xcoderx Posted September 28, 2009 Share Posted September 28, 2009 please check if all ok in the coding are ok and if any loops, also its only started will keep on upadting this topic when i keep adding more to the script. discussonline.in/milu i have already proved that the server is mine on my earlier post hope i do not have to again? Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/ Share on other sites More sharing options...
darkfreaks Posted September 28, 2009 Share Posted September 28, 2009 always have to post a link proving Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-926539 Share on other sites More sharing options...
xcoderx Posted September 28, 2009 Author Share Posted September 28, 2009 lol bro u already know its mine ;-) Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-926551 Share on other sites More sharing options...
darkfreaks Posted September 28, 2009 Share Posted September 28, 2009 could use a Doctype transitional tag also Javascipt Error: permission denied call to method location.tostring Access Me:SECCOMP attack Fix: put the following in htacess file RewriteCond %{REQUEST_METHOD} !^(GET|HEAD|OPTIONS|POST|PUT) RewriteRule .* - [F] Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-926577 Share on other sites More sharing options...
xcoderx Posted September 29, 2009 Author Share Posted September 29, 2009 Thanks bro guna add .htacces to it now. Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-926885 Share on other sites More sharing options...
darkfreaks Posted September 29, 2009 Share Posted September 29, 2009 did you add it to the file and how? you went from 9 failures to 1179 failures Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-927126 Share on other sites More sharing options...
xcoderx Posted September 29, 2009 Author Share Posted September 29, 2009 no i didn add nothing yet how come 1179 failures bro ??? Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-927133 Share on other sites More sharing options...
darkfreaks Posted September 29, 2009 Share Posted September 29, 2009 well that explains why the number fluctuates from 9-1000 each time i run Access Me Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-927135 Share on other sites More sharing options...
xcoderx Posted September 29, 2009 Author Share Posted September 29, 2009 1 min lemme add the htaccess Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-927138 Share on other sites More sharing options...
xcoderx Posted September 29, 2009 Author Share Posted September 29, 2009 done now ? Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-927139 Share on other sites More sharing options...
darkfreaks Posted September 29, 2009 Share Posted September 29, 2009 nope is your htaccess file in the root directory? Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-927196 Share on other sites More sharing options...
xcoderx Posted September 30, 2009 Author Share Posted September 30, 2009 In base dir bro. Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-927954 Share on other sites More sharing options...
darkfreaks Posted September 30, 2009 Share Posted September 30, 2009 do you have tokens on your session variables to guard against CSRF attacks? CSRF PHP Tutorial also it seems to be safe guarding against SECCOMP attacks the htaccess file but you got CSRF problems as well. Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-928022 Share on other sites More sharing options...
darkfreaks Posted October 18, 2009 Share Posted October 18, 2009 after some obvious testing i realized i gave people the wrong code for the file itself. Working Code: RewriteEngine on RewriteCond %{REQUEST_METHOD} !^(GET|HEAD|OPTIONS|POST|PUT) RewriteRule .* - [F] Also if you are using PHP_SELF in your form variables don't try to avoid it or PHP_URI. try to make it redirect to an exact url if you can. if not there is a "band aid" fix you can do where you can use htmlspecialchars to filter PHP_URI or PHP_SELF. Link to comment https://forums.phpfreaks.com/topic/175817-test-pleace-my-new-edition/#findComment-939295 Share on other sites More sharing options...
Recommended Posts