      /inc/init.php

- :

//=================================================================
// Area auf ein Default bringen, ggf. unter Verwendung der Session
//=================================================================
if (empty($_REQUEST['area']))
{
	if (!empty($_SESSION['Koobi_Area']))
		$_REQUEST['area'] = $_SESSION['Koobi_Area'];
    else
		$_REQUEST['area'] = 1;
$_SESSION['Koobi_Area'] = $_REQUEST['area'];
$_REQUEST['area'] = (int) $_REQUEST['area']; 
}


          -.
      koobi (    ). 
     koobi. 
           ,    
 .         . 
SQReplace     .

//============================================
// SQL INJECTION PROTECT BETTA 3
//============================================
if (!ereg('/admin/',$_SERVER[REQUEST_URI]))
{
//Replace dangerous characters and strings
function SQReplace($val_to_replace)
{
$val_to_replace = strtolower($val_to_replace);
return addslashes(strtr($val_to_replace, array('<'=>'','>'=>'','|'=>'','+'=>'','%'=>'',':'=>'','/'=>'','union'=>'','select'=>'','char'=>'','update'=>'')));
}

//Massive filtration
function SQClean($data)
{
  if(is_array($data))
  {
    foreach($data as $key => $val)
    {
      switch ($key) 
		{
        //------------- Global -------------------
        case "p" : $return[$key] = SQReplace($val);
            break;
        case "area" : $return[$key] = (int)SQReplace($val);
            break;
        case "print" : $return[$key] = (int)SQReplace($val);
            break;
        case "categ" : $return[$key] = (int)SQReplace($val);
            break;
        case "parent" : $return[$key] = (int)SQReplace($val);
            break;
        case "id" : $return[$key] = (int)SQReplace($val);
            break;
        case "fid" : $return[$key] = SQReplace($val);//dual for shop und forum
            break;
        case "action" : $return[$key] = SQReplace($val);
            break;
        case "sort" : $return[$key] = SQReplace($val);
            break;
        case "show" : $return[$key] = SQReplace($val);
            break;
        case "pid" : $return[$key] = SQReplace($val);//dual for shop
            break;
        case "sortby" : $return[$key] = SQReplace($val);
            break;
        case "page" : $return[$key] = (int)SQReplace($val);
            break;
        //---------------------------------------
        
        //------------- Poll -------------------
        case "poll_id" : $return[$key] = (int)SQReplace($val);
            break;
        case "showresult" : $return[$key] = (int)SQReplace($val);
            break;
        //---------------------------------------
        
        //------------- Forum -------------------
        case "what" : $return[$key] = SQReplace($val);
            break;
        case "toid" : $return[$key] = (int)SQReplace($val);
            break;
        case "pp" : $return[$key] = (int)SQReplace($val);
            break;
        case "num_pages" : $return[$key] = (int)SQReplace($val);
            break;
        case "unit" : $return[$key] = SQReplace($val);
            break;
        case "period" : $return[$key] = (int)SQReplace($val);
            break;
        //---------------------------------------
        
        //------------- GuestBook ---------------
        case "gbcomment" : $return[$key] = (int)SQReplace($val);
            break;
        case "author" : $return[$key] = SQReplace($val);
            break;
        case "email" : $return[$key] = SQReplace($val);
            break;
        //---------------------------------------
           
        //------------- User --------------------
        case "to" : $return[$key] = SQReplace($val);
            break;
        case "uid" : $return[$key] = (int)SQReplace($val);
            break;
        //---------------------------------------
        
        //------------- News --------------------
        case "newsid" : $return[$key] = (int)SQReplace($val);
            break;
        case "shownews" : $return[$key] = SQReplace($val);
            break;   
        //---------------------------------------
            
        //------------- Articles ----------------
        case "type" : $return[$key] = SQReplace($val);
            break;
        //---------------------------------------
        
        //------------- Files -------------------
        case "showfile" : $return[$key] = (int)SQReplace($val);
            break;
        //---------------------------------------
        
        //------------- Links -------------------
        case "showlink" : $return[$key] = (int)SQReplace($val);
            break;
        //---------------------------------------
        
        //------------- FAQ ---------------------
        case "faq_id" : $return[$key] = (int)SQReplace($val);
            break;
        //--------------------------------------- 
        
         //------------- Calendar ---------------
        case "koobi_monat" : $return[$key] = (int)SQReplace($val);
            break;
        case "koobi_jahr" : $return[$key] = (int)SQReplace($val);
            break;
        case "weekstart" : $return[$key] = (int)SQReplace($val);
            break;
        case "weekend" : $return[$key] = (int)SQReplace($val);
            break;
        case "koobi_tag" : $return[$key] = (int)SQReplace($val);
            break;
        //--------------------------------------- 
        
        //------------- Cheats ------------------
        case "system" : $return[$key] = (int)SQReplace($val);
            break;
        case "t" : $return[$key] = SQReplace($val);
            break;
        case "cheatid" : $return[$key] = (int)SQReplace($val);
            break;
        case "alpha" : $return[$key] = SQReplace($val);
            break;
        //--------------------------------------- 
        
        //------------- Shop ------------------
        case "navop" : $return[$key] = (int)SQReplace($val);
            break;
		case "view" : $return[$key] = SQReplace($val);
            break;
        case "sub" : $return[$key] = SQReplace($val);
            break;
        case "sid" : $return[$key] = SQReplace($val);
            break;
        case "delitem" : $return[$key] = (int)SQReplace($val);
            break;
        case "item" : $return[$key] = SQReplace($val);
            break;
        case "cartid" : $return[$key] = (int)SQReplace($val);
            break;
        case "mask" : $return[$key] = (int)SQReplace($val);
            break;
        case "pattern" : $return[$key] = SQReplace($val);
            break;
        case "manufacturer" : $return[$key] = (int)SQReplace($val);
            break;
        case "price_f" : $return[$key] = (int)SQReplace($val);
            break;
        case "price_t" : $return[$key] = (int)SQReplace($val);
            break;  
        //--------------------------------------- 
        
        //------------- Other --------------------
        case "qc" : $return[$key] = (int)SQReplace($val);
            break;
        case "qlink" : $return[$key] = (int)SQReplace($val);
            break;
        //---------------------------------------
        
        default  : $return[$key] = $val;
            break;
    	}
  	}
 return ($return);
  }
}

if($_POST)$_POST = SQClean($_POST);
if($_GET)$_GET = SQClean($_GET);
if($_REQUEST)$_REQUEST = SQClean($_REQUEST);
}
//============================================