Jump to content
MakeWebGames

Recommended Posts

Posted

gang admin panel

ok

add new file called

gsstart.php

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

next bit

add new file called gangadmin.php

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

then open admin.php

and go to index

then add link to gsstart.php

thanks

Posted

And Back to Version two, with a (little) security added.

 

gsstart.php

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

Posted

if (!in_array($_GET['action'], array('name', 'delete', 'delete2', 'wars', 'respect', 'members', 'apps', 'bank', 'ann', 'tag', 'kick', 'armory', 'uarmory', 'desc', 'logo', 'pres', 'id', 'mw'))) {

echo "Invalid Command!";

exit;

}

is in the wrong place

Posted

kaine try replacing this

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

with

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

may sort your problem

Posted
if (!in_array($_GET['action'], array('name', 'delete', 'delete2', 'wars', 'respect', 'members', 'apps', 'bank', 'ann', 'tag', 'kick', 'armory', 'uarmory', 'desc', 'logo', 'pres', 'id', 'mw'))) {

echo "Invalid Command!";

exit;

}

is in the wrong place

That is 100% point less code. Why use it?

switch() will go to the default function, if the requested one isn't in the switch().

So again point less.

  • 10 months later...
Posted

I keep having an error when I use gangadmin.php

It's always this problem.

Parse error: syntax error, unexpected ')' in /home/????/public_html/gangadmin.php on line 73

Posted
To prevent LFI/RFI that's used.

May be a bit overkill, but not all hacks are lame sql hacks.

rtfm.

file.php?action=*Insert url/path/null character here* won't work in this instance so yes the in_array() is indeed pointless.

Whereas if you were using something like fopen(), require, etc; then you'd need the array/checks but no reason too here.

Posted

I know can you believe that! ;)

In reality, I don't care that much, i just figured it was time to turn over a new leaf.

Anyone interested in doing some digging is more than welcome to figure it out :p

  • 2 weeks later...
  • 1 month later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...