Bit-HDTV passing its source code!

[AdrianPhoto]

Some error at Bit-HDTV forced the torrents.php file to be downloaded instead of being interpreted by PHP.
take a shot:
http://www.bit-hdtv.com/torrents.php

snippy

Spoiler: Show

<?
//kell
//ob_start("ob_gzhandler");
require_once("include/bittorrent.php");
dbconn(false);
loggedinorreturn();

// Cache kezdes innen //
/*
$getpage = (int)$_GET["page"];
$notcat = (!isset($_GET["cat"]));
$halottis = (!isset($_GET["incldead"]));
$vanlap = (isset($_GET["page"]));
//$activeonly = (!isset($_GET["incldead"]));
$tagfelett = ($CURUSER);
$cachefile = "/root/browse_cache/browse-". $getpage. ".html";
$cachetime = 120; // 60 mp
if (file_exists($cachefile) && (time() - $cachetime < filemtime($cachefile)) && $tagfelett && $vanlap && $notcat && $halottis)
    {    
    include($cachefile);
    //}

[anon]

Misleading title.

[AdrianPhoto]

Sorry, didn't mean passing as in "The staff are giving it away".
but actually torrents.php is very important, the other files (libtorrent, config..) they can be found in any open-source tracker.

[fstemon]

I just tried http://www.bit-hdtv.com/admin.php and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!

[ca_aok]

I just tried http://www.bit-hdtv.com/admin.php and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!

That's always great for security

[fstemon]

I just tried http://www.bit-hdtv.com/admin.php and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!

That's always great for security

Yeah, it's true. Click the link and see for yourself.

[stoi]

the admin one is a rickrolled link, and no i didnt press it, just hovered over it.

[snagit]

That doesn't seem to work anymore.

From the site:

Site is back running as normal.

Guess we should close this thread?

[AdrianPhoto]

actually no, the site isn't working as normal
funny thing.. if you have some PHP skills and with some variables passing you could get so many other stuff

[Disme]

actually no, the site isn't working as normal
funny thing.. if you have some PHP skills and with some variables passing you could get so many other stuff

I love trackers that invest a lot of time and dedication to making their sites secure