sql.php

<?php
namespace Bitrix\Security\Filter\Auditor;
 
class Sql
    extends Base
{
    protected $name = 'SQL';
 
    protected function getFilters()
    {
        $sqlStart = '(?:(?<![a-z0-9_.-])|\/\*M?!\d+?)\K';
        $sqlEnd = '(?![a-z_])';
        $sqlSpace = "(?:[\\x00-\\x20\‍(\‍)\'\"\`*@\+\-\.~\\\ed!\d{}]|(?:\\/\\*.*?\\*\\/)|(?:\\/\\*M?!\d*)|(?:\\*\\/)|(?:#[^\\n]*[\\n]+))+";
        $sqlExpEnd = "[\\x00-\\x20\‍(\‍)\'\"\`*@\+\-\.~\\\ed!\d{}\\/]";
        $sqlFunctionsSpace="[\\x00-\\x20]*";
        $sqlSplitTo2 = $this->getSplittingString(2);
        $sqlSplitTo3 = $this->getSplittingString(3);
        $sqlSplitTo4 = $this->getSplittingString(4);
 
 
        $filters = array(
            "/{$sqlStart}(uni)(on{$sqlSpace}.+?{$sqlExpEnd}sel)(ect){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(uni)(on{$sqlSpace}sel)(ect){$sqlEnd}/is" => $sqlSplitTo3,
 
            "/{$sqlStart}(sel)(ect{$sqlSpace}.+?{$sqlExpEnd}fr)(om){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(sel)(ect{$sqlSpace}fr)(om){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(fr)(om{$sqlSpace}.+?{$sqlExpEnd}wh)(ere){$sqlEnd}/is" => $sqlSplitTo3,
 
            "/{$sqlStart}(alt)(er)({$sqlSpace})(database|table|function|procedure|server|event|view|index){$sqlEnd}/is" => $sqlSplitTo4,
            "/{$sqlStart}(cre)(ate)({$sqlSpace})(database|table|function|procedure|server|event|view|index){$sqlEnd}/is" => $sqlSplitTo4,
            "/{$sqlStart}(dr)(op)({$sqlSpace})(database|table|function|procedure|server|event|view|index){$sqlEnd}/is" => $sqlSplitTo4,
 
            "/{$sqlStart}(upd)(ate{$sqlSpace}.+?{$sqlExpEnd}se)(t){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(ins)(ert{$sqlSpace}.+?{$sqlExpEnd}val)(ue){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(ins)(ert{$sqlSpace}.+?{$sqlExpEnd}se)(t){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(i)(nto{$sqlSpace}out)(file){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(i)(nto{$sqlSpace}dump)(file){$sqlEnd}/is" => $sqlSplitTo3,
 
            "/{$sqlStart}(ins)(ert{$sqlSpace}.+?{$sqlSpace}sele)(ct){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(ins)(ert{$sqlSpace}in)(to){$sqlEnd}/is" => $sqlSplitTo3,
            "/{$sqlStart}(ins)(ert{$sqlSpace}.+?{$sqlSpace}in)(to){$sqlEnd}/is" => $sqlSplitTo3,
 
            "/{$sqlStart}(load_)(file{$sqlFunctionsSpace}\‍()/is" => $sqlSplitTo2,
 
            "/{$sqlStart}(fr)(om{$sqlSpace}.+?{$sqlExpEnd}lim)(it){$sqlEnd}/is" => $sqlSplitTo3,
        );
 
        $result = array(
            'search' => array_keys($filters),
            'replace' => $filters
        );
        return $result;
    }
 
 
    public function process($value)
    {
        if (preg_match("#^[0-9a-zA-Z+/]+={0,3}$#", $value))
        {
            return false;
        }
 
        static $regs = [
            '/union.+?select/is',
            '/select.+?from/is',
            '/from.+?(?:where|limit)/is',
            '/alter.+?(?:database|table|function|procedure|server|event|view|index)/is',
            '/create.+?(?:database|table|function|procedure|server|event|view|index)/is',
            '/drop.+?(?:database|table|function|procedure|server|event|view|index)/is',
            '/update.+?set/is',
            '/insert.+?(?:value|set|select|into)/is',
            '/into.+?(?:outfile|dumpfile)/is',
            '/load_file/is',
        ];
 
        foreach($regs as $reg)
        {
            if(preg_match($reg, $value))
            {
                return parent::process($value);
            }
        }
 
        return false;
    }
}