<?php
$dir = "logs";
$ip = isset($_SERVER['HTTP_X_FORWARDED_FOR']) ? $_SERVER['HTTP_X_FORWARDED_FOR'] : $_SERVER['REMOTE_ADDR'] ;
$us = $_SERVER['HTTP_USER_AGENT'];
$date = date("d.m.Y");
$time = date("H:i:s");
$path = $_SERVER['REQUEST_URI'];
$ref = $_SERVER['HTTP_REFERER'] ? $_SERVER['HTTP_REFERER'] : 'none';
if(!is_dir($dir))
{
mkdir($dir,0777,TRUE);
}
$fp = fopen ("$dir/$date.txt", 'a');
fputs ($fp, "Date: $date | time: $time | IP: $ip | in: $path | out: $ref | UA: $us.\n");
fclose ($fp);
$bad_words = "UNION SELECT INSERT schemata FROM DELETE DROP BenchmARK CHAR GROUP ORDER TRUNCATE UPDATE <script> </script> javascript group_access document.cookie alert() eval() system() OUTFILE INTO";
$bad_list = explode(' ', $bad_words);
$line = $_POST?implode(" ", $_POST):$_SERVER['QUERY_STRING'];
foreach ($bad_list as $re)
{
$Site = $_SERVER['SERVER_NAME'];
$Ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
$Cuseragent = $_SERVER['HTTP_USER_AGENT'];
$Gde = $_SERVER['SCRIPT_NAME'];
$Querry = $_SERVER['QUERY_STRING'];
$re = preg_quote($re, '/');
if (preg_match("/".$re."/iu", $line))
{
$time = time();
$timer = date("j M Y в H:i", $time);
$source = '
Запрос: '.$Site.'/'.$Gde.'?'.$Querry.',
IP : '.$Ip.',
Дополнительный IP: '.$_SERVER['REMOTE_ADDR'].',
Софт: '.$Cuseragent.',
Время: '.$timer.'';
$file = htmlspecialchars($_SERVER['DOCUMENT_ROOT']).'/logs/logs.txt';
$Saved_File = fopen($file, 'a+');
fwrite($Saved_File, $source);
fclose($Saved_File);
header('Refresh: 5; url=/');
die("Попытка взлома");
}
}

?>


что оно делает

Лол, гугли

Лол, гугли

Vitos , защита. Типа.

Слабенькая защита с логами