<?php
function replace($var){
$new_var=str_replace(";","",$var);
$new_var=str_replace("!","",$new_var);
$new_var=str_replace("#","",$new_var);
$new_var=str_replace("%","",$new_var);
$new_var=str_replace("&","",$new_var);
$new_var=str_replace("(","",$new_var);
$new_var=str_replace(")","",$new_var);
$new_var=str_replace("[","",$new_var);
$new_var=str_replace("]","",$new_var);
$new_var=str_replace("{","",$new_var);
$new_var=str_replace("}","",$new_var);
$new_var=str_replace("DROP","",$new_var);
$new_var=str_replace("INSERT","",$new_var);
$new_var=str_replace("ALTER","",$new_var);
$new_var=str_replace("SHUTDOWN","",$new_var);
$new_var=str_replace("UPDATE","",$new_var);
$new_var=str_replace("update","",$new_var);
$new_var=str_replace("drop","",$new_var);
$new_var=str_replace("insert","",$new_var);
$new_var=str_replace("alter","",$new_var);
$new_var=str_replace("shutdown","",$new_var);
$new_var=str_replace("--","",$new_var);
$new_var=str_replace("\'\'","",$new_var);
return $new_var;
}
function r_text($var){
$new_var=str_replace(";","",$var);
$new_var=str_replace("!","",$new_var);
$new_var=str_replace("#","",$new_var);
$new_var=str_replace("%","",$new_var);
$new_var=str_replace("&","",$new_var);
$new_var=str_replace("(","",$new_var);
$new_var=str_replace(")","",$new_var);
$new_var=str_replace("{","",$new_var);
$new_var=str_replace("}","",$new_var);
$new_var=str_replace("DROP","",$new_var);
$new_var=str_replace("INSERT","",$new_var);
$new_var=str_replace("ALTER","",$new_var);
$new_var=str_replace("SHUTDOWN","",$new_var);
$new_var=str_replace("UPDATE","",$new_var);
$new_var=str_replace("update","",$new_var);
$new_var=str_replace("drop","",$new_var);
$new_var=str_replace("insert","",$new_var);
$new_var=str_replace("alter","",$new_var);
$new_var=str_replace("shutdown","",$new_var);
$new_var=str_replace("--","",$new_var);
$new_var=str_replace("\'\'","",$new_var);
return $new_var;
}
function textarea($var){
$new_var=str_replace("DROP","",$new_var);
$new_var=str_replace("INSERT","",$new_var);
$new_var=str_replace("ALTER","",$new_var);
$new_var=str_replace("SHUTDOWN","",$new_var);
$new_var=str_replace("UPDATE","",$new_var);
$new_var=str_replace("update","",$new_var);
$new_var=str_replace("drop","",$new_var);
$new_var=str_replace("alter","",$new_var);
$new_var=str_replace("shutdown","",$new_var);

return $new_var;
}
function unentities($data){
if(trim($data) != ""){
return str_replace(array('&lt', '&gt', '&#039', '&quot', '&amp', '&#92', '%3D', '%26'), array('<', '>', "'", '"', '&', '\\', '=', '&'), $data);
} else return $data;
} // End unentities() --------------
function addentities($data){
if(trim($data) != ""){
$data = htmlentities($data, ENT_QUOTES);
return str_replace('\\', '& #92;', $data);
} else return $data;
}
?>
<?php 
$ip = $_SERVER['REMOTE_ADDR']; 
$time = date("l dS of F Y h:i:s A"); 
$script = @$_SERVER['PATH_TRANSLATED']; 
$fp = fopen ("[WEB]SQL_Injection.txt", "a+"); 
$sql_inject_1 = array(";","'","%",'"'); #Whoth need replace 
$sql_inject_2 = array("", "","","&quot;"); #To wont replace 
$GET_KEY = array_keys($_GET); #array keys from $_GET 
$POST_KEY = array_keys($_POST); #array keys from $_POST 
$COOKIE_KEY = array_keys($_COOKIE); #array keys from $_COOKIE 
/*begin clear $_GET */ 
for($i=0;$i<count($GET_KEY);$i++) 
{ 
$real_get[$i] = $_GET[$GET_KEY[$i]]; 
$_GET[$GET_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_GET[$GET_KEY[$i]])); 
if($real_get[$i] != $_GET[$GET_KEY[$i]]) 
{ 
fwrite ($fp, "IP: $ip\r\n"); 
fwrite ($fp, "Method: GET\r\n"); 
fwrite ($fp, "Value: $real_get[$i]\r\n"); 
fwrite ($fp, "Script: $script\r\n"); 
fwrite ($fp, "Time: $time\r\n"); 
fwrite ($fp, "==================================\r\n"); 
} 
} 
/*end clear $_GET */ 
/*begin clear $_POST */ 
for($i=0;$i<count($POST_KEY);$i++) 
{ 
$real_post[$i] = $_POST[$POST_KEY[$i]]; 
$_POST[$POST_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_POST[$POST_KEY[$i]])); 
if($real_post[$i] != $_POST[$POST_KEY[$i]]) 
{ 
fwrite ($fp, "IP: $ip\r\n"); 
fwrite ($fp, "Method: POST\r\n"); 
fwrite ($fp, "Value: $real_post[$i]\r\n"); 
fwrite ($fp, "Script: $script\r\n"); 
fwrite ($fp, "Time: $time\r\n"); 
fwrite ($fp, "==================================\r\n"); 
} 
} 
/*end clear $_POST */ 
/*begin clear $_COOKIE */ 
for($i=0;$i<count($COOKIE_KEY);$i++) 
{ 
$real_cookie[$i] = $_COOKIE[$COOKIE_KEY[$i]]; 
$_COOKIE[$COOKIE_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_COOKIE[$COOKIE_KEY[$i]])); 
if($real_cookie[$i] != $_COOKIE[$COOKIE_KEY[$i]]) 
{ 
fwrite ($fp, "IP: $ip\r\n"); 
fwrite ($fp, "Method: COOKIE\r\n"); 
fwrite ($fp, "Value: $real_cookie[$i]\r\n"); 
fwrite ($fp, "Script: $script\r\n"); 
fwrite ($fp, "Time: $time\r\n"); 
fwrite ($fp, "==================================\r\n"); 
} 
} 

/*end clear $_COOKIE */ 
fclose ($fp); 
?> 