diff --git a/htdocs/main.inc.php b/htdocs/main.inc.php index 0d7faf34c3295d1a8d7a76653a855eea0a310e19..27a6524ccb6a8795bcfda5e64ca3c044006c1d6a 100644 --- a/htdocs/main.inc.php +++ b/htdocs/main.inc.php @@ -69,9 +69,9 @@ function test_sql_and_script_inject($val) $sql_inj = 0; $sql_inj += preg_match('/delete[\s]+from/i', $val); $sql_inj += preg_match('/create[\s]+table/i', $val); - $sql_inj += preg_match('/update(.)+set(.)+=/i', $val); + $sql_inj += preg_match('/update.+set.+=/i', $val); $sql_inj += preg_match('/insert[\s]+into/i', $val); - $sql_inj += preg_match('/select(.)+from/i', $val); + $sql_inj += preg_match('/select.+from/i', $val); $sql_inj += preg_match('/<script/i', $val); return $sql_inj; }