My New Hit Counter

[fyrestoof]

well im now using MySQL.

theres a delay of 1 hit

and a few other things i tried including email validation

 

heres the regex value for the email validator

^([0-9a-zA-Z]([-.\w]*[0-9a-zA-Z])*@(([0-9a-zA-Z])+([-\w]*[0-9a-zA-Z])*\.)+[a-zA-Z]{2,9})$

 

and heres the signup page

http://omfg.ws/count3.0/

 

 

BTW: ive never used MySQL before this is my first time using it so its not too good, i just learned how to work with MySQL today.

[agentsteal]

Cross Site Scripting:

There is Cross Site Scripting if the email address contains ">code.

 

Cross Site Scripting:

There is Cross Site Scripting if the referrer contains ">code.

 

Cross Site Scripting:

There is Cross Site Scripting if the style contains ">code.

 

Cross Site Scripting:

There is Cross Site Scripting if the name contains ">code.

 

Cross Site Scripting:

There is Cross Site Scripting if the hits contains ">code.

 

Cross Site Scripting:

There is Cross Site Scripting if the ip address contains ">code.

 

Full Path Disclosure:

http://www.omfg.ws/count3.0/counter.php?u=main&style[]

<br />

<b>Warning</b>:  imagecreate(): Invalid image dimensions in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>107</b><br />

<br />

<b>Warning</b>:  imagecreatefromjpeg(Array/1.jpg): failed to open stream: No such file or directory in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>115</b><br />

<br />

<b>Warning</b>:  imagecopymerge(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>121</b><br />

<br />

<b>Warning</b>:  imagecreatefromjpeg(Array/7.jpg): failed to open stream: No such file or directory in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>115</b><br />

<br />

<b>Warning</b>:  imagecopymerge(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>121</b><br />

<br />

<b>Warning</b>:  imagecreatefromjpeg(Array/8.jpg): failed to open stream: No such file or directory in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>115</b><br />

<br />

<b>Warning</b>:  imagecopymerge(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>121</b><br />

<br />

<b>Warning</b>:  imagejpeg(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>125</b><br />

 

Full Path Disclosure:

http://www.omfg.ws/count3.0/counter.php

<br />

<b>Warning</b>:  imagecreate(): Invalid image dimensions in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>107</b><br />

<br />

<b>Warning</b>:  imagejpeg(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>125</b><br />

 

Full Path Disclosure:

http://www.omfg.ws/count3.0/counter.php?w[]

<br />

<b>Fatal error</b>:  Unsupported operand types in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>107</b><br />

 

Full Path Disclosure:

http://www.omfg.ws/count3.0/counter.php?u=main&style=a

<br />

<b>Warning</b>:  imagecreate(): Invalid image dimensions in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>107</b><br />

<br />

<b>Warning</b>:  imagecreatefromjpeg(a/1.jpg): failed to open stream: No such file or directory in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>115</b><br />

<br />

<b>Warning</b>:  imagecopymerge(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>121</b><br />

<br />

<b>Warning</b>:  imagecreatefromjpeg(a/7.jpg): failed to open stream: No such file or directory in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>115</b><br />

<br />

<b>Warning</b>:  imagecopymerge(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>121</b><br />

<br />

<b>Warning</b>:  imagecreatefromjpeg(a/9.jpg): failed to open stream: No such file or directory in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>115</b><br />

<br />

<b>Warning</b>:  imagecopymerge(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>121</b><br />

<br />

<b>Warning</b>:  imagejpeg(): supplied argument is not a valid Image resource in <b>/home/content/r/y/a/ryanfanshaw/html/omfg/count3.0/counter.php</b> on line <b>125</b><br />

 

Full Path Disclosure:

There is Full Path Disclosure if the name is set to an invalid value.

You Should Recive An Email Shortly./var/chroot/home/content/r/y/a/ryanfanshaw/dead.letter... Saved message in /var/chroot/home/content/r/y/a/ryanfanshaw/dead.letter

 

Log File:

http://www.omfg.ws/log.html

 

SQL Dump:

http://www.omfg.ws/count3.0/db.txt

[fyrestoof]

ok thanks and the sql dump and the log file you found are the old files

the db.txt is the old Flat File

the log file you found is the old log (old stuff) the new log file i have is http://omfg.ws/count3.0/log.php (only accessible by me)(ip based auth)

try to gain access to the log.php and tell me how if you can