deathadder Posted October 6, 2012 Share Posted October 6, 2012 hi, i am working on a website builder project and i was wondering if you guys could test it for vulnrabilities i am fairly new to php, but as far as i can see the code is valid, and secure, i have only added basic sql injection protection so hope you can help proof i own the website: http://generalprogramming.org/freak.txt http://generalprogramming.org is website Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/ Share on other sites More sharing options...
Mahngiel Posted October 6, 2012 Share Posted October 6, 2012 test account? Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383273 Share on other sites More sharing options...
deathadder Posted October 7, 2012 Author Share Posted October 7, 2012 what do you mean text account? well like yeah test all input fields, for vulnrabillities and others, idk much about them, but isn't there a tool that looks for them? Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383395 Share on other sites More sharing options...
Pikachu2000 Posted October 7, 2012 Share Posted October 7, 2012 Test account, as in do you have a test account set up for people to use to log in to your site to test it? What is the username and PW? Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383405 Share on other sites More sharing options...
deathadder Posted October 7, 2012 Author Share Posted October 7, 2012 username: testacc password: test Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383406 Share on other sites More sharing options...
MDCode Posted October 7, 2012 Share Posted October 7, 2012 username: testacc password: test Invalid login Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383476 Share on other sites More sharing options...
deathadder Posted October 8, 2012 Author Share Posted October 8, 2012 yeah i made a typo in pass fixed now cant someone please just test for vulnrabilities Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383628 Share on other sites More sharing options...
PFMaBiSmAd Posted October 8, 2012 Share Posted October 8, 2012 yeah i made a typo in pass fixed now I hope that doesn't mean that you found there was a typo in the password because they are stored in your database table in plain text? Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383631 Share on other sites More sharing options...
Coreye Posted October 8, 2012 Share Posted October 8, 2012 You can't edit/delete pages with special characters. I'd save the pages as IDs instead of names. EX: http://generalprogramming.org/control.php?edit=1 Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383632 Share on other sites More sharing options...
deathadder Posted October 8, 2012 Author Share Posted October 8, 2012 (edited) You can't edit/delete pages with special characters. I'd save the pages as IDs instead of names. EX: http://generalprogra...trol.php?edit=1 ok thans for this, will fix it now, although there is no logical explanation to sava page as that not to mention when you visit thewebsite it uses the $_GET method, i could fix it by using ids onthat too, but then the user on the website would have mor difficulty identifing the page Edited October 8, 2012 by deathadder Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383638 Share on other sites More sharing options...
MDCode Posted October 8, 2012 Share Posted October 8, 2012 I can not find any security vulnerabilities. However, before assessing completely, the errors of not being able to view/edit/delete pages with special characters needs to be fixed. Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383658 Share on other sites More sharing options...
kicken Posted October 8, 2012 Share Posted October 8, 2012 ok thans for this, will fix it now, although there is no logical explanation to sava page as that Vulnerability testing is all about doing the illogical. The things the programmer probably never thought of and did not test for. That is where a hacker is going to find their way into your systems and wreak havoc. That's one of the mindsets you need to get into while programming and testing. As well as the mindset of a clueless user and the mindset of a cat walking across the keyboard (as in make sure a 2k-char-long string of "ap]342]345o325t\34r5q324iour9ajr3]214r2it..." doesn't cause problems), to name a few. Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1383694 Share on other sites More sharing options...
deathadder Posted October 11, 2012 Author Share Posted October 11, 2012 Vulnerability testing is all about doing the illogical. The things the programmer probably never thought of and did not test for. That is where a hacker is going to find their way into your systems and wreak havoc. That's one of the mindsets you need to get into while programming and testing. As well as the mindset of a clueless user and the mindset of a cat walking across the keyboard (as in make sure a 2k-char-long string of "ap]342]345o325t\34r5q324iour9ajr3]214r2it..." doesn't cause problems), to name a few. max username chars is 32, same with password, max page chars is 10,000 and page name around 100-300 cant remember max username char is 32 same with pass max page char is 10,000 and page name 100 i thinkk I hope that doesn't mean that you found there was a typo in the password because they are stored in your database table in plain text? no, it means that i couldnt login to the testacc, so i remade it with a new password Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1384440 Share on other sites More sharing options...
MDCode Posted October 11, 2012 Share Posted October 11, 2012 no, it means that i couldnt login to the testacc, so i remade it with a new password Doesn't work again. Someone keeps entering ' as password, making it \' as the password. It seems you can not update the password as well as I tried to revert it back to "test" Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1384476 Share on other sites More sharing options...
kicken Posted October 11, 2012 Share Posted October 11, 2012 max username chars is 32, same with password, max page chars is 10,000 and page name around 100-300 cant remember Your site appears to just silently truncate a username if it is over the max. You should show an error instead, otherwise users will think they registered using the name they entered and wonder why the login doesn't work later. Having a maximum on password length is unnecessary. You should be hashing the passwords if you are not. If you are the hashing process should reduce them to a predictable length regardless of the original length of the password. Link to comment https://forums.phpfreaks.com/topic/269149-test-my-website-builder-for-vulnrabilities/#findComment-1384483 Share on other sites More sharing options...
Recommended Posts