Jump to content

ryanfilard

Members
  • Posts

    252
  • Joined

  • Last visited

Posts posted by ryanfilard

  1. It did not this is my whole ht file:

     

     

    # BEGIN WordPress

    <IfModule mod_rewrite.c>

    RewriteEngine On

    RewriteBase /

    RewriteRule ^index\.php$ - [L]

    RewriteCond %{REQUEST_FILENAME} !-f

    RewriteCond %{REQUEST_FILENAME} !-d

    RewriteRule . /index.php [L]

    </IfModule>

     

    # END WordPress

    RewriteCond %{HTTP_HOST} ^ryanweekly.ryanweekly.com$ [OR]

    RewriteCond %{HTTP_HOST} ^www.ryanweekly.ryanweekly.com$

     

    RewriteEngine On

    RewriteRule ^\/(.*)\/(.*)\/.*$ user/index.php?p=$1

     

  2. I get a syntax error on line 63 I do not know what is wrong.

    <?php 
    error_reporting(E_ALL ^ E_NOTICE); 
    $email = $_GET['ipn_email']; 
    $header = ""; 
    $emailtext = ""; 
    // Read the post from PayPal and add 'cmd' 
    $req = 'cmd=_notify-validate'; 
    if(function_exists('get_magic_quotes_gpc')) 
    {  
    $get_magic_quotes_exits = true; 
    } 
    foreach ($_POST as $key => $value) 
    // Handle escape characters, which depends on setting of magic quotes 
    {  
    if($get_magic_quotes_exists == true && get_magic_quotes_gpc() == 1){  
    	$value = urlencode(stripslashes($value)); 
    } else { 
    	$value = urlencode($value); 
    } 
    $req .= "&$key=$value"; 
    } 
    // Post back to PayPal to validate 
    $header .= "POST /cgi-bin/webscr HTTP/1.0\r\n"; 
    $header .= "Content-Type: application/x-www-form-urlencoded\r\n"; 
    $header .= "Content-Length: " . strlen($req) . "\r\n\r\n"; 
    $fp = fsockopen ('ssl://www.paypal.com', 443, $errno, $errstr, 30); 
    
    
    // Process validation from PayPal 
    // TODO: This sample does not test the HTTP response code. All 
    // HTTP response codes must be handles or you should use an HTTP 
    // library, such as cUrl 
    
    if (!$fp) { // HTTP ERROR 
    } else { 
    // NO HTTP ERROR 
    fputs ($fp, $header . $req); 
    while (!feof($fp)) { 
    $res = fgets ($fp, 1024); 
    if (strcmp ($res, "VERIFIED") == 0) { 
    	// TODO: 
    	// Check the payment_status is Completed 
    	// Check that txn_id has not been previously processed 
    	// Check that receiver_email is your Primary PayPal email 
    	// Check that payment_amount/payment_currency are correct 
    	// Process payment 
    	// If 'VERIFIED', send an email of IPN variables and values to the 
    	// specified email address 
    	foreach ($_POST as $key => $value){ 
    	$emailtext .= $key . " = " .$value ."\n\n"; 
    	} 
    	mail($email, "Live-VERIFIED IPN", $emailtext . "\n\n" . $req); 
    } else if (strcmp ($res, "INVALID") == 0) { 
    	// If 'INVALID', send an email. TODO: Log for manual investigation. 
    	foreach ($_POST as $key => $value){ 
    	$emailtext .= $key . " = " .$value ."\n\n"; 
    	} 
    	mail($email, "Live-INVALID IPN", $emailtext . "\n\n" . $req); 
    }	 
    } 
    fclose ($fp); 
    
    ?>
    

     

  3. I have this code:

     
    <?PHP
    if (empty($row_Recordset1['lurl']))
    echo ($row_Recordset1['lurl']);
    
    ?>
    

    I need to include text inside of the ()

     

    Would I do this?

     

     
    <?PHP
    if (empty($row_Recordset1['lurl']))
    echo ('<img src="'$row_Recordset1['lurl']'/>');
    
    ?>
    

     

  4. Try This:

     

    <?PHP
    $t = echo '<a href=\"../'.($r['accounttyperaw'] == '') ? 'c' : 'u'.'/'.($r['accounttyperaw'] == '') ? $r['companytag'] : $r['feedusername'].'\">'.ucwords($r['feedfirstname'].' '.$r['feedlastname']).' has updated</a>';
    ?>
    

  5. as far as i can tell, you allow very odd passwords usernames and emailaddresses. Also the script to verify the emailadress is not working correctly since anything is valid.

     

    Also i have a strong feeling (which i am happy to email you) that some other form is allowing pretty bad things.

     

    I fixed everything but the Verify Script I don't think there are any more issues beside SQL Injection

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.