javaman22 Posted February 19, 2008 Share Posted February 19, 2008 Hey I've just started a web game made in php/mysql. The game is coming together slowly and I need people to run some security checks. This is a great time for me to learn the security holes it might have before I get well into the game development. http://www.empirecrest.com Link to comment https://forums.phpfreaks.com/topic/91803-beta-test-my-game/ Share on other sites More sharing options...
Coreye Posted February 19, 2008 Share Posted February 19, 2008 Full Path Disclosure: http://www.empirecrest.com/security-image.php?width=/ Warning: imagecreate() [function.imagecreate]: Invalid image dimensions in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 19 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 22 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: Cannot modify header information - headers already sent by (output started at /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php:19) in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 100 Warning: imagegif(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 103 Warning: imagedestroy(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 107 Link to comment https://forums.phpfreaks.com/topic/91803-beta-test-my-game/#findComment-470167 Share on other sites More sharing options...
javaman22 Posted February 19, 2008 Author Share Posted February 19, 2008 Fixed Link to comment https://forums.phpfreaks.com/topic/91803-beta-test-my-game/#findComment-470177 Share on other sites More sharing options...
agentsteal Posted February 19, 2008 Share Posted February 19, 2008 Cross Site Scripting: There is Cross Site Scripting when you log in if your username contains '>code. Cross Site Scripting: There is Cross Site Scripting when you register if your username contains '>code. Cross Site Scripting: There is Cross Site Scripting if the Expect header contains code. Link to comment https://forums.phpfreaks.com/topic/91803-beta-test-my-game/#findComment-470718 Share on other sites More sharing options...
javaman22 Posted February 19, 2008 Author Share Posted February 19, 2008 I actually thought about that for email and reemail i dont know why i forgot username :/. Fixed those two but I don't get your last cross site scripting. Link to comment https://forums.phpfreaks.com/topic/91803-beta-test-my-game/#findComment-470912 Share on other sites More sharing options...
Recommended Posts