If you are not registered or logged in, you may still use these forums but with limited features. Show recent topics
  [Search] Search   [Hottest Topics] Hottest Topics   [Members]  Member Listing   [FAQ]  FAQ 
[Register] Register / 
[Login] Login 
Messages posted by: Anonymous
Forum Index » Profile for Anonymous » Messages posted by Anonymous
Author Message
Haha....
2.2.

Is strange, I can reproduce this error to edit wherever record in admin mode and change the word text for the scrip.....but htlm is off????

Regards
Dear

Please Helpme, in my westbook always change my password, the htlm is off, the picture is on. A hack edit a record and change a picture for this script

<iframe src=http://es.geocities.com/hacked_esi/deface.txt>

<SCRIPT TYPE="text/javascript" LANGUAGE=JAVASCRIPT>
<!--
if (top.frames.length!=0)
top.location=self.document.location;
// -->
</SCRIPT>

and more, the scrip show the westbook record in administration mode without option "delete" or "edit"

Regards
Amber222, thanks a lot for all your help. I have re-inserted the deleted line, although i dont believe that was the problem, all i deleted was the drop-down menu from where you can go back to the guestbook. Anyway, i put it back but the problem remains. I will try to install a brand new guestbook tomorrow, maybe the PHP version.

Ps, yes my chmod settings are correct.
Can anyone shed some light on how you get comments to show up please.

I've read the instructions but still can't work it out.
thanks Anon

sorry i'm not a crack, what are SQL injections and how can i prevent them?


greetings stratos
sorry not a 404, but the same error:

I would search if I new what I was looking for.

What key words should I enter. When I said novice - I meant it. Or do you know a a link?
i have tried this in guestbook.pl



but this gives me a 404 after submitting
And no, madagascar is no subdomain, its just a directory.
I will see and try if you suggestion work, thanks again
Thanks for your help, sorry i wanst clear; my guestbook did work, and had entries, but unfortunately i deleted them when re-installing the guestbook.
You should seriously read the forum posts before posting. First, ensure you have html disallowed. Second, make sure you are not vulnerable to SQL injections. Seriously, it's not difficult, but if you dont bother then you can type anything for the username and let the password be ') OR (''=' and it logs you in to the admin section.
high@ll

someone deleted all the entries from my guestbook yesterday!

i just changed the password again, extremely complicated now (it was a little bit too easy before)

can someone tell me, how i can prevent this in the future?

is it normal, that i have to enter the password again and again in the administration menu although i just didn't klick anything for just two minutes?


please help me...


greetings stratos
high@ll

jemand hat gestern alle einträge aus meinem guestbook gelöscht!
bis auf mein erstes...

hab beim support angerufen und die haben mir gesagt, dass ich ein komplizierteres passwort benutzen und dieses alle wochen ändern sollte.

kann mir jemand noch weitere tipps geben, wie ich das in zukunft vermeiden kann? habt ihr schon ähnliches erlebt?

und, ist es normal, dass ich das passwort beim adminstrations menü schon nach ein paar minuten neu eingeben muss? ist es möglich, dass der "hacker" da was geändert hat?


bitte helft mir...


greetz stratos
Hi there,

maybe it has been asked before but I don't find the answer.

I have place the:
<?php
// Important! You have to include it before your html code
include_once "poll_cookie.php";
?>

on top of my page. And I am using the "do not verify" option.

I want that my students that has the same ip at school can vote only once with the cookie veirfication...

but it is not working...

any ideas...

check it www.robo-tic.qc.ca/sondage/fr.php

thanks
 
Forum Index » Profile for Anonymous » Messages posted by Anonymous
Go to:   
Based on the open source JForum