javaman22 Posted February 19, 2008 Share Posted February 19, 2008 Hey I've just started a web game made in php/mysql. The game is coming together slowly and I need people to run some security checks. This is a great time for me to learn the security holes it might have before I get well into the game development. http://www.empirecrest.com Link to comment Share on other sites More sharing options...
Coreye Posted February 19, 2008 Share Posted February 19, 2008 Full Path Disclosure: http://www.empirecrest.com/security-image.php?width=/ Warning: imagecreate() [function.imagecreate]: Invalid image dimensions in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 19 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 22 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 31 Warning: imageline(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 32 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: imagecolorallocate(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 77 Warning: imagestring(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 80 Warning: Cannot modify header information - headers already sent by (output started at /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php:19) in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 100 Warning: imagegif(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 103 Warning: imagedestroy(): supplied argument is not a valid Image resource in /homepages/16/d233864825/htdocs/empirecrest/include/security-image.inc.php on line 107 Link to comment Share on other sites More sharing options...
javaman22 Posted February 19, 2008 Author Share Posted February 19, 2008 Fixed Link to comment Share on other sites More sharing options...
agentsteal Posted February 19, 2008 Share Posted February 19, 2008 Cross Site Scripting: There is Cross Site Scripting when you log in if your username contains '>code. Cross Site Scripting: There is Cross Site Scripting when you register if your username contains '>code. Cross Site Scripting: There is Cross Site Scripting if the Expect header contains code. Link to comment Share on other sites More sharing options...
javaman22 Posted February 19, 2008 Author Share Posted February 19, 2008 I actually thought about that for email and reemail i dont know why i forgot username :/. Fixed those two but I don't get your last cross site scripting. Link to comment Share on other sites More sharing options...
Recommended Posts