Jump to content

Lukeidiot

Members
  • Posts

    187
  • Joined

  • Last visited

Everything posted by Lukeidiot

  1. Hey guys, I am trying to match this word in the following html: <a class="blog_name" href="/blog/matchme"> I am trying to fetch the "matchme" I have tried using preg_match_all('/href="\/blog\/(.*)">/', $data, $matches); However this does not work. Any times?
  2. Thanks MMDE you are very talented with cURL.
  3. You will need to use Regex for email addresses. http://www.regular-expressions.info/email.html
  4. Ah. Do you think its still possible to make work?
  5. I have PMed you a username/password for a test account. However, when testing the cURL, I find it says "An error has occured." instead of "Invalid username or password.". I am still a little lost when trying to find the missing key to login here. I also tried adding a user-agent, which did not help as well.
  6. Is it possible for a site to block cURL? Here's my code that was working about a month ago: <?php $tumblr_email = 'user@user.com'; $tumblr_password = 'pass'; $request_data = http_build_query( array( 'email' => $tumblr_email, 'password' => $tumblr_password ) ); $c1 = curl_init('http://www.tumblr.com/login'); curl_setopt($c1, CURLOPT_POST, true); curl_setopt($c1, CURLOPT_POSTFIELDS, $request_data); curl_setopt($c1, CURLOPT_RETURNTRANSFER, true); curl_setopt($c1, CURL_COOKIEFILE, 'cookie.txt'); curl_setopt($c1, CURLOPT_COOKIEJAR, 'cookie.txt'); curl_setopt($c1, CURLOPT_FOLLOWLOCATION,true); $result1 = curl_exec($c1); echo $result1; curl_close($c1); ?>
  7. Thanks for the input guys. I will fix accordingly. @darkfreaks, I have added a block to acunetix if the browser referrer contains the word. This is just to block threats (If you used acunetix and its not working anymore, that is the reason why) I say this because I am aware acunetix uses that particular XSS test.
  8. Hey guys, I just made a new upload site and would love for you guys to test it for me! Here is the site: http://uqload.com Do your best! Thanks! Luke Uqload.com
  9. Hmm I've been trying some things but none have seemed to work out. Perhaps a small example code?
  10. Hey guys, and thanks for reading, I am trying to devise a way to make a pop-up box show whenever a new row is inserted into my MySQL database. Any ideas or suggestions, maybe even an example or helpful information pointing to the right thing will be extremely delightful. Thanks!
  11. Nope. Pipes only matter when they're in the regex itself - pipes in the source text are fine. Are you sure the name isn't a random string? Yeah that's what I thought too, however this is not the case. Here is the actual source I am using: https://internetbs.net
  12. I can match this fine: type="submit" value="Login"> using this regex... preg_match_all('/name="action" value="(.*)">/', $source, $matches); However, I cannot match this: name="op3sfdkkfd" value="c90484908cc5d1b99c55f0191bba1932|1344564474"> with this: preg_match_all('/name="op3sfdkkfd" value="(.*)">/', $source, $matches); I believe the problem is that it has a "|" in the middle and is messing it up. I am trying to match this part: c90484908cc5d1b99c55f0191bba1932|1344564474 Any idea guys? Thanks in advance. I am using the script to login to my domains registration site, then change the DNS A record to a mirror site in case the server ever goes down.
  13. Thank you kind sir. Here is what I came up with (even though it kinda sucks). <?php error_reporting(0); if(isset($_POST['Search'])){ $board = $_POST['board']; $search = $_POST['txtSearch']; if($search == ''){ echo "Please enter a search term."; } else { $i = -1; while($i < 15){ $curlKey = curl_init(); curl_setopt($curlKey, CURLOPT_SSL_VERIFYPEER, FALSE); curl_setopt($curlKey, CURLOPT_HEADER, 0); curl_setopt($curlKey, CURLOPT_RETURNTRANSFER, true); curl_setopt($curlKey, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.517.44 Safari/534.7"); curl_setopt($curlKey, CURLOPT_FOLLOWLOCATION, true); curl_setopt($curlKey, CURLOPT_COOKIEFILE, "b.txt"); curl_setopt($curlKey, CURLOPT_COOKIEJAR, "b.txt"); curl_setopt($curlKey, CURLOPT_URL, "http://boards.4chan.org/$board/$i"); set_time_limit(0); $loginKey = curl_exec ($curlKey); preg_match_all("/$search/", $loginKey, $matches); $results = $matches[0][0]; $i++; $keyWords = array($search, $search, $search, $search); $thread_id = get_ids_by_keyword($loginKey, $keyWords, true); if(strtolower($search) == strtolower($results)){ foreach($thread_id[$search] as $ss => $s){ echo ("(<strong>$search</strong>) Found: <a href='http://boards.4chan.org/$board/res/$ss'>http://boards.4chan.org/$board/res/$ss</a> on <strong>$board</strong><br>"); } $search = $search; $timestamp = time(); $ipaddress = $_SERVER['REMOTE_ADDR']; mysql_query("INSERT INTO searches (search, ipaddress, timestamp, found, chan) VALUES ('$search','$ipaddress','$timestamp','1', '$board')"); } else { $search = $search; $timestamp = time(); $ipaddress = $_SERVER['REMOTE_ADDR']; echo "(Page $i) No matches found for <strong>$search</strong> on <strong>/$board/</strong><br>"; mysql_query("INSERT INTO searches (search, ipaddress, timestamp, found, chan) VALUES ('$search','$ipaddress','$timestamp','0','$board')"); } } } } else { } ?> Site: http://searchchan.com If you feel like chatting, I'd love to learn a bit on Skype: Rider1337 Thanks.
  14. <tr><td></td><td colspan=2> <table border=0 cellpadding=0 cellspacing=0 width="100%"><tr><td class="rules"><LI>Supported file types are: GIF, JPG, PNG <LI>Maximum file size allowed is 2048 KB. <LI>Images greater than 250x250 pixels will be thumbnailed. <LI>Read the <a href="http://www.4chan.org/rules#b">rules</a> and <a href="http://www.4chan.org/faq">FAQ</a> before posting. <LI><img src="http://static.4chan.org/image/jpn-flag.jpg" width="17" height="11"> <a href="http://www.4chan.org/japanese">このサイトについて</a> - <a href="http://www.nifty.com/globalgate/">翻訳</a><LI>Currently <b>2786</b> unique user posts.</td><td align="right" valign="center"></td></tr></table></td></tr></table></form></div><hr> <script>with(document.post) {name.value=get_cookie("4chan_name"); email.value=get_cookie("4chan_email"); pwd.value=get_pass("4chan_pass"); }</script> <form name="delform" action="http://sys.4chan.org/b/imgboard.php" method=POST><span class="filesize">File : <a href="http://images.4chan.org/b/src/1326189762932.jpg" target="_blank">1326189762.jpg</a>-(32 KB, 555x691)</span><br><a href="http://images.4chan.org/b/src/1326189762932.jpg" target=_blank><img src=http://1.thumbs.4chan.org/b/thumb/1326189762932s.jpg border=0 align=left width=202 height=251 hspace=20 alt="32 KB" md5="VNdi/JU72ZjPDqPFj8GimQ=="></a><a name="0"></a> <input type=checkbox name="373301167" value=delete><span class="filetitle"></span> <span class="postername">Anonymous</span> <span class="posttime">01/10/12(Tue)05:02:42</span> <span id="nothread373301167"><a href="res/373301167#373301167" class="quotejs">No.</a><a href="res/373301167#q373301167" class="quotejs">373301167</a> [<a href="res/373301167">Reply</a>]</span> <blockquote>so i just lost my virginity and i didnt last very long at all&#44; like maybe a minute. is it just because its my first time&#44; or do i have a problem.</blockquote><a name="373301257"></a> <table><tr><td nowrap class="doubledash">>></td><td id="373301257" class="reply"> <input type=checkbox name="373301257" value=delete><span class="replytitle"></span> <span class="commentpostername">Anonymous</span> 01/10/12(Tue)05:03:26 <span id="norep373301257"><a href="res/373301167#373301257" class="quotejs">No.</a><a href="res/373301167#q373301257" class="quotejs">373301257</a></span><br> <span class="filesize">File<a href="http://images.4chan.org/b/src/1326189806323.jpg" target="_blank">1326189806.jpg</a>-(10 KB, 320x240)</span><br><a href="http://images.4chan.org/b/src/1326189806323.jpg" target=_blank><img src=http://0.thumbs.4chan.org/b/thumb/1326189806323s.jpg border=0 align=left width=126 height=95 hspace=20 alt="10 KB" md5="Iy9EbXzWXglnvuLciY0jUg=="></a><blockquote>http://golink.us/mll/vkap</blockquote></td></tr></table> <a name="373301298"></a> <table><tr><td nowrap class="doubledash">>></td><td id="373301298" class="reply"> <input type=checkbox name="373301298" value=delete><span class="replytitle"></span> <span class="commentpostername">Anonymous</span> 01/10/12(Tue)05:03:52 <span id="norep373301298"><a href="res/373301167#373301298" class="quotejs">No.</a><a href="res/373301167#q373301298" class="quotejs">373301298</a></span><blockquote>what are you&#44; 14?...<br />YES it's normal.</blockquote></td></tr></table> <a name="373301334"></a> <table><tr><td nowrap class="doubledash">>></td><td id="373301334" class="reply"> <input type=checkbox name="373301334" value=delete><span class="replytitle"></span> <span class="commentpostername">Anonymous</span> 01/10/12(Tue)05:04:08 <span id="norep373301334"><a href="res/373301167#373301334" class="quotejs">No.</a><a href="res/373301167#q373301334" class="quotejs">373301334</a></span><blockquote>maybe that guy in ur ass was the one having a problem</blockquote></td></tr></table> <br clear=left><hr> <span class="filesize">File : <a href="http://images.4chan.org/b/src/1326189185164.png" target="_blank">1326189185.png</a>-(60 KB, 591x638)</span><br><a href="http://images.4chan.org/b/src/1326189185164.png" target=_blank><img src=http://1.thumbs.4chan.org/b/thumb/1326189185164s.jpg border=0 align=left width=233 height=251 hspace=20 alt="60 KB" md5="46ODgCAcN48NJ6Nvh+I7gg=="></a><a name="0"></a> <input type=checkbox name="373300183" value=delete><span class="filetitle"></span> <span class="postername">Anonymous</span> <span class="posttime">01/10/12(Tue)04:53:05</span> <span id="nothread373300183"><a href="res/373300183#373300183" class="quotejs">No.</a><a href="res/373300183#q373300183" class="quotejs">373300183</a> [<a href="res/373300183">Reply</a>]</span> <blockquote>Get in here!<br /><br />Let's chill and have fun.<br /><br />Don't come in if you're going to be boringly quiet. <br /><br />Be lively!</blockquote><span class="omittedposts">15 posts and 8 image replies omitted. Click Reply to view.</span> <a name="373301286"></a> <table><tr><td nowrap class="doubledash">>></td><td id="373301286" class="reply"> <input type=checkbox name="373301286" value=delete><span class="replytitle"></span> <span class="commentpostername">Anonymous</span> 01/10/12(Tue)05:03:48 <span id="norep373301286"><a href="res/373300183#373301286" class="quotejs">No.</a><a href="res/373300183#q373301286" class="quotejs">373301286</a></span><blockquote>anthonyismelo</blockquote></td></tr></table> <a name="373301297"></a> <table><tr><td nowrap class="doubledash">>></td><td id="373301297" class="reply"> <input type=checkbox name="373301297" value=delete><span class="replytitle"></span> <span class="commentpostername">Anonymous</span> 01/10/12(Tue)05:03:51 <span id="norep373301297"><a href="res/373300183#373301297" class="quotejs">No.</a><a href="res/373300183#q373301297" class="quotejs">373301297</a></span><blockquote>puppiie1<br />add me</blockquote></td></tr></table> <a name="373301329"></a> Basically, when you search for "boringly" (Or any word(s) in the thread), I need it to pull the thread ID for which it was posted in. Here is a visual also (The source code of the webpage I am searching is above).
  15. Nice job man! If you guys are curious I am coding a Family Tree project for a relative (free work).
  16. Okay, Here's my tables: Table: husbands ------------------- Column: sid #################### Table: wives ------------------- Column: sid #################### Table: children ------------------- Column: sid I am trying to select the sid of all with say "4003". I need to select the unique sid for all tables combined, then display it in php. Wheres what I was thinking, but doesnt work: <?php $sql = mysql_query(" SELECT sid FROM husbands, wives WHERE husbands.sid = wives.sid "); while ($row = mysql_fetch_assoc($sql)){ echo "".$row['husbands.sid']." <br>"; } ?>
  17. Right now I've just got a reseller with WHM.
  18. Hello. I am currently working on a new site (http://sa.cx) that is basically a free domain like this: (example.sa.cx). My main goal is to allow users to set the the full MX, CNAME, A and SOA records. Any ideas on how I could go about this using php? My initial thought would be via cURL.
  19. I wonder stand that, and I've tried it. The problem I am facing is that the $_SESSION is not registering. Any ideas?
  20. I've deleted the multiple session_starts(), and also changed to if(isset($_SESSION['username'])) however it still is producing the same error. Any ideas?
  21. Hey guys, For 90% of the hosts I use, my login session script works. Now on the other hand, I just got one of those 10% login session bugs (I am pretty sure its a host configuration bug, but I want to see if I can edit my current login script to work 100% of the time). Here is my current login script code: <?php session_start(); if(isset($_POST['Login'])) { $email = $_POST['username']; $password = $_POST['password']; $email2 = strtolower(mysql_real_escape_string($_POST['username'])); $password2 = strtolower(mysql_real_escape_string($_POST['password'])); $sql = "SELECT * FROM rsp_users WHERE email = '$email2' OR username = '$email2' and password = '$password2'"; $sqlexe = mysql_query($sql) or die("MySQL error ".mysql_errno().": ".mysql_error().""); $row = mysql_fetch_assoc($sqlexe); $rowemail = strtolower($row['email']); $rowusername = strtolower($row['username']); $rowpassword = strtolower($row['password']); if (($email2 == $rowemail && $password2 == $rowpassword && $email2 != '' && $password2 != '') || ($email2 == $rowusername && $password2 == $rowpassword && $email2 != '' && $password2 != '')) { //session_register('id'); //session_register('email'); session_start('username'); $_SESSION['username'] = $row['username']; $ip = $_SERVER['REMOTE_ADDR']; $time = time(); echo "<script>window.location='?goto=rslogin.php&go=home'</script>"; mysql_query("INSERT INTO rsp_logins (username, ipaddress, time, successful_login) VALUES ('$row[username]','$ip','$time','1')"); } else { echo "<br><strong><font color='red'>Email or Password Incorrect!</font></strong>"; $ip = $_SERVER['REMOTE_ADDR']; $time = time(); $user = strtolower(mysql_real_escape_string($_POST['username'])); mysql_query("INSERT INTO rsp_logins (username, ipaddress, time, successful_login) VALUES ('$user','$ip','$time','0')"); } } if(isset($_SESSION['username'])) { //include('header.php'); echo "Weclome <b>$_SESSION[username]</b>, you are already logged in "; } else { //include('header.php'); echo "<form method='post' action=''>"; echo "<fieldset>"; echo "<legend>Login</legend>"; echo " Username<br /> <input type='text' name='username' /> <br /> <br /> Password <br /> <input name='password' type='password' id='password' /> <br /> <input type='submit' class='button' name='Login' value='Login' /> <br /> <br /> Not Registered? <a href='http://runescapesr.com/ucp.php?mode=register'>Sign-up</a>.<br> Forgot Password? <a href='?goto=forgot'>Click Here</a>. </form>"; echo "</fieldset>"; } ?> As you can see, I am "logged in" but the other script doesn't recognize that I am logged in. The "Logout" is dynamic and only shows according to this peice of code: <?php if($_SESSION){ ?> <li class="root" > <a class="orphan item bullet" href="?goto=logout.php&logout=true"> <span> Logout </span> </a> </li> <?php } ?> And here is the dynamic code that I use on the bottom: <?php if($_SESSION['username']){ ?> Logged in as: <strong><?php echo $_SESSION['username']; ?></strong> <?php } else { ?> Welcome <strong>Guest</strong>, <a href="http://runescapesr.com/beta/?goto=register&signup=true">registering</a> is completely free! <?php } ?> Why doesn't it recognize when I try to use <?php if($_SESSION['username']){ ?> but it does when I try to use this: <?php if($_SESSION){ ?>
  22. Oh sorry, I should have made this clear. I have integrated the forum registration to simultaneously create a "Beta Access" account. The URL for testing is located here: http://runescapesr.com/beta/ Everything at /beta/ has been hand coded by myself, and would like to know of its possible security flaws. Thanks!
  23. Hey guys, I was recently told but one of my customers that their logs were getting stolen, and I am not sure if this is a brute force of the login, or maybe a mysql injection, or even session hijacking. User: phpfreaksdemo Pass: demopass Login: http://runescapesr.com/beta/index.php?goto=login Will reward anyone who find any possible vulnerabilities, paypal money. Ownership Verify: http://runescapesr.com/pro.txt
  24. I would treat it as a completely separate subscription/account. You would need to add a column for a subscription/account id rather than using the username column. Yes, just alter the INTERVAL SUM(length) DAY to INTERVAL SUM(length) SECONDS (two places in the query.) Ah yeah thanks man! Do you think you could explain this better? I have rsp_users, and rsp_subscriptions already and update both accordingly. I put "sub_left" (in days) on rsp_users, and calculate with your query on rsp_subscriptions. How would I go about expiring an older subscription? Thanks!
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.