webslave Posted March 2, 2005 Share Posted March 2, 2005 I need to know how to download php files in there raw state not the html converted state, my friend had a shopping cart that has just been built on his site and it has major issues that im sure of, just need to prove it to him, the builder of the site left all the admin files viewable with no index or 404 so its all out in the open can anyone help on how to find a way iin so i can prove its vulnerability Link to comment https://forums.phpfreaks.com/topic/2183-download-php-files/ Share on other sites More sharing options...
mbundy Posted March 3, 2005 Share Posted March 3, 2005 I need to know how to download php files in there raw state not the html converted state, my friend had a shopping cart that has just been built on his site and it has major issues that im sure of, just need to prove it to him, the builder of the site left all the admin files viewable with no index or 404 so its all out in the open can anyone help on how to find a way iin so i can prove its vulnerability 209680[/snapback] sorry, mbut the onyl way u can is if u manage to get to an ftp, as soon as any program whatsoever even accesses it, its processed. stleasst i think that i correct. Link to comment https://forums.phpfreaks.com/topic/2183-download-php-files/#findComment-7188 Share on other sites More sharing options...
theverychap Posted March 9, 2005 Share Posted March 9, 2005 Yes, thats true, even if your directory has no index file and the browser shows your list of php files, the best anyone could do is know the exact path to your files, hack in and steal them. If anyone were to click on any of the files, or try to download them, only the output of the script gets shown, not the actual php source... Link to comment https://forums.phpfreaks.com/topic/2183-download-php-files/#findComment-7216 Share on other sites More sharing options...
steviewdr Posted May 16, 2005 Share Posted May 16, 2005 Hi, You can write a php script to gzip a php file on *nix and then serve the zip file off to you. You will have to use the system() function to gzip the file and store it in temp etc. Anything can be done. Just takes a little time. Rgds, Steve Link to comment https://forums.phpfreaks.com/topic/2183-download-php-files/#findComment-7585 Share on other sites More sharing options...
varungr Posted May 16, 2005 Share Posted May 16, 2005 hi, if you can upload a file to the server then try using the combination of readdir() function and show_source() function. That can set up something of a file browser!! Oh and by the way the example shown on the page pointed by the first link is very useful!! I hope it helps. Link to comment https://forums.phpfreaks.com/topic/2183-download-php-files/#findComment-7587 Share on other sites More sharing options...
Dead Midgets Posted July 7, 2005 Share Posted July 7, 2005 Hi, You can write a php script to gzip a php file on *nix and then serve the zip file off to you. You will have to use the system() function to gzip the file and store it in temp etc. Anything can be done. Just takes a little time. Rgds, Steve 234633[/snapback] WTF? how do i steal someone's file by zipping it? how the hell do I zip someone's file? Link to comment https://forums.phpfreaks.com/topic/2183-download-php-files/#findComment-7818 Share on other sites More sharing options...
Arenium Posted July 7, 2005 Share Posted July 7, 2005 Mod Edit: Closed -- Be considerate; use common sense. That means reading the descriptions of each forum before deciding to start a new thread in it. Moreover, when a thread is titled "READ THIS IF YOU ARE NEW," it's probably a prudent idea to do so. For reasons behind my closing of this topic, see posts here. Link to comment https://forums.phpfreaks.com/topic/2183-download-php-files/#findComment-7819 Share on other sites More sharing options...
Recommended Posts