Bit-HDTV passing its source code!
Some error at Bit-HDTV forced the torrents.php file to be downloaded instead of being interpreted by PHP.
take a shot:
http://www.bit-hdtv.com/torrents.php
snippy
Spoiler:
Show
PHP Code:
<?
//kell
//ob_start("ob_gzhandler");
require_once("include/bittorrent.php");
dbconn(false);
loggedinorreturn();
// Cache kezdes innen //
/*
$getpage = (int)$_GET["page"];
$notcat = (!isset($_GET["cat"]));
$halottis = (!isset($_GET["incldead"]));
$vanlap = (isset($_GET["page"]));
//$activeonly = (!isset($_GET["incldead"]));
$tagfelett = ($CURUSER);
$cachefile = "/root/browse_cache/browse-". $getpage. ".html";
$cachetime = 120; // 60 mp
if (file_exists($cachefile) && (time() - $cachetime < filemtime($cachefile)) && $tagfelett && $vanlap && $notcat && $halottis)
{
include($cachefile);
//}
Re: Bit-HDTV passing its source code!
Re: Bit-HDTV passing its source code!
Sorry, didn't mean passing as in "The staff are giving it away".
but actually torrents.php is very important, the other files (libtorrent, config..) they can be found in any open-source tracker.
Re: Bit-HDTV passing its source code!
I just tried http://www.bit-hdtv.com/admin.php and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!
Re: Bit-HDTV passing its source code!
Quote:
Originally Posted by
fstemon
I just tried
http://www.bit-hdtv.com/admin.php and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!
That's always great for security :pinch:
Re: Bit-HDTV passing its source code!
Quote:
Originally Posted by
ca_aok
Quote:
Originally Posted by
fstemon
I just tried
http://www.bit-hdtv.com/admin.php and I saw the admin password. It was in a comment! LOL. Since I'm a nice guy I sent an email to him. If you're lucky, he hasn't changed it yet!
That's always great for security :pinch:
Yeah, it's true. Click the link and see for yourself.
Re: Bit-HDTV passing its source code!
the admin one is a rickrolled link, and no i didnt press it, just hovered over it.
Re: Bit-HDTV passing its source code!
That doesn't seem to work anymore.
From the site:
Quote:
Site is back running as normal.
Guess we should close this thread?
Re: Bit-HDTV passing its source code!
actually no, the site isn't working as normal
funny thing.. if you have some PHP skills and with some variables passing you could get so many other stuff
Re: Bit-HDTV passing its source code!
Quote:
Originally Posted by
AdrianPhoto
actually no, the site isn't working as normal
funny thing.. if you have some PHP skills and with some variables passing you could get so many other stuff
I love trackers that invest a lot of time and dedication to making their sites secure :dry:
Re: Bit-HDTV passing its source code!
Quote:
I love trackers that invest a lot of time and dedication to making their sites secure
to be honest, the problem isn't with their modded source-code, the problem is probably with the servers they're hosting their tracker on
Re: Bit-HDTV passing its source code!
Quote:
Originally Posted by
AdrianPhoto
Quote:
I love trackers that invest a lot of time and dedication to making their sites secure
to be honest, the problem isn't with their modded source-code, the problem is probably with the servers they're hosting their tracker on
Not with their servers themselves, but rather the integration of PHP and the web server. Most probable causes are not loading the PHP module or moving to a new version of PHP while leaving the old style code tags.
Re: Bit-HDTV passing its source code!
Quote:
Most probable causes are not loading the PHP module or moving to a new version of PHP while leaving the old style code tags.
I guess that would load the php file as a text file, not force downloading the .php
well anyway, they're having a bad time..
