<?PHP
/************************************************************************/
/* DUNE by NPDS                                                         */
/* ===========================                                          */
/*                                                                      */
/* This version name NPDS Copyright (c) 2001-2007 by Philippe Brunier   */
/*                                                                      */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License.       */
/************************************************************************/

/************************************************************************/
// Dont modified these lines if you dont know exactly what you have to do
/************************************************************************/

$bad_uri_content=array(
                  // To Filter "Santy php WebWorm"
                  "rush",
                  "highlight",
                  "perl",
                  "chr(",
                  "pillar",
                  "visualcoder",
                  "op=finish",

                  // To prevent SQL-injection
                  " union ",
                  " into ",
                  " select ",
                  " update ",
                  " from ",
                  " where ",
                  " insert ",
                  " drop ",
                  " delete ",

                  // To prevent XSS
                  "outfile",
                  "/script",
                  "document.cookie",
                  "url(",
                  "/object",
                  "img dynsrc",
                  "img lowsrc",
                  "/applet",
                  "/style",
                  "/iframe",
                  "/frameset",
                  "document.cookie",
                  "document.location",
                  "msgbox(",
                  "alert(",
                  "expression("
                 );
?>