Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
sixonetonoffun
Spouse Contemplates Divorce


Joined: Jan 02, 2003
Posts: 2496

PostPosted: Sat Jan 08, 2005 6:34 pm Reply with quote

I found this code in a theme
Code:


if ($username == "") {
    $username = "Guest";
}


That was pretty cool because it gave anomynous the name Guest.
But... it also gave all anomynous users access to user level areas of the site.

I don't know if this is in other themes but I know it was in one I use.
Pretty obvious if you have it because you can visit restricted areas of your site without loggin in.

_________________
[b][size=5]openSUSE 11.4-x86 | Linux 2.6.37.1-1.2desktop i686 | KDE: 4.6.41>=4.7 | XFCE 4.8 | AMD Athlon(tm) XP 3000+ | MSI K7N2 Delta-L | 3GB Black Diamond DDR
| GeForce 6200@433Mhz 512MB | Xorg 1.9.3 | NVIDIA 270.30[/size:2b8 
View user's profile Send private message
Raven
Site Admin/Owner


Joined: Aug 27, 2002
Posts: 17086

PostPosted: Sat Jan 08, 2005 9:17 pm Reply with quote

All the ones I use have
Code:
    if ($username == "") {

        $username = "Anonymous";
    }
 
View user's profile Send private message
JRSweets
Worker
Worker


Joined: Aug 06, 2004
Posts: 192

PostPosted: Mon Jan 10, 2005 2:10 pm Reply with quote

What file in the theme are these located?
 
View user's profile Send private message
sixonetonoffun
PostPosted: Mon Jan 10, 2005 3:16 pm Reply with quote

Mine was in theme.php could have been something I did myself somewhere along the line. Anyway it wasn't a good thing either way.
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©