Jump to content

om

Members
  • Posts

    104
  • Joined

  • Last visited

    Never

About om

  • Birthday 10/01/1971

Contact Methods

  • Website URL
    http://esaint.oom.in

Profile Information

  • Gender
    Male
  • Location
    BHARAT / INDIA

om's Achievements

Newbie

Newbie (1/5)

0

Reputation

  1. wHEN i use some of the css features you wont like them??????? No Not yet I have added some more features inside the login, My_Space menu almost functional and see for you self.
  2. R u handling this site alone????????? what is the team size here 34 failures of register page http://www.kaboochie.com/register.php SQL Injection String Tests Summary (219300 results recorded) Failures: 34 Warnings: 0 Passes: 219266 SQL Injection String Test Results command Submitted Form State: * submit: ++Search Users/Pets Results: Server Status Code: 302 OK Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE Server Status Code: 302 OK Tested value: 1' OR '1'='1 Server Status Code: 302 OK Tested value: &#49&#39&#32&#79&#82&#32&#39&#49&#39&#61&#39&#49 Server Status Code: 302 OK Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' -- Server Status Code: 302 OK Tested value: 1'1 Server Status Code: 302 OK Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31 Server Status Code: 302 OK Tested value: '; DESC users; -- Server Status Code: 302 OK Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116 Server Status Code: 302 OK Tested value: ' OR username IS NOT NULL OR username = ' Server Status Code: 302 OK Tested value: 1' AND non_existant_table = '1 Server Status Code: 302 OK Tested value: 1 AND USER_NAME() = 'dbo' Server Status Code: 302 OK Tested value: 1'1 Server Status Code: 302 OK Tested value: 1' OR '1'='1 Server Status Code: 302 OK Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); -- Server Status Code: 302 OK Tested value: 1 AND 1=1 Server Status Code: 302 OK Tested value: 1 EXEC XP_ Server Status Code: 302 OK Tested value: 1 OR 1=1 This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. submit Submitted Form State: * command: ++ Results: Server Status Code: 302 OK Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31 Server Status Code: 302 OK Tested value: &#49&#39&#32&#79&#82&#32&#39&#49&#39&#61&#39&#49 Server Status Code: 302 OK Tested value: 1' OR '1'='1 Server Status Code: 302 OK Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE Server Status Code: 302 OK Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' -- Server Status Code: 302 OK Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116 Server Status Code: 302 OK Tested value: ' OR username IS NOT NULL OR username = ' Server Status Code: 302 OK Tested value: 1' AND non_existant_table = '1 Server Status Code: 302 OK Tested value: 1'1 Server Status Code: 302 OK Tested value: '; DESC users; -- Server Status Code: 302 OK Tested value: 1 AND USER_NAME() = 'dbo' Server Status Code: 302 OK Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); -- Server Status Code: 302 OK Tested value: 1 AND 1=1 Server Status Code: 302 OK Tested value: 1 EXEC XP_ Server Status Code: 302 OK Tested value: 1'1 Server Status Code: 302 OK Tested value: 1' OR '1'='1 Server Status Code: 302 OK Tested value: 1 OR 1=1 This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_username Submitted Form State: * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_display_name Submitted Form State: * reg_username: ++88888_____ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. referer Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_full_name Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_email Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_location Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_day Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_month Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_year Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_gender Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_sig: ++ * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_sig Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_profile: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. reg_profile Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * Submit: ++Register My Account Now!!! Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. Submit Submitted Form State: * reg_username: ++88888_____ * reg_display_name: ++ * referer: ++ * reg_full_name: ++ * reg_email: ++ * reg_location: ++ * reg_day: ++ * reg_month: ++ * reg_year: ++ * reg_gender: ++1 * reg_sig: ++ * reg_profile: ++ Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. Results genenerated on December 27, 2008 for http://www.kaboochie.com/register.php
  3. I didnt understand. Well you havent posted any thing on my site????????????? I have some ,more features which you can Xperience only if U login www.ucy.in/tcmb Dear Dark Freaks [ddf], CHECK YOUR HOTMAIL A/C FOR LOGIN DETAILS.
  4. 1. Your pages will be rendered by browsers in quirks mode which can cause your layout to behave (look) differently than you expect it to. 2. Marquee can't be stopped, which goes against accessibility guidelines for web pages. 3. Last but not least: marquee and blink are not and never were part of ANY HTML standard. Imagine you're using SI system for everything, except you measure volume in bushels instead of cubic meters... It just doesn't fit. thanks, It may take some time, while I find replacement
  5. gOOGLE search engine clean must be really clean , did you find it any where? just now i kept it for sqlinject me Saw the above result, so at 20 or less than it, my software is relatively good , but I will still strenghten it logical level, If you find any better clean, I will volunteer to test it. thankyou very much, God bless you, now as you login and check for yourself the site is basic ok. So I will now devote more time for marketing. On you next feed back preferably at my site, I will like to discuss more about our future. Blog you later. GBU & ALL.
  6. hAVE YOU LOGGED IN AND CHECKED INSIDE I DONT FIND YOU THERE? CHECK YOUR HOTMAIL A/C FOR LOGIN DETAILS. here is the Google sqlInject me result SQL Injection String Tests Summary (73100 results recorded) Failures: 85 Warnings: 0 Passes: 73015 SQL Injection String Test Results hl Submitted Form State: * q: ++ * btnG: ++Google Search * btnI: ++I'm Feeling Lucky * meta: ++ * meta: ++cr=countryIN Results: Server Status Code: 302 Found Tested value: &#49&#39&#32&#79&#82&#32&#39&#49&#39&#61&#39&#49 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31 Server Status Code: 302 Found Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE Server Status Code: 302 Found Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' -- Server Status Code: 302 Found Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116 Server Status Code: 302 Found Tested value: ' OR username IS NOT NULL OR username = ' Server Status Code: 302 Found Tested value: 1' AND non_existant_table = '1 Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: '; DESC users; -- Server Status Code: 302 Found Tested value: 1 AND USER_NAME() = 'dbo' Server Status Code: 302 Found Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); -- Server Status Code: 302 Found Tested value: 1 AND 1=1 Server Status Code: 302 Found Tested value: 1 EXEC XP_ Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: 1 OR 1=1 This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. q Submitted Form State: * hl: ++en * btnG: ++Google Search * btnI: ++I'm Feeling Lucky * meta: ++ * meta: ++cr=countryIN Results: Server Status Code: 302 Found Tested value: &#49&#39&#32&#79&#82&#32&#39&#49&#39&#61&#39&#49 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31 Server Status Code: 302 Found Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE Server Status Code: 302 Found Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' -- Server Status Code: 302 Found Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116 Server Status Code: 302 Found Tested value: ' OR username IS NOT NULL OR username = ' Server Status Code: 302 Found Tested value: 1' AND non_existant_table = '1 Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: '; DESC users; -- Server Status Code: 302 Found Tested value: 1 AND USER_NAME() = 'dbo' Server Status Code: 302 Found Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); -- Server Status Code: 302 Found Tested value: 1 AND 1=1 Server Status Code: 302 Found Tested value: 1 EXEC XP_ Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: 1 OR 1=1 This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. btnG Submitted Form State: * hl: ++en * q: ++ * btnI: ++I'm Feeling Lucky * meta: ++ * meta: ++cr=countryIN Results: Server Status Code: 302 Found Tested value: &#49&#39&#32&#79&#82&#32&#39&#49&#39&#61&#39&#49 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31 Server Status Code: 302 Found Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE Server Status Code: 302 Found Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' -- Server Status Code: 302 Found Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116 Server Status Code: 302 Found Tested value: ' OR username IS NOT NULL OR username = ' Server Status Code: 302 Found Tested value: 1' AND non_existant_table = '1 Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: '; DESC users; -- Server Status Code: 302 Found Tested value: 1 AND USER_NAME() = 'dbo' Server Status Code: 302 Found Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); -- Server Status Code: 302 Found Tested value: 1 AND 1=1 Server Status Code: 302 Found Tested value: 1 EXEC XP_ Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: 1 OR 1=1 This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. btnI Submitted Form State: * hl: ++en * q: ++ * btnG: ++Google Search * meta: ++ * meta: ++cr=countryIN Results: Server Status Code: 302 Found Tested value: &#49&#39&#32&#79&#82&#32&#39&#49&#39&#61&#39&#49 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31 Server Status Code: 302 Found Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE Server Status Code: 302 Found Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' -- Server Status Code: 302 Found Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116 Server Status Code: 302 Found Tested value: ' OR username IS NOT NULL OR username = ' Server Status Code: 302 Found Tested value: 1' AND non_existant_table = '1 Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: '; DESC users; -- Server Status Code: 302 Found Tested value: 1 AND USER_NAME() = 'dbo' Server Status Code: 302 Found Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); -- Server Status Code: 302 Found Tested value: 1 AND 1=1 Server Status Code: 302 Found Tested value: 1 EXEC XP_ Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: 1 OR 1=1 This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. meta Submitted Form State: * hl: ++en * q: ++ * btnG: ++Google Search * btnI: ++I'm Feeling Lucky * meta: ++ Results: Server Status Code: 302 Found Tested value: &#49&#39&#32&#79&#82&#32&#39&#49&#39&#61&#39&#49 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31 Server Status Code: 302 Found Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE Server Status Code: 302 Found Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' -- Server Status Code: 302 Found Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116 Server Status Code: 302 Found Tested value: ' OR username IS NOT NULL OR username = ' Server Status Code: 302 Found Tested value: 1' AND non_existant_table = '1 Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: '; DESC users; -- Server Status Code: 302 Found Tested value: 1 AND USER_NAME() = 'dbo' Server Status Code: 302 Found Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); -- Server Status Code: 302 Found Tested value: 1 AND 1=1 Server Status Code: 302 Found Tested value: 1 EXEC XP_ Server Status Code: 302 Found Tested value: 1'1 Server Status Code: 302 Found Tested value: 1' OR '1'='1 Server Status Code: 302 Found Tested value: 1 OR 1=1 This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. Results genenerated on December 25, 2008 for http://www.google.co.in/
  7. Its good, thank you very much. I down loaded but the licence is unacceptable, its long code. More over marquee is short, quick and works with most, please give any technical drawbacks for it, instead of looks and feel. thank you, here is current clean that runs login to check new look and feel, features.
  8. Sorry, I am always testing check the results now W3C CSS Validator results for http://www.ucy.in/cmb (CSS level 2.1) Congratulations! No Error Found. This document validates as CSS level 2.1 !
  9. He obviously is working on it all the time. The site was valid HTML 4.01 Transitional when I checked it some time ago (or at least it's front page was) You are right only the first page is validated. After it I added icons Later I modified css I will debug and post it back. Well I uploaded new version of inside logged in with new features added login and give comments please. Thank all of you. GBU
  10. Good point. Especially anything to do with religion... Dear Maq, religion... is meant to teach you patience and not to loose out. Well god bless you with it.
  11. No not at all, i was giving my frank opinion, well by the time i posted the new logic, it worked fine with zero, but the code had some programmer made logical bugs which took about 15 hrs to bug out[Last 32]hrs I hardly slept, down for couple of min. Just now Hopefully 5 to 6 login tests performed for almost all types. So the code is inherently at logical level, rather than php level secured. Failures: 0 Warnings: 0 Passes: 131580 SQL Injection String Test Results hregcd Submitted Form State: * hu_grp_id: ++ * hcuna: ++ * huid: ++ * htpwd: ++ * htpwd1: ++ * ribtn: ++ Change / Refresh Image * cbe: ++ * jbs_reg: ++Register Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. hu_grp_id Submitted Form State: * hregcd: ++ * hcuna: ++ * huid: ++ * htpwd: ++ * htpwd1: ++ * ribtn: ++ Change / Refresh Image * cbe: ++ * jbs_reg: ++Register Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. hcuna Submitted Form State: * hregcd: ++ * hu_grp_id: ++ * huid: ++ * htpwd: ++ * htpwd1: ++ * ribtn: ++ Change / Refresh Image * cbe: ++ * jbs_reg: ++Register Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. huid Submitted Form State: * hregcd: ++ * hu_grp_id: ++ * hcuna: ++ * htpwd: ++ * htpwd1: ++ * ribtn: ++ Change / Refresh Image * cbe: ++ * jbs_reg: ++Register Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. htpwd Submitted Form State: * hregcd: ++ * hu_grp_id: ++ * hcuna: ++ * huid: ++ * htpwd1: ++ * ribtn: ++ Change / Refresh Image * cbe: ++ * jbs_reg: ++Register Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. htpwd1 Submitted Form State: * hregcd: ++ * hu_grp_id: ++ * hcuna: ++ * huid: ++ * htpwd: ++ * ribtn: ++ Change / Refresh Image * cbe: ++ * jbs_reg: ++Register Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. ribtn Submitted Form State: * hregcd: ++ * hu_grp_id: ++ * hcuna: ++ * huid: ++ * htpwd: ++ * htpwd1: ++ * cbe: ++ * jbs_reg: ++Register Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. cbe Submitted Form State: * hregcd: ++ * hu_grp_id: ++ * hcuna: ++ * huid: ++ * htpwd: ++ * htpwd1: ++ * ribtn: ++ Change / Refresh Image * jbs_reg: ++Register Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. jbs_reg Submitted Form State: * hregcd: ++ * hu_grp_id: ++ * hcuna: ++ * huid: ++ * htpwd: ++ * htpwd1: ++ * ribtn: ++ Change / Refresh Image * cbe: ++ Results: This field passed 14620 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test. Results genenerated on December 23, 2008 for http://www.ucy.in/cmb/sp_cmregis1.php?72b518d0c30f7358dc8ad8700f8e4584 here is a tip, that I [used] hate and love the most : "DIVIDE AND RULE", WHICH PreIndependent Indian days [olden day britisher ] used it to conquer India, for economic exploitation.
  12. bECAUSE the intelligence may be built into the software which tries various combinations based on history of tests. Login to the site and give your feed back, PLEASE : : :-* :-* :-* www.ucy.in/tcmb
  13. I can assure you it is not. The 'bad guys' out there are always trying to come up with new tricks. You might be now secured against most popular attacks, but you can never be sure 99.99999999% sure (I'd expect someone with your background to know, that a figure like 99.99999999% is useless, as it is virtually equal to 100%). Anyways, congratulations on progress so far. If you could just come up with some more eye pleasing layout... What do you mean by it? Why a month, who you are considering to buy and what? It was my comment on the fact, that despite your site was deemed as a hopeless case by most people here, they are still helping you. Very true, In our country, especially my mom taught me one proverb "I one is there to hit a palm tree's head, there will be some one to hit that fellows head". And you see now you are understanding GOD. "IN LIFE THERE WILL BE UPS AND DOWNS TO MAKE A CYCLE".
  14. Give me a break Dylan, at least the 80s I have only ready the first page, so if I repeat someone, sue me... The website looks truly horrible, sorry, but it does. For all the previously mentioned reasons... Now I am not the best designer either, so rather than settling for a poor design, head over to www.styleshout.com and use one of theirs, all templates are CSS and XHTML valid out of the box, your job is to implement your website within the template, without breaking its validation! Good luck : Thanks, I did little color and very minute layout changes and applied to most of the pages, darkfreaks and others can login to check out the new format and give feed back. The problem with download templates is, i will be morally and ethically forced to include their site reference which may not be liked by my customers. Hence I made it with a simple template provided buy justin in earlier pages, modified it to my own requirements. So how is it?
  15. Hey df, you r so logically innocent? The simple fact that when xss/sql Inject me are able by pass the login screen and test so fast implies that capatcha is made bypass/use less. If U have any technical clarification on what i said in the above paragraph, please quickly post it out here. And I upgraded both clean and receiving logic php, script of http://www.ucy.in/tcmb/login.php So now Its 99.99999999% SQLINJ free. try out and check for yourself,
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.