My Login Script - Need Help

[Lamez]

ok this has worked before, but now for some reason it is not working at all!

 

Please test this out for me: http://lamezz.com/_NEW/register.php

 

you can try to login as

 

USER: test

PASS: test

 

or you can register.

 

Please help! Post feedback on what happens

[Lamez]

Never mind I got it to work, but you guys can have a look at it anyway

[agentsteal]

Cross Site Scripting:

There is Cross Site Scripting if the loggedin cookie contains code.

 

Cross Site Scripting:

There is Cross Site Scripting if your username contains code.

 

Database Dump:

http://www.lamezz.com/_NEW/install/install/

 

Full Path Disclosure:

http://www.lamezz.com/_NEW/_bin_/mailto.php

Parse error: syntax error, unexpected T_INCLUDE in /mounted-storage/home48c/sub007/sc33591-LWQU/www/_NEW/_bin_/mailto.php on line 2

 

Full Path Disclosure:

http://www.lamezz.com/_NEW/install/install/phpinfo.php

 

Includes Directory:

http://www.lamezz.com/_NEW/_bin_/

 

Includes Directory:

http://www.lamezz.com/_NEW/install/

 

SQL Error:

http://www.lamezz.com/_NEW/install/forgotpass.php

Table 'lamezcorner.users' doesn't exist

 

SQL Error:

http://www.lamezz.com/_NEW/install/install/install_new.php

Could not create tables because Table 'users' already exists

 

SQL Error:

http://www.lamezz.com/_NEW/install/install/upgradeV1_0-V1_2.php

Could not create tables because Duplicate column name 'name1'

 

SQL Error:

http://www.lamezz.com/_NEW/install/install/upgradeV1_0-V1_3.php

Could not create tables because Duplicate column name 'name1'

 

SQL Error:

http://www.lamezz.com/_NEW/install/install/upgradeV1_0-V1_4.php

Could not create tables because Duplicate column name 'name1'

 

SQL Error:

http://www.lamezz.com/_NEW/install/install/upgradeV1_2-V1_3.php

Could not create tables because Duplicate column name 'website'

 

SQL Error:

http://www.lamezz.com/_NEW/install/install/upgradeV1_2-V1_4.php

ould not create tables because You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')' at line 3

 

SQL Error:

http://www.lamezz.com/_NEW/install/install/upgradeV1_3-V1_4.php

Could not create tables because Duplicate column name 'avatar'

 

SQL Error:

http://www.lamezz.com/_NEW/install/login.php

Could not match data because Table 'lamezcorner.users' doesn't exist

 

SQL Error:

http://www.lamezz.com/_NEW/install/register.php

Could not match data because Table 'lamezcorner.users' doesn't exist

 

User Enumeration:

http://www.lamezz.com/~root

 

You can log in as any user by setting the loggedin cookie to their username.

[Lamez]

I do not know, but now my in box is getting spamed from some one trying to hack it