I was using this piece of php code for a site. Now its old and I recently had a few attacks. Script was used for to include another file from someplace else and send spam. Obviously this makes my script as spam sender.

içeriğinden

$htm = ".htm";
$pid = "$details$htm";
function show_details($pid)
{
if (!preg_match("/http/", $pid)) {
require($pid);
} else {
   die;
}
}

ve başlık azalan, anahtar kelimeler vb.

$txt = ".txt";
$title = "$details$txt";
function show_title($title)
{
if (!preg_match("/http/", $title)) {
if (file_exists($title)) {
require($title);
} else {
   die;
}
}
}

ve bir display.php dosya ile

print '
<!-- CONTENT -->
';
show_details("$pid");
print '

Bu kod ı "/ display.php? detayları = mycontentpage" tarafından herhangi bir içeriği aramak başardı tarafından

mycontentpage.htm mycontentpage.txt

.............

Now this code has to be re-coded .. I can not change the construction as the site is just too big. So I guess I just have to stick to this..

Herkes yardımcı olabilir? Herhangi bir yorum?