diff options
| -rw-r--r-- | include/functions_category.inc.php | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/include/functions_category.inc.php b/include/functions_category.inc.php index 0dfb2a7a3..ad118a905 100644 --- a/include/functions_category.inc.php +++ b/include/functions_category.inc.php @@ -381,6 +381,12 @@ function initialize_category( $calling_page = 'category' ) // search result if ( $page['cat'] == 'search' ) { + // SQL injection hacking attempt? + if (strpos($_GET['search'], ';') !== false) + { + die('Hacking attempt on "search" GET parameter'); + } + // analyze search string given in URL (created in search.php) $tokens = explode('|', $_GET['search']); |