Jump to content

Recommended Posts

Just wondering if my site works pretty good. This is not meant for the poor IE browser. Only Gecko like browsers like Safari, FireFox, etc. I also was thinking about adding a login system to it but I have poor PHP/MySQL skills. Anyone out there have any good tutorials? (tried ones off of google, they don't work)

Link to comment
https://forums.phpfreaks.com/topic/107700-test-website/
Share on other sites

XSS:

 

http://www1.ev5unleash.com:1212/hpfiles.php?request=%3C/iframe%3E%3C/html%3E

 

Warning: include(homepage/</iframe></html>) [function.include]: failed to open stream: No such file or directory in /var/www/hpfiles.php on line 3

 

Warning: include() [function.include]: Failed opening 'homepage/</iframe></html>' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/hpfiles.php on line 3

Link to comment
https://forums.phpfreaks.com/topic/107700-test-website/#findComment-553036
Share on other sites

Array:

 

http://www1.ev5unleash.com:1212/hpfiles.php?request[]

 

Warning: include(homepage/Array) [function.include]: failed to open stream: No such file or directory in /var/www/hpfiles.php on line 3

 

Warning: include() [function.include]: Failed opening 'homepage/Array' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/hpfiles.php on line 3

Link to comment
https://forums.phpfreaks.com/topic/107700-test-website/#findComment-553389
Share on other sites

never ever include a file which you get from through URL/GET!!

 

wanna see some systemfiles? http://www1.ev5unleash.com:1212/hpfiles.php?request=../../../../../etc/apache2/sites-enabled/000-default

http://www1.ev5unleash.com:1212/hpfiles.php?request=../../../../../etc/passwd

(of course you can just read files where your apache-user has read access, but still dangerous!)

 

kind regards

 

 

edit: I also would encrypt my mailto addresses (possible with javascript). Just in case of spiders who are looking for valid addresses to abuse.

Link to comment
https://forums.phpfreaks.com/topic/107700-test-website/#findComment-554081
Share on other sites

Not sure you were looking for design input (if not please ignore).

 

On your links to the twisted steel software  etc. instead of sending the user to a page where they must then click to get to twisted steel provide a little more upfront information & send them directly there.  I think users are all about that immediate gratification & you could loose some. 

 

Kate

Link to comment
https://forums.phpfreaks.com/topic/107700-test-website/#findComment-563891
Share on other sites

Just wondering if my site works pretty good. This is not meant for the poor IE browser. Only Gecko like browsers like Safari, FireFox, etc.

 

Your realize that a little over 50% of all internet users browse through IE6 + ? ???

 

IE 6 and below doesn't work on PHP Freaks either. We have officially dropped support for it.

 

Only Gecko like browsers like Safari [...]

 

Safari doesn't use Gecko, but WebKit.

Link to comment
https://forums.phpfreaks.com/topic/107700-test-website/#findComment-563901
Share on other sites

Well Safari may use WebKit but it's a Gecko-like browser. I mean that it has the ability to view almost the same as it.

 

Eh, I've used this site along with mine on Internet Explorer 6 (Win 2000 and XP) and I was able to view information and use it. Just lacks some designs and does not look like intended from the Web Developer to the Client. Like when I use iFrames and they don't blend in with the page to well with IE.

Link to comment
https://forums.phpfreaks.com/topic/107700-test-website/#findComment-564358
Share on other sites

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.