Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.php > #14650
| Path | csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.datemas.de!weretis.net!feeder1.news.weretis.net!news.solani.org!.POSTED!not-for-mail |
|---|---|
| From | "Christoph M. Becker" <cmbecker69@arcor.de> |
| Newsgroups | comp.lang.php |
| Subject | Re: php challenge |
| Date | Thu, 27 Nov 2014 19:52:30 +0100 |
| Organization | solani.org |
| Lines | 16 |
| Message-ID | <m57rt5$s2e$1@solani.org> (permalink) |
| References | <aea937c1-40e4-4b95-9857-8492730248de@googlegroups.com> |
| Mime-Version | 1.0 |
| Content-Type | text/plain; charset=windows-1252 |
| Content-Transfer-Encoding | 7bit |
| X-Trace | solani.org 1417114341 28750 eJwFwYEBwCAIA7CXrJSC5zCR/09Y4iboBuWij08z1pjB9sJxZDP5Tje/srrjxOaNipcCUvoBBbIQQQ== (27 Nov 2014 18:52:21 GMT) |
| X-Complaints-To | abuse@news.solani.org |
| NNTP-Posting-Date | Thu, 27 Nov 2014 18:52:21 +0000 (UTC) |
| User-Agent | Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 |
| X-User-ID | eJwNwokRwDAIA7CV+GzIOgSy/wjtSXAqbwbBwPsdbkcVJx1TT1b14ohnS/uaDMsaBmOUWH8KLhAT |
| In-Reply-To | <aea937c1-40e4-4b95-9857-8492730248de@googlegroups.com> |
| Cancel-Lock | sha1:YeSzNTjOE2NYABkqzFosNFWMtgI= |
| X-NNTP-Posting-Host | eJwNxEkBACAIBMBKIixHHEHoH0HnMWAlLROFCgbjwtm2/DRutEEJi81PGPIKflG7aggRTpQPEfIQuQ== |
| Xref | csiph.com comp.lang.php:14650 |
Show key headers only | View raw
Kiuhnm Mnhuik wrote: > Here's the picture of the challenge "other2" found on > http://halls-of-valhalla.org/: http://i.share.pho.to/fd1e7ff4_o.png > AFAIK, we can only control $_GET['username'] and $_GET['password']. > Since there aren't any evals or similar I don't see how we can inject > code. I suspect we have to set $loggedIn to true, but how? If register_globals[1]=On that would be easy (because $loggedIn is not necessarily initialized, and it is tested for being == true, instead of === true). Fortunately, that misfeature had been removed as of PHP 5.4. [1] <http://php.net/manual/en/security.globals.php> -- Christoph M. Becker
Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 09:12 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 13:40 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 11:31 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:27 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 15:55 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 20:35 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 19:16 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-28 09:10 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-28 12:52 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-28 16:32 -0500
Re: php challenge "Christoph M. Becker" <cmbecker69@arcor.de> - 2014-11-27 19:52 +0100
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 14:18 -0500
Re: php challenge "Christoph M. Becker" <cmbecker69@arcor.de> - 2014-11-27 21:12 +0100
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:28 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 12:00 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:30 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 15:02 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 20:36 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 19:18 -0800
csiph-web