|
Advertisements
$search=mysql_real_escape_string(substr($_GET['key'],0,80));
$output=htmlentities(substr($_GET['key'],0,100),ENT_QUOTES);
if($output != ""){
print "Results for \"" . $output . "\" (limited to 20 entries per section) ";
?>
// XSS
$xsslimit=20;
if($_GET['max']==1)$xsslimit=200;
$sql="select id,domain,author from xss_vuln where (author='$search' and status=2) or (domain like '%$search%' and status=2) order by d_published desc limit $xsslimit;";
$result=mysql_query($sql);
//print "XSS: ";
$xsscount=1;
while($row=mysql_fetch_array($result)){
if($xsscount==1)print "XSS: ";
print "" . htmlentities($row['domain']) . " XSS vulnerability notified by " . htmlentities($row['author']) . " ";
$xsscount++;
}
// NEWS
$sql="select id,title from xss_news where title like '%$search%' or match(content) against('$search') order by date desc limit 20;";
$result=mysql_query($sql);
$newscount=1;
while($row=mysql_fetch_array($result)){
if($newscount==1)print " NEWS: ";
$link=$row['title'];
$link=str_replace(" ","_",$link);
$removechars=array(",","=","'","\"","/","\\","?","!",";","%","$","<",">","(",")",":");
foreach($removechars as $remove){
$link=str_replace($remove,"",$link);
}
print "" . htmlentities($row['title']) . " ";
$newscount++;
}
// ARTICLES
$sql="select id,title from xss_articles where title like '%$search%' or match(content) against('$search') order by date desc limit 20;";
$result=mysql_query($sql);
$newscount=1;
while($row=mysql_fetch_array($result)){
if($newscount==1)print " ARTICLES: ";
$link=$row['title'];
$link=str_replace(" ","_",$link);
$removechars=array(",","=","'","\"","/","\\","?","!",";","%","$","<",">","(",")",":");
foreach($removechars as $remove){
$link=str_replace($remove,"",$link);
}
print "" . htmlentities($row['title']) . " ";
$newscount++;
}
// ADVISORIES
$sql="select id,title from xss_advisories where title like '%$search%' or match(content) against('$search') order by date desc limit 20;";
$result=mysql_query($sql);
$newscount=1;
while($row=mysql_fetch_array($result)){
if($newscount==1)print " ADVISORIES: ";
$link=$row['title'];
$link=str_replace(" ","_",$link);
$removechars=array(",","=","'","\"","/","\\","?","!",";","%","$","<",">","(",")",":");
foreach($removechars as $remove){
$link=str_replace($remove,"",$link);
}
print "" . htmlentities($row['title']) . " ";
$newscount++;
}
}
//ADSENSE
print $searchadsense;
?>
$notable=1;
require "./includes/bottomban.php";
require "./includes/footer.php";
?>
| |