hack this code :)

[NoWhereMan]

hi all,

would you please help me find any security flaw in this code (if any)?
thank you so much

http://paste.uni.cc/9829

bye

--
NoWhereMan
-- NoWhereBlog: www.nowhereland.it
-- deviantArt: http://nowhereland.deviantart.com
-- Giochi a BiteFight? http://bitefight.nowhereland.it/
-- Vagisil migliora la tua vita intima: www.vagisil.com/teencenter.shtml

[Hans 'pritaeas' Pollaerts]

Re: hack this code :)

"NoWhereMan " <nowhereman@PLE ASEDONTSPAMMEde spammed.comwrot e in message
news:1azsskychk ur$.9m67wioajmk a.dlg@40tude.ne t...

hi all,
>
would you please help me find any security flaw in this code (if any)?
thank you so much
>

http://paste.uni.cc/9829

>
bye
>
--
NoWhereMan
-- NoWhereBlog: www.nowhereland.it
-- deviantArt: http://nowhereland.deviantart.com
-- Giochi a BiteFight? http://bitefight.nowhereland.it/
-- Vagisil migliora la tua vita intima: www.vagisil.com/teencenter.shtml

Hi.

If you don't post defaults.php, there's is no telling if there really is a
security flaw.

[NoWhereMan]

Re: hack this code :)

on Sun, 3 Sep 2006 13:37:35 +0200, Hans 'pritaeas' Pollaerts wrote:

If you don't post defaults.php, there's is no telling if there really is a
security flaw.

defaults.php defines only the constants you read in the code :)

define('IMAGES_ DIR', 'fp-content/content/mages');
define('ATTACHS _DIR', 'fp-content/content/attachs');

plus others you don't need to know here...
nothing else

bye :)



--
NoWhereMan
-- NoWhereBlog: www.nowhereland.it
-- deviantArt: http://nowhereland.deviantart.com
-- Giochi a BiteFight? http://bitefight.nowhereland.it/
-- Vagisil migliora la tua vita intima: www.vagisil.com/teencenter.shtml

[Janwillem Borleffs]

Re: hack this code :)

NoWhereMan wrote:

would you please help me find any security flaw in this code (if any)?
thank you so much
>

http://paste.uni.cc/9829

>

I assume you have properly set your base dir restriction directive in your
php.ini file to handle cases where $_REQUEST['f'] would be defined as
'../someprivatedir/dbconnect.php'?

JW

[NoWhereMan]

Re: hack this code :)

on Sun, 3 Sep 2006 14:03:23 +0200, Janwillem Borleffs wrote:

NoWhereMan wrote:

>would you please help me find any security flaw in this code (if any)?
>thank you so much
>>
>http://paste.uni.cc/9829
>>

>
I assume you have properly set your base dir restriction directive in your
php.ini file to handle cases where $_REQUEST['f'] would be defined as
'../someprivatedir/dbconnect.php'?
>
JW

actually I can't as I don't own the webserver (and as the script is
suppsoed to be distributed), and that's why I've put these lines:

if (strpos($name, '..')!==false || strpos($name,'/')!==false)
die('Invalid file name!');

--
NoWhereMan
-- NoWhereBlog: www.nowhereland.it
-- deviantArt: http://nowhereland.deviantart.com
-- Giochi a BiteFight? http://bitefight.nowhereland.it/
-- Vagisil migliora la tua vita intima: www.vagisil.com/teencenter.shtml