Screech
-
Posts
503 -
Joined
-
Last visited
Never
Everything posted by Screech
-
<div class='quotetop'>QUOTE("Icarius")</div> Eu la fel Ce marfa e!!
-
http://logger-ps.persiangig.com/
-
<div class='quotetop'>QUOTE("Pytbullu")</div> ENCODED nu mai are ban, iar Pytbullu bunu simt te indemna barem sa-mi multumesti ptr aia care ti-am facut-o eu, chiar daca nu ti-a placut.
-
http://rapidshare.de/files/29839474/Tutorial.rar.html Dork: "Powered by mini nuke" Vul: pages.asp?id=3%20union+select+0,kul_adi,sifre,0,0+ from+members+where+uye_id=1 Sunt destui care nu intreaba tot felul de prostii.. asa ca mi-e mai usor sa fac video ca sa intelega mai bine.
-
What's different this time? Well this script is alot more flexible, its more secure, and its much easier to add it to multiple pages. What doesn't it have? Well just so you don't get confused this is really designed for Admin panels. It doesn't include anyway of registering, there isn't support for multiple users and it isn't run from any kind of database it is just a plain and simple password protection script purely for admin panels. config.php Lets get started. First we're going to write the config file. I wont explain this because it is simply defining variables but if you read the comments and the variables in it you should get the idea of it. Save the below as config.php: <?php //Admin Username and password $adminuser = "demo"; $adminpass = "demo"; //Error message variables $not_logged_in_message_error_message = "Error... Error... You Are not logged in. Go back and try again! "; $incorrect_error_message = "You have entered the incorrect Username and/or Password, please go back and try again! "; $no_pass_or_user_error_message = "You have either not entered a password or a username, please go back and try again! "; //The first page you want the script to go to after creating those cookies (this page must include the validating code as seen in admin1.php) $first_page = "admin1.php"; ?> All you need to change above is the $adminuser and $adminpass (Admin Username and Password respectively) and if you want you can change the error messages. index.php We need a form for the user to enter the username and password details. There is no PHP in this but I have saved it as a .php file to keep all my file extensions uniform. If you change the extension to .html remember to edit the logout file (below) accordingly because that forwards to this page. Save the below as index.php: <html> <head> <title>Login Page</title> </head> <body> <table width="400" border="0" align="center" cellpadding="3" cellspacing="00">  <tr>   <td>[b]Login Form [/b]</td>  </tr>  <tr>   <td><form id="form1" name="form1" method="post" action="login.php"><table width="100%" border="0" cellspacing="00" cellpadding="3">    <tr>     <td width="49%"><div align="right">Username:</div></td>     <td width="51%"><input name="formuser" type="text" id="formuser" /></td>    </tr>    <tr>     <td><div align="right">Password:</div></td>     <td><input name="formpass" type="password" id="formpass" /></td>    </tr>    <tr>     <td> </td>     <td>      <input type="submit" name="Submit" value="Login!" />     </td>    </tr>   </table>   </form></td>  </tr> </table> </body> </html> login.php This is the page which the above login form sends the information to. This form takes that information, stores it in some cookies and forwards to the main admin page (admin1.php, see below). Save the below as login.php: <?php $formuser = $_POST["formuser"]; $formpass = $_POST["formpass"]; $formpass = md5($formpass); if($formuser && $formpass) {   setcookie ("cookuser");    setcookie ("cookpass");     setcookie ("cookuser", $formuser);   setcookie ("cookpass", $formpass);   header("Location: admin1.php");   }   else {     include("config.php");   echo($no_pass_or_user_error_message);   } ?> Ok, now to explain all that. $formuser = $_POST["formuser"]; $formpass = $_POST["formpass"]; $formpass = md5($formpass); The first 2 lines put the username and password entered on the login form into their own variables. The 3rd line takes the password and converts it to an md5 hash for added security. if($formuser && $formpass) {   setcookie ("cookuser");    setcookie ("cookpass");     setcookie ("cookuser", $formuser);   setcookie ("cookpass", $formpass);   header("Location: admin1.php");   } First Line: If $formuser and $formpass are in existance with a value then do the following: Next 2 lines: these make sure that there is no cookie in existance on the users computer with the names cookuser and cookpass by deleting them. Lines 5 & 6: These make a cookie for the username and a cookie for the password and store the information from the form in them. Line 7: This forwards the page to the main admin page (admin1.php, see below). Line 8: Closes the if statement created on the first line of this section.   else {     include("config.php");   echo($no_pass_or_user_error_message);   } This "else" statement will echo an error message if either a username or password has not been entered (that is what the previous if statement was checking for). admin1.php This is the file where the validation is done. You will probably want more than one protected page so to create them simply copy this code into different files and change the content in the area where I have the PHP comment: //Any protected stuff you want goes in here!. Save the below as admin1.php <?php include("config.php"); $cookuser = $_COOKIE["cookuser"]; $cookpass = $_COOKIE["cookpass"]; $adminpass = md5($adminpass); if($cookuser && $cookpass) {   if(($cookuser == $adminuser) && ($cookpass == $adminpass)){   echo("You have succesfully logged in! Please feel free to browse this secure admin page! To loggout go to <a href=logout.php>logout.php</a>");   //Any protected stuff you want goes in here!   }   else{   echo($incorrect_error_message);   } } else{ echo($not_logged_in_message_error_message); } ?> Now for an explanation... include("config.php"); Includes the config file. $cookuser = $_COOKIE["cookuser"]; $cookpass = $_COOKIE["cookpass"]; $adminpass = md5($adminpass); The first 2 lines set 2 variables, 1 each for the username and password which it retrieves from the cookies set in login.php (see above). The third line converts the admin password set in the config file (config.php, see above) into an md5 hash for added security. if($cookuser && $cookpass) {   if(($cookuser == $adminuser) && ($cookpass == $adminpass)){ The first if statement (line 1) checks to make sure there is actually some value to the variables $cookuser and $cookpass set above. The second if statement (line 2) checks to see if the username and password from the cookies match the username and password which are stored in the config file. If both the username and password match then the protected code/script will be executed: echo("You have succesfully logged in! Please feel free to browse this secure admin page! To loggout go to <a href=logout.php>logout.php</a>");   //Any protected stuff you want goes in here! } This ends the first if statement. else{   echo($incorrect_error_message);   } If either the username or password are incorrect this will display the error message set in the config file (see config.php above). } else{ echo($not_logged_in_message_error_message); } First line ends the 1st if statement set at the top of this whole file and then the other 3 lines is the else statement related to the if statement and it echos an error message. logout.php This is the last file, all it does is deletes the cookies and forwards to the login form so Im not even going to explain it. Save the below as logout.php <?php setcookie ("cookuser");  setcookie ("cookpass"); header("Location: index.php"); ?> Thanks to Adrian
-
<div class='quotetop'>QUOTE("MadBadSad")</div> Cine e ma? Sefu tau
-
De acest site stiu foarte multi, parerea mea e ca e cel mai bun in tutoriale, atat grafica cat si restu (html/flash/php/studio max etc-uri), are si cateva trick-uri cu hmtl... Design placut... stai pe el doar de placere.
-
<div class='quotetop'>QUOTE("koyotes")</div> Citeste toate astea http://www.rst-crew.net/home/viewforum.php?f=4 http://www.rst-crew.net/home/viewforum.php?f=7 Daca e ceva ce nu e pe inteles tau intrebi si va fi.
-
Bun venit, nu asa s rezolva treburile pe aici. Era de ajuns s ii trimiti un PM si edita acel topic, plus ca ai facut si ceva publicitate aiurea. Te intelegem, vrei sa-ti fie rasplatita munca, dar ptr. asta trebuie sa faci munca adevarata, pe cat faci pariu ca daca stau ceva timp sacaut ceva asemanator cu ala al tau gasesc?
-
<div class='quotetop'>QUOTE("6CMNWW")</div> Neinteresant!
-
Bun venit pe forum si bafta multa, daca ai intrebari baga mare, intreaba-ne. Vezi ca Spiry face multa deaia
-
Tocmai am trecut pe langa el cand ne-am intalnit... l-am salutat din partea voastra si a baut o bere cu Spiri.
-
What can you find out from an IP? Here I will outline some use full Unix and NT commands for finding out more information about a given COLOR=purpleIP. Some of these techniques will fail depending on firewall rule sets. Items to be covered: How do I find my own IP? How do I find out if an IP is contactable? How do I find out what organization owns an IP? How do I find out what OS a box is running? How do I find out what ports are open/services are running? How do I tell who is logged in to that box? Any good all in one tools? How Do I find the NetBIOS name from the IP? How Do I find the IP from the NetBIOS name? How can I see the traffic going between two IPs on a switched network? How do I find my own IP? Because the IP your ISP's DHCP server hands you may not always be the same it is handy to be able to quickly find out what your IP is. Most of the time on a LAN the DHCP server will try to hand a machine the same IP it's MAC address received the last time it requested an address, but not always. To find out your host IP and other useful information use these commands. Windows 9X/Me: Use the "winipcfg" command, this will bring up a GUI dialog with all the info you will need. Windows NT/2000/XP/etc: Use the "ipconfig command. C:>ipconfig /all Windows 2000 IP Configuration Host Name . . . . . . . . . . . . : se-libg-adrian1 Primary DNS Suffix . . . . . . . : ads.mydomain.edu Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : ads.mydomain.edu mydomains.edu mydomain.edu Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : mydomains.edu Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast Ethernet Controller (3C905C-TX Compatible) Physical Address. . . . . . . . . : 00-B0-D0-74-A8-A4 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IP Address. . . . . . . . . . . . : 192.168.26.29 Subnet Mask . . . . . . . . . . . : 255.255.240.0 Default Gateway . . . . . . . . . : 192.168.16.100 DHCP Server . . . . . . . . . . . : 192.168.30.254 DNS Servers . . . . . . . . . . . : 192.168.20.1 192.168.25.1 192.168.30.1 129.79.1.1 129.79.5.100 Primary WINS Server . . . . . . . : 192.168.30.254 Secondary WINS Server . . . . . . : 192.168.30.253 Lease Obtained. . . . . . . . . . : Saturday, February 02, 2002 12:03:14 PM Lease Expires . . . . . . . . . . : Sunday, February 03, 2002 12:03:14 PM C:> Notice that this gives you allsorts of networking information, including your IP, Gateway, MAC Address, DNS server and Host Name. Linux/Unix: Use the "ifconfig" command to find the IP of the box. bash-2.04$ /sbin/ifconfig eth0 Link encap:Ethernet HWaddr 00:C0:F0:31:9F:10 inet addr:192.168.30.130 Bcast:192.168.31.255 Mask:255.255.240.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:21353979 errors:2 dropped:0 overruns:0 frame:2 TX packets:20342701 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 Interrupt:11 Base address:0xde00 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:2234607 errors:0 dropped:0 overruns:0 frame:0 TX packets:2234607 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 bash-2.04$ If you are SSH/telneting to the box and you want to find the IP you are attaching from use the "finger" command with no parameters. bash-2.04$ finger Login Name Tty Idle Login Time Office Office Phone adrian Adrian Crenshaw pts/3 Feb 2 14:57 (192.168.26.29) root root pts/0 1:53 Jan 28 17:25 (tux:2) root root pts/1 4d Jan 25 14:57 root root pts/2 8d Jan 25 14:57 (tux:2) bash-2.04$ All OSes: The IP found using the instructions above is the IP your computers NIC (Network Interface Card) or modem has, if you are hooked to a home router or some other kind of NAT box the IP the world sees as you when you connect to other hosts will be different. To find you WAN IP (the IP the world sees when you are behind a NAT box or a Proxy) go to one of the following sites: http://www.rootsecure.net/?p=your_ip http://www.ipchicken.com/ http://www.whatismyip.com/ http://checkip.dyndns.org/ How do I find out if an IP is contactable? If the host is not blocking ICMP echo requests (type 8, code 0) try using the "ping" command, it should work from any Unix like OS and from Windows. UP: C:>ping 192.168.30.130 Pinging 192.168.30.130 with 32 bytes of data: Reply from 192.168.30.130: bytes=32 time<10ms TTL=255 Reply from 192.168.30.130: bytes=32 time<10ms TTL=255 Reply from 192.168.30.130: bytes=32 time<10ms TTL=255 Reply from 192.168.30.130: bytes=32 time<10ms TTL=255 Ping statistics for 192.168.30.130: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms C:> Not Up C:>ping 192.168.30.133 Pinging 192.168.30.133 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Request timed out. Ping statistics for 192.168.30.133: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms C:> If the host is behind a firewall blocking ICMP echo requests then you will have to look into other ways of enumerating the network, like Hping ( http://www.hping.org/ ) How do I find out what organization owns an IP? Easiest way is to use the online tools from http://samspade.org/t/ (use IP Whois) or download their Windows tools and use them on your box. Arwin offers a similar CGI at http://ws.arin.net/cgi-bin/whois.pl if Sam Spade does not work for you. There is also a host of tools built into the SamSpade utility for Windows, which you can download from http://www.samspade.org/ssw/ . How do I find out what OS a box is running? You can tell what OS a box is running in a few ways. Knowing what ports are open on the box will give you some good guesses (for instance port 6000 is used for X-windows, it being open probably means the box is running some kind of Unix). The easiest way to find this info is to use the "nmap" utility from http://www.insecure.org/nmap/ ( also available on the Knoppix Linux Boot CD ( http://www.knoppix.org/ ) or Trinux boot disk ( http://sourceforge.net/projects/trinux/ ) ) and do an OS fingerprint like so: [root@tux adrian]# nmap -O tux.mydomains.edu Starting nmap V. 2.54BETA26 ( [url]www.insecure.org/nmap/[/url] ) Adding open port 22/tcp Adding open port 1024/tcp Adding open port 25/tcp Adding open port 80/tcp Adding open port 110/tcp Adding open port 993/tcp Adding open port 6002/tcp Adding open port 5902/tcp Adding open port 111/tcp Adding open port 443/tcp Adding open port 21/tcp Adding open port 995/tcp Adding open port 23/tcp Adding open port 143/tcp Adding open port 139/tcp Adding open port 515/tcp Interesting ports on tux.mydomains.edu (192.168.30.130): (The 1532 ports scanned but not shown below are in state: closed) Port State Service 21/tcp open ftp 22/tcp open ssh 23/tcp open telnet 25/tcp open smtp 80/tcp open http 110/tcp open pop-3 111/tcp open sunrpc 139/tcp open netbios-ssn 143/tcp open imap2 443/tcp open https 515/tcp open printer 993/tcp open imaps 995/tcp open pop3s 1024/tcp open kdm 5902/tcp open vnc-2 6002/tcp open X11:2 Remote operating system guess: Linux Kernel 2.4.0 - 2.4.5 (X86) Uptime 9.033 days (since Fri Jan 25 14:55:20 2002) Nmap run completed -- 1 IP address (1 host up) scanned in 2 seconds [root@tux adrian]# Notice the part in red indicate the likely OS. Be careful about using tools like "nmap", the site you are targeting may give your local admin a call asking why you are scanning their site. Also make sure your copy of Nmap is up to date so it has the newest OS fingerprints, the version I used in the above example is kind of old. You can also find out sometimes by using the "What's that site running" cgi at Netcraft, which does a banner grab for you. Tutorialul continua, il voi completa imediat ce pot.!
-
<div class='quotetop'>QUOTE("!_30")</div> Poze ??
-
Am uitat sa va zic.. de nu a agatat radu la fete... m-a inebunit, ce pute frumoase aveau... si a futut.. picioare in gard nu de nu a mai putut. A descoperit si formula chimica a coboratului in sus si inversul acesteia (a promis un totrial video ptr RST "Cum sa Urci Jos")
-
<div class='quotetop'>QUOTE("Fatal1ty")</div> An? Noi ne gandeam in fiecare saptamana Va rog sa priviti poza cu mana (laba ) lui Caddy, a incercat o "rupere" de lant, sau ce o fi fost ala al lui phantomas , dar nu a reusit, in schimb radu cu dintii da .
-
<div class='quotetop'>QUOTE("Pytbullu")</div> Daca-ti place asta e bine, daca nu e la fel de bine . Nu m-am straduit prea mult, 5 min.
-
Dupa ce faceti rost de template sa-mi spuneti si mie daca aveti nevoie de ceva la grafica, poate va pot ajuta. Erau niste skinuri marfa ptr. phpbb pe templatemonster.com
-
<div class='quotetop'>QUOTE("Sad_Dreamer")</div> ... nu mersi, cobor la prima. Eu ce-am zis ma? nu am zis si eu asta?
-
Trebuia sa veniti, il vedeati pe Caddy facand daia... era mai muta caterinca daca eram mai multi, oricum a fost marfa si asa.
-
<div class='quotetop'>QUOTE("Sw0rdFish")</div> Sefii cum cine ma? phantomas, dj_radu, caddy, sadbad.... cum o mai avea nicku
-
Poze cu frumosi astia (eu sunt prea superb si cand sa fac poze s-a stricat telefonul) (slobozita asta nu a vrut sa ne dea alcool) Pozele sa le comenteze ei, eu nu mai am peste.
-
<div class='quotetop'>QUOTE("Kw3[R)</div> Ok kwerln, atat doream sa stiu, pe ce principiu dai aceste rank-uri si mersi ptr. "atentionare"
-
kwerln scuzele mele daca te supara cu ceva acest topic dar nu am putut sa nu remarc cum sunt date aceste rank-uri userilor. E normal, tu esti adminul, tu le dai cum crezi mai bine, dar in acelasi timp eu chiar nu inteleg. Sunt unii useri care chiar nu merita aceste rank-uri (zic eu, daca nu e asa, iar imi cer scuze). Nu va ganditi ca spun acestea doar ca as vrea sa am si eu un asemenea rank sau etc-uri, vb aia: Cel ce vrea sa fie intaiul, sa fie de pe urma voastra., dar pur si simplu sunt curios care e metoda folosita de kwerln atunci cand le da.