if ( $_ =~ /$(\#|--|\/\*|\*\/|IF\s|ELSE\s|\s+\s|\s\|\|\s|CONCAT\(|\sCHAR(|\sLOAD_FILE\(0x633A5C626F6F742E696E69\)|ASCII()|DELETE\s|DROP\s|UPDATE\s|EXEC\s|EXECUTE\s|DECALRE\s|master\.\.sysmessages|master\.\.sysservers|masters\.\.sysxlogins|sys\.sql_logins|INSERT\s|CREATE\s|SELECT\s|MERGE\s|JOIN\s|UNION\s|\sOR\s|\sHAVING\s|\sINTO\s|\sORDER\s|\sBY\s|\sSUM\(|\sWHERE\s|SHUTDOWN\s|SUBSTRING\(|NOT\sIN\(|ISNULL\(|WAIT\sFOR\sDELAY\s|BENCHMARK\(\)|\sTOP\s|MD5\(|SHA1\(|CHAR\(|PASSWORD\(|ENCODE\(|COMPRESS\(|BENCHMARK\(|ROW_COUNT\(|SCHEMA\(|VERSION\(|xp_cmdshell|xp_regread|xp_regaddmultistring|xp_regdeletekey|xp_regdeletevalue|xp_regenumkeys|xp_regenumvalues|xp_regread|xp_regremovemultistring|xp_regwrite|xp_regread|xp_regenumvalues|xp_servicecontrol|xp_availablemedia|xp_enumdsn|xp_loginconfig|xp_makecab|xp_ntsec_enumdomains|xp_terminate_process|sp_addextendedproc|xp_webserver|sp_makewebtask|\@\@|/)/i ) { # For Details of the kind of injection attacks this line is designed to stop: http://ferruh.mavituna.com/makale/sql-injection-cheatsheet/#SyntaxBasicAttacks print "There is a possible injection attack attempt here"; ## Security function here I would like an email to be sent with details die; }