Jump to content

Recommended Posts

Hi would you PHP fiends mind helpping me with an annoying aspect of my website.

 

www.allaboutexotics.co.uk

 

and try the login link at the top, and could help me why it chucks all that code back at me.

 

 

I am using the $page = $_GET['p'];

 

method case '

$p = 'main.php';

break;

 

which displays the content in the main right div

 

this is what its ment to look and work like

 

www.allaboutexotics.co.uk/main.php

 

works fine with adding users and logging in.

 

I took the code from a tutorial i found online.

 

PLEASE PM me for greater detail and questions

 

Olly

Array:

http://www.allaboutexotics.co.uk/userinfo.php?user[]

 

Full Path Disclosure:

http://www.allaboutexotics.co.uk/admin/admin.php

Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'your_name'@'srv86.one.com' (using password: YES) in /customers/allaboutexotics.co.uk/allaboutexotics.co.uk/httpd.www/include/database.php on line 24

Access denied for user 'your_name'@'srv86.one.com' (using password: YES)

 

Full Path Disclosure:

http://www.allaboutexotics.co.uk/include/database.php

Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'your_name'@'srv86.one.com' (using password: YES) in /customers/allaboutexotics.co.uk/allaboutexotics.co.uk/httpd.www/include/database.php on line 24

Access denied for user 'your_name'@'srv86.one.com' (using password: YES)

 

Full Path Disclosure:

http://www.allaboutexotics.co.uk/include/session.php

Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'your_name'@'srv86.one.com' (using password: YES) in /customers/allaboutexotics.co.uk/allaboutexotics.co.uk/httpd.www/include/database.php on line 24

Access denied for user 'your_name'@'srv86.one.com' (using password: YES)

 

PHP Source Code Disclosure:

http://www.allaboutexotics.co.uk/index.php?p=main

 

User Enumeration:

http://www.allaboutexotics.co.uk/~nobody

 

User Enumeration:

http://www.allaboutexotics.co.uk/~root

I dunno much about PHP, as well I am just learning.

 

However

 

if($session->logged_in){

if($form->num_errors > 0){

 

those dont look quite right. and I dont understand why I can see your PHP source code. seeing as it should be serverside.

 

to make your code look a bit cleaner for the HTML and ONLY html i use ' instead of \"

 

i dont see num_errors. get a value set to it anywhere.

 

->  do you mean => ?

Just notifying you although you're contact page doesn't work, and some how, your websites displaying tg in the top right corner, which might be related to another cookie I've had, might want to alter your cookies.

 

From the looks of things you've just put the code in the wrong places on the login section, you've displayed it as text rather than as code.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.