Help - Search - Members - Calendar
Full Version: WTF does this do?
The Planet Forums > Security > General Security
Aerosmith
I found this in my loags where someone ran the scripr at the link beow againt one of my phpo pages.


http://thepotparty.eclub.lv/images

WTF does all that (attempt to) do and how can I tell if it was successful?
markcausa
Wow, you've had some crazy people attempting to hit you this week, Aerosmith.

The good news is, they've both been through PHP, which is harden-able.

From what I can tell, that is a PHP exploit script that works by hacking you via a comments page. It has suspicious items like magicquotes, fsocksopen, etc. that a regular comment wouldn't have. ohmy.gif

I'd take this time to make sure the page they're trying to run this through is as secure as possible.
Tomy Durden
Wow, that's a perfect example of coding from this guide:
http://www.geocities.com/mdetting/unmaintainable.html

Actually, someone ran the source through an obfuscator. Kind of like the following code:
http://en.wikipedia.org/wiki/Obfuscated_code

(BTW, I wouldn't run any of the examples as someone could've replaced one with malicious code)
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.