Skip to content

Instantly share code, notes, and snippets.

@ddbs
Last active August 29, 2015 13:57
Show Gist options
  • Save ddbs/9403910 to your computer and use it in GitHub Desktop.
Save ddbs/9403910 to your computer and use it in GitHub Desktop.
wordpress security: avoid requests from malicious urls
global $user_ID;
if($user_ID) {
if(!current_user_can('administrator')) {
if (strlen($_SERVER['REQUEST_URI']) > 255 ||
stripos($_SERVER['REQUEST_URI'], "eval(") ||
stripos($_SERVER['REQUEST_URI'], "CONCAT") ||
stripos($_SERVER['REQUEST_URI'], "UNION+SELECT") ||
stripos($_SERVER['REQUEST_URI'], "base64")) {
@header("HTTP/1.1 414 Request-URI Too Long");
@header("Status: 414 Request-URI Too Long");
@header("Connection: Close");
@exit;
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment