WooYun.org

function LiveMessage($a) {


    global $db;


    $sessionid = $_SESSION['sessionid'];


    $name = addslashes(htmlspecialchars($a['name']));


    $email = addslashes(htmlspecialchars($a['email']));


    $country = htmlspecialchars($a['country']);


    $phone = htmlspecialchars($a['phone']);


    $departmentid = htmlspecialchars($a['departmentid']);


    $message = htmlspecialchars($a['message']);


    $timestamp = time();


    $ip = $_SERVER['REMOTE_ADDR'];


    $sql = "INSERT INTO `chat` (`sessionid`,`name`,`email`,`phone`,`departmentid`,`message`,`timestamp`,`ip`,`status`) VALUES('" . $sessionid . "','" . $name . "','" . $email . "','" . $phone . "','" . $departmentid . "','" . $message . "','" . $timestamp . "','" . $ip . "','2')";


    $db->query($sql);


    $sql = "DELETE FROM `sessions` WHERE `id`='" . $sessionid . "'";


    $db->query($sql);


    $text = "<?php echo $lang[shout_success]?>\n";


    $objResponse = new xajaxResponse('utf-8');


    $objResponse->addAssign('content', 'innerHTML', $text);


    $objResponse->redirect('../', 5);


    return $objResponse;


}

$getfilter = "\\<.+javascript:window\\[.{1}\\\\x|<.*=(&#\\d+?;?)+?>|<.*(data|src)=data:text\\/html.*>|\\b(alert\\(|confirm\\(|expression\\(|prompt\\(|benchmark\s*?\(.*\)|sleep\s*?\(.*\)|load_file\s*?\\()|<[a-z]+?\\b[^>]*?\\bon([a-z]{4,})\s*?=|^\\+\\/v(8|9)|\\b(and|or)\\b\\s*?([\\(\\)'\"\\d]+?=[\\(\\)'\"\\d]+?|[\\(\\)'\"a-zA-Z]+?=[\\(\\)'\"a-zA-Z]+?|>|<|\s+?[\\w]+?\\s+?\\bin\\b\\s*?\(|\\blike\\b\\s+?[\"'])|\\/\\*.*\\*\\/|<\\s*script\\b|\\bEXEC\\b|UNION.+?SELECT(\\(.+\\)|\\s+?.+?|`.*?`)|UPDATE(\\(.+\\)|\\s+?.+?|`.*?`.*?)SET|INSERT\\s+INTO.+?VALUES|(SELECT|DELETE)(\\(.+\\)|\\s+?.+?\\s+?|`.*?`.*?)FROM(\\(.+\\)|\\s+?.+?|`.*?`.*?)|(CREATE|ALTER|DROP|TRUNCATE)\\s+(TABLE|DATABASE)|\\/\\*.*?\\*\\/|'";