<?php

/**********************************************************
*  ______   ______   ___      _______  ___ ___  _______   *
* |   _  \ |   _  \ |   |    |   _   ||   Y   ||   _   |  *
* |.  |   \|.  |   \|.  |    |.  1___||.      ||   1___|  *
* |.  |    |.  |    |.  |___ |.  |___ |. \_/  ||____   |  *
* |:  1    |:  1    |:  1   ||:  1   ||:  |   ||:  1   |  *
* |::.. . /|::.. . /|::.. . ||::.. . ||::.|:. ||::.. . |  *
* `------' `------' `-------'`-------'`--- ---'`-------'  *
*                                _______        _______   *
*                    .--.--.    |   _   |      |       |  *
*                    |  |  |    |___|   |  __  |___|   |  *
*                     \___/      _(__   | |__|  /  ___/   *
*                               |:  1   |      |:  1  \   *
*                               |::.. . |      |::.. . |  *
*                               `-------'      `-------'  *
*                                                         *
*                                   Script: DDLCMS v3.2   *
*                                 Author: Little Dragon   *
*                              Email: hide@address.com   *
*                        Website: http://www.ddlcms.com   *
*                                                         *
*    Please direct bug reports, suggestions or feedback   *
*                                 to the DDLCMS forums:   *
*                                                         *
*                          http://www.ddlcms.com/forums   *
*                                                         *
*    DDLCMS is a commercial grade content management      *
*    system for DDL site owners. It is provided free      *
*    of charge, provided:                                 *
*                                                         *
*    1. You keep the linkback to http://www.ddlcms.com    *
*       in the footer.                                    *
*                                                         *
*    2. You keep the sponsored links to Sharingzone.net   *
*       on your site.                                     *
*                                                         *
*    By using this script, you agree that you will not    *
*    modify, remove, or replace any encoded parts of      *
*    this script. All encoded parts MUST remain intact    *
*    for your site to remain in good standing.            *
*                                                         *
**********************************************************/

	$disallowedtags = array
	(
		'script',
		'object',
		'iframe',
		'image',
		'applet',
		'meta',
		'form',
		'onmouseover',
		'onmouseout'
	);
	foreach($_GET as $varname)
	{
    	foreach($disallowedtags as $tag)
		{
			if(is_array($varname) === TRUE)
			{
				foreach($varname as $varname2)
				{
					if(preg_match('/<[^>]*' . $tag . '/i', $varname2) !== 0)
					{
						$threat = TRUE;
					}
				}
			}
			else
			{
				if(preg_match('/<[^>]*' . $tag . '/i', $varname) !== 0)
				{
					#header("Location: $site_url");
					#die();
					$threat = TRUE;
				}
			}
		}
	}
	foreach($_POST as $varname)
	{
		foreach($disallowedtags as $tag)
		{
			if(is_array($varname) === TRUE)
			{
				foreach($varname as $varname2)
				{
					if(preg_match('/<[^>]*' . $tag . '/i', $varname2) !== 0)
					{
						$threat = TRUE;
					}
				}
			}
			else
			{
				if(preg_match('/<[^>]*' . $tag . '/i', $varname) !== 0)
				{
					#header("Location: $site_url");
					#die();
					$threat = TRUE;
				}
			}
		}
	}
?>