Block more SQL injection attempts

nigelhorne · Aug 20, 2023 · d22bc76 · d22bc76
1 parent 4666f0d
commit d22bc76
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/CGI/Info.pm b/lib/CGI/Info.pm
@@ -1348,7 +1348,7 @@ sub is_robot {
 		return 0;
 	}
 
-	if($agent =~ /SELECT.+AND.+/) {
+	if(($agent =~ /SELECT.+AND.+/) || ($agent =~ /ORDER BY /)) {
 		$self->status(403);
 		$self->{is_robot} = 1;
 		if($self->{logger}) {