IMANOMA ?? Del SQL

[Driezas]

pwz ira faile openDB.php sitie duom...

Kodas: Pasirinkti visus

<?php
$server="localhost"; 
$dbuser="tomis"; ///duomenu bazes useris
$dbpass="lllll"; ///userio passwordas
$dbname="test"; ///duombzes wardas
$sesDB = @mysql_connect($server,$dbuser,$dbpass); 
?>

o saite kai ideda buna tuscias lapas , galima butu perziureti kai ideda i serva ????
nu kaip nors nuskaityt ar pan .. ??? )

[brain5ide]

Jau klausei šito ar panašaus klausimo. Buvo atsakyta, kad taip. Ieškokis informacijos pats.

[Lioniax]

cituoju:
"PHP versions 4.0.0 through 4.0.4 for Apache could allow a remote attacker to view the source code of PHP scripts if multiple virtual hosts are configured on a single Web server. PHP is a server-side scripting language for creating dynamic Web sites. If the parameter "engine=off" is configured on just one of the virtual hosts to disable PHP execution, it may disable PHP execution on other virtual hosts on the same server. A remote attacker can use this vulnerability to view the source code for the PHP page, which may contain sensitive information."
placiau: http://xforce.iss.net/xforce/xfdb/5939

[Driezas]

kasnors galit pasakyti kur dar ieskoti apie tai info ??
dekui tau bet as angliskai supratau kad php ira jautrus kodas
ir ji galima perziureti .............

[brain5ide]

PHP yra serverinės pusės kodas, kuris yprastu atveju klientui nėra matomas.
O dėl info ieškojimos, tai... use google.

[Driezas]

na taip irasiau
PHP viewing of source code
ir njeko gero nesuradau

[GODhack]

Nemoki ieskot, as va ka radau per 10 sec.:
http://hurring.com/code/php/view_source/
gal pravers.

[Driezas]

Nemoki ieskot, as va ka radau per 10 sec.:
http://hurring.com/code/php/view_source/
gal pravers.

na taip wisai neblogas sc dekui , bet reikia kad jis butu paciame saite kur nori kad perziureti .......

[Metvill]

Tai tau reikia atakuoti web serveri arba ieskoti klaidu skriptuose. Use XSpider arba Acunetix Web scaneri o po to gali uzsikti i bagtraq svetaines

[Qw3rty]

gal bug, ne bag?

[Metvill]

gal bug, ne bag?

ugum, miegoti norejau tada...