Adult Script Pro Community Forums

discuss4u

Member

Registered: 2013-03-06

Posts: 163

Rewrite in Nginx

I have seen in the htaccess file that there are parts for preventing SQL injection by using url rewriting.

Is there a way to implement it in Nginx? I have seen this example but it seems it is different from the htaccess

http://www.howtoforge.com/nginx-how-to- … agents-etc

I have also thought of implementing the codes below but I do not know if it is right to do so.

    set $block_sql_injections 0;
    if ($query_string ~ "base64_encode.*\(.*\)") {
        set $block_sql_injections 1;
		}
    if ($query_string ~ "(\<|%3C).*script.*(\>|%3E)") {
        set $block_sql_injections 1;
		}
    if ($query_string ~ "GLOBALS(=|\[|\%[0-9A-Z]{0,2})") {
        set $block_sql_injections 1;
		}
    if ($query_string ~ "_REQUEST(=|\[|\%[0-9A-Z]{0,2})") {
        set $block_sql_injections 1;
		}
    if ($query_string ~ "SELECT(=|\[|\%[0-9A-Z]{0,2})") {
        set $block_sql_injections 1;
		}
    if ($query_string ~ "UNION(=|\[|\%[0-9A-Z]{0,2})") {
        set $block_sql_injections 1;
		}
    if ($query_string ~ "UPDATE(=|\[|\%[0-9A-Z]{0,2})") {
        set $block_sql_injections 1;
		}	
    if ($block_sql_injections = 1) {
        rewrite ^(.*)$ index.php last;
    }

symtab

Administrator

Registered: 2010-08-23

Posts: 7,501

Website

Re: Rewrite in Nginx

Thats a good idea :-)

---

Adult Scripts: Adult Script Pro - Adult Search Script
Adult Advertising/Traffic: Plug Rush - EXOClick - PopAds