Jump to content
MakeWebGames

Recommended Posts

Posted

Thought this might come in handy for some people it shows staff whos been trying to access pages they shouldnt be looking at LOGS the users name and ID and staff have choice from Option to Jail the person...

SCREENIE

hack.jpg

Will post script once i have them together,,,

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

SQLS

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Now open up global_func.php and add this near bottom.

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

NOW CALL THIS FILE denied.php

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Now open up staff.php and add this

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

 

PART 2 NEXT

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

now open sglobals.php

and where you see the die(403); statement overwrite the whole function with.

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Use the method that you did here on pages that DECLINE users less than level 2

and that should be it..

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

heres a question

i've secured against my game against sql injections...

BUT is there anyway to check the url to see if its being tampered with, and do an auto fed ?

perhaps check for certain words like union ?

reason i say is i check raw access logs every so often and find a few attempted injections

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

*FOOTNOTE*

This mod is not intended to give exact Replication of a Hack attempt from outside of the game. but it will give you an idea of which users from within the game that are trying to access your pages that are only intended for staff viewing.

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

Someone trying to view staff.php isn't technically a "hacking attempt", You should really make this mod check if for instance if $_GET['ID'] is numeric and if not then record them as "trying" to "hack" your site.

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

 

Someone trying to view staff.php isn't technically a "hacking attempt", You should really make this mod check if for instance if $_GET['ID'] is numeric and if not then record them as "trying" to "hack" your site.

But why are they viewing the staff page's?

+1 Illisions

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

 

*FOOTNOTE*

This mod is not intended to give exact Replication of a Hack attempt from outside of the game. but it will give you an idea of which users from within the game that are trying to access your pages that are only intended for staff viewing.

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

If you're using v2, a good idea is to log MySQL errors via the database (simple modifications to the database class file), therefore you could fix bugs and catch people trying to modify queries to perform SQL injection (just an idea).

  • 2 weeks later...
Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

 

If you're using v2, a good idea is to log MySQL errors via the database (simple modifications to the database class file), therefore you could fix bugs and catch people trying to modify queries to perform SQL injection (just an idea).

I have done something like this.. It's great as I can who and what time they're tampering :-D

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

Here, built a small logging modication, sends an event to the admin with the ID 1 change it if you wish, any suggestions or issues you face post it here.

Run query:

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Open: class/class_db_mysql.php

Find:

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Replace with:

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

thanks.

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

 

Here, built a small logging modication, sends an event to the admin with the ID 1 change it if you wish, any suggestions or issues you face post it here.

Run query:

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Open: class/class_db_mysql.php

Find:

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Replace with:

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

thanks.

 

sorry guys but i cant find Open: class/class_db_mysql.php page in my game can you help me out

Posted

Re: [MMCODES V2] HACKING ATTEMPTS LOGGED

It's the only folder that came with rest of the files, so upload it again and you'll be fine.

If you do not have this, then contact them. But note that this class/class_db_mysql.php is related to the mcc engine, other engine may not use this.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...