default:
				session->error_cause = ec_SQL_INJECTION;
				return -1;
		}
	}

	return 0;
}