On Thursday 24 July 2008 09:38:57 Chris wrote:
> Børge Holen wrote:
> > On Thursday 24 July 2008 09:14:55 Chris wrote:
> >>> I was hoping there's a way to tell apache to block requests where
> >>> id=non_numeric.
> >>
> >> It's trying to do a remote inclusion.
> >>
> >> It's easy for you to fix in php:
> >>
> >> if (isset($_GET['id'])) {
> >>    if (!is_numeric($_GET['id'])) {
> >>            die("Die hacker die!");
> >
> > thats sudden! ;)
>
> ok maybe a bit harsh :P
>
> stop hacker stop ?

I prefer die("");
it leaves a bit unsatisfaction for whoever generates the blank page


>
> ;)
>
> --
> Postgresql & php tutorials
> http://www.designmagick.com/



-- 
---
Børge Holen
http://www.arivene.net

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to