Bit-HDTV passing its source code!

[AdrianPhoto]

Some error at Bit-HDTV forced the torrents.php file to be downloaded instead of being interpreted by PHP.
take a shot:
http://www.bit-hdtv.com/torrents.php

snippy

<?
//kell
//ob_start("ob_gzhandler");
require_once("include/bittorrent.php");
dbconn(false);
loggedinorreturn();

// Cache kezdes innen //
/*
$getpage = (int)$_GET["page"];
$notcat = (!isset($_GET["cat"]));
$halottis = (!isset($_GET["incldead"]));
$vanlap = (isset($_GET["page"]));
//$activeonly = (!isset($_GET["incldead"]));
$tagfelett = ($CURUSER);
$cachefile = "/root/browse_cache/browse-". $getpage. ".html";
$cachetime = 120; // 60 mp
if (file_exists($cachefile) && (time() - $cachetime < filemtime($cachefile)) && $tagfelett && $vanlap && $notcat && $halottis)
{
include($cachefile);
//}

[anon]

Misleading title. :dry:

[AdrianPhoto]

Sorry, didn't mean passing as in "The staff are giving it away".
but actually torrents.php is very important, the other files (libtorrent, config..) they can be found in any open-source tracker.

[fstemon]

I just tried http://www.bit-hdtv.com/admin.php (http://yougotrickrolled.com/) and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!

[ca_aok]

I just tried http://www.bit-hdtv.com/admin.php (http://yougotrickrolled.com/) and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!
That's always great for security :pinch:

[fstemon]

I just tried http://www.bit-hdtv.com/admin.php (http://yougotrickrolled.com/) and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!
That's always great for security :pinch:

Yeah, it's true. Click the link and see for yourself.

[stoi]

the admin one is a rickrolled link, and no i didnt press it, just hovered over it.

[snagit]

That doesn't seem to work anymore.

From the site:

Site is back running as normal.

Guess we should close this thread?

[AdrianPhoto]

actually no, the site isn't working as normal
funny thing.. if you have some PHP skills and with some variables passing you could get so many other stuff

[Disme]

actually no, the site isn't working as normal
funny thing.. if you have some PHP skills and with some variables passing you could get so many other stuff

I love trackers that invest a lot of time and dedication to making their sites secure :dry:

[AdrianPhoto]

I love trackers that invest a lot of time and dedication to making their sites secure
to be honest, the problem isn't with their modded source-code, the problem is probably with the servers they're hosting their tracker on

[pro267]

I love trackers that invest a lot of time and dedication to making their sites secureto be honest, the problem isn't with their modded source-code, the problem is probably with the servers they're hosting their tracker on
Not with their servers themselves, but rather the integration of PHP and the web server. Most probable causes are not loading the PHP module or moving to a new version of PHP while leaving the old style code tags.

[AdrianPhoto]

Most probable causes are not loading the PHP module or moving to a new version of PHP while leaving the old style code tags.
I guess that would load the php file as a text file, not force downloading the .php
well anyway, they're having a bad time..