Belliott3721 Posted May 21, 2011 Share Posted May 21, 2011 Hi there. I'm sorry, but I know VERY little when it comes to PHP coding, and although I'm trying to learn, it does require me to put some faith in humanity. Someone has offered to help me with a website I own, that connects to a MSQL server. After looking at his coding, I have to wonder if it has any holes or back doors? Thus bringing me to the experts. Your help in this matter is GREATLY appreciated. It is supposed to be some kind of "Flood" protection, but again, I'm NO expert. MOD EDIT: Questionable attachment removed. Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/ Share on other sites More sharing options...
jcbones Posted May 21, 2011 Share Posted May 21, 2011 The Number ONE reason people doesn't like when you attach files to your post, is anything can be in that file. Yep, your file doesn't pass muster either. Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1218521 Share on other sites More sharing options...
Pikachu2000 Posted May 22, 2011 Share Posted May 22, 2011 It's highly doubtful anyone is going to go through a 500kb file, especially one that consists of about half base64 encoded crap. Is there something in particular you have a question about? And why would you consider installing a script that some apparently random person offered to you? Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1218592 Share on other sites More sharing options...
r0b Posted May 22, 2011 Share Posted May 22, 2011 As far as I see its an exploit search through milw0rm. (only a part of it) This script shouldn't work as their website has been down for the past 2 years. Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1218594 Share on other sites More sharing options...
Belliott3721 Posted May 22, 2011 Author Share Posted May 22, 2011 The Number ONE reason people doesn't like when you attach files to your post, is anything can be in that file. Yep, your file doesn't pass muster either. Does that mean you checked it? Or are just stating the obvious which is that at the risk of helping someone, there is too much for you to risk yourself? It's highly doubtful anyone is going to go through a 500kb file, especially one that consists of about half base64 encoded crap. Is there something in particular you have a question about? And why would you consider installing a script that some apparently random person offered to you? Doubtful, but possible? I was under the impression for PHP coding that it only took a few lines, to open a port and connection type to the website for it to be a concern. I considered it because I need the help, and the development forums I've used, he's active on, which tends to be a good indicator that he is genuine. But again, I don't know anything about PHP coding. As far as I see its an exploit search through milw0rm. (only a part of it) This script shouldn't work as their website has been down for the past 2 years. So the coding does have a backdoor or exploit? And the website that used the exploit has been down for 2 years? Sorry, but its very confusing. Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1218857 Share on other sites More sharing options...
r0b Posted May 22, 2011 Share Posted May 22, 2011 So the coding does have a backdoor or exploit? And the website that used the exploit has been down for 2 years? Sorry, but its very confusing. I have no idea if it has a backdoor or an exploit, looks weird when I tried it. What is this supposed to do? (what were you told?) Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1218867 Share on other sites More sharing options...
jcbones Posted May 23, 2011 Share Posted May 23, 2011 The Number ONE reason people doesn't like when you attach files to your post, is anything can be in that file. Yep, your file doesn't pass muster either. Does that mean you checked it? Or are just stating the obvious which is that at the risk of helping someone, there is too much for you to risk yourself? It's highly doubtful anyone is going to go through a 500kb file, especially one that consists of about half base64 encoded crap. Is there something in particular you have a question about? And why would you consider installing a script that some apparently random person offered to you? Doubtful, but possible? I was under the impression for PHP coding that it only took a few lines, to open a port and connection type to the website for it to be a concern. I considered it because I need the help, and the development forums I've used, he's active on, which tends to be a good indicator that he is genuine. But again, I don't know anything about PHP coding. As far as I see its an exploit search through milw0rm. (only a part of it) This script shouldn't work as their website has been down for the past 2 years. So the coding does have a backdoor or exploit? And the website that used the exploit has been down for 2 years? Sorry, but its very confusing. That means my Virus software kicked it out as a 'trojan'. Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1218879 Share on other sites More sharing options...
Belliott3721 Posted May 24, 2011 Author Share Posted May 24, 2011 I was told the coding would prevent "flooding" on my website. Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1219408 Share on other sites More sharing options...
r0b Posted May 24, 2011 Share Posted May 24, 2011 I was told the coding would prevent "flooding" on my website. No, this is definitely not the code to do that. It shows information about your website, and allows your visitors to upload files to your server. Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1219553 Share on other sites More sharing options...
Belliott3721 Posted May 26, 2011 Author Share Posted May 26, 2011 Thanks very much for the clear and definite answer. Would anyone happen to know how hard it would be to code an "anti-flooding" code? Using Xampp. Trying to get an idea of how large the coding would/should be. Quote Link to comment https://forums.phpfreaks.com/topic/237069-backdoor-possiblity/#findComment-1220487 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.