• From: Tzaritzyn, Russia
  • Registered: 2006-02-16
  • Posts: 82

Topic: Тестим старый новый мод - uploadMod!

???????. ????? ??????? ????? ???????? ??????? ??????? ?????? ???? - uploadmod!
? ??? ?????? PunUploadExtra (?????!).
?? ????? ???? ? ??? ????? ????? ????? ???????, ?? ??? ??? ???????? - ????? ? ???? ???????.
? ??? ???????? ? ???? ????? - http://punbb.awardspace.us/uploads.php
???? ?????? ???????!  wink
??? ?? ?????? ?????? ??????? ? ??? ???.
?????? ????? ???? ?????? ?? PunRes.

?? - ??????! cool



---------------------------------------------
??????? ?????? ????? ??? punBB - http://punbb.awardspace.us/

beotiger's Website

  • HitMan
  • Senior Member
  • Offline
  • From: Game
  • Registered: 2005-06-05
  • Posts: 145

Re: Тестим старый новый мод - uploadMod!

????????... ??? ????? smile
???????? ???.

ERROR - MIRROR
  • From: Tzaritzyn, Russia
  • Registered: 2006-02-16
  • Posts: 82

Re: Тестим старый новый мод - uploadMod!

??. ??????? ??????? ?? punres (http://www.punres.org/files.php?pid=188) ?? ?????????? ???????????:
1) ??????? ?????? ???????? ?????? ??? ?????? ???? ????????? ???????.
2) ??????? ???????? ????? ????? ????? ? ???????? ????? (?????? ??? ?? ????? ???? ?????? 200 ???????? - ??? ??? ???????, ??????? ???????????? big_smile). ??????????? ???????? ?????????????? ????? ??????? ? ??.

beotiger's Website

4 Reply by KCEOH

  • From: Russia
  • Registered: 2006-01-28
  • Posts: 39

Re: Тестим старый новый мод - uploadMod!

????????? ???...

???????, ? ?????? ??????? ?????? ?? ???? ??????...
??????? ?????? ?? ???? ???????? - ??? ?????? ? ???? ?????????. Sql - inj ? ????, ????????.

???? ?????? ????? ???? ? ??????????????
$sql = '1';

? ????? ?????????? SELECT ... WHERE 1 AND ...
?????...

???????? ???? - ??????? % ???? ???????? ?????? ??????? smile ?????? ???????????? ?? attachment mod, ???? ??????????? ?? ?????.

i C q  1 3 o o 7 5 5 5 5

5 Reply by beotiger (edited by beotiger 2006-02-28 15:11)

  • From: Tzaritzyn, Russia
  • Registered: 2006-02-16
  • Posts: 82

Re: Тестим старый новый мод - uploadMod!

KCEOH

? ????? ?????????? SELECT ... WHERE 1 AND ...

? ??? ????? ????????? ??? ?? ?? ???????????????

???????? ???? - ??????? % ???? ???????? ?????? ???????

???? ???????? ???????????? ??????. ???? ??? ??????? ?? 2 ?????? ?????. ??? ? ??? ????????? ?????, ?????? ????? ? ???? ?? attachment ???. ????? ??????? ??? ? ?????? ???????????, ?? ????? ?????. ?? ? ??? ???????? ??? ??? ?? ????? ?????? ?? ??? ???? (??????? ??? ???????????).
OpenSource ?????? ?? ????????.

? ??????? ????????? ????????? ????? ????? ???????, ???????? diff.
???. 78,91%. ??? ??????? ????? ????. ? ????????. (diff-?? ??? ????? ? UploadMod by Yevgen Zinchenko).

? ????? ? ???? ?????? ??, ??? ??? ?????????? ??????? ????????
? ???? ?????? ???? ???, ??????? ?????? ??? (? ???????, ??????), ???????. ? ?????? ????????? - ?? ??????? ??? ????. ?? ?????. wink

p.s.
KCEOH, ???? ??? ???? ????????? ??? ?????? sql-????????, ???? ?????????? ????. ????? ?????? ??? ?? e-mail, ???? ??????-??????? ?? ???????????????.

beotiger's Website

6 Reply by KCEOH

  • From: Russia
  • Registered: 2006-01-28
  • Posts: 39

Re: Тестим старый новый мод - uploadMod!

> ? ??? ????? ????????? ??? ?? ?? ???????????????
?? ??, ?? ????? ???, ? ?????? ?? ??????? ???? ??????? smile))

> ???? ??? ???? ????????? ??? ?????? sql-????????
' or 1=1 /*

> ????? ?????? ??? ?? e-mail, ???? ??????-??????? ?? ???????????????.
?? ????? ????, ???? ?????? ???? ??? ??????????.
????? ???????? ???? ????? ?????, ???? ????????? ????????????? ??????? ???????????? wink

?? ????????? ? ??? ?? ????, ???? ?????? ????? ???????? ??? ????????? ??????. ??? ????? ????? - ?????? ????? ? ?????.

i C q  1 3 o o 7 5 5 5 5
  • HitMan
  • Senior Member
  • Offline
  • From: Game
  • Registered: 2005-06-05
  • Posts: 145

Re: Тестим старый новый мод - uploadMod!

????? ????...

ERROR - MIRROR

8 Reply by beotiger (edited by beotiger 2006-03-01 07:14)

  • From: Tzaritzyn, Russia
  • Registered: 2006-02-16
  • Posts: 82

Re: Тестим старый новый мод - uploadMod!

?? ??, ?? ????? ???, ? ?????? ?? ??????? ???? ???????

1 - ??? ??????????? ?????????? ?????.

?????? ?????? ??? ??????? ????? ???????????:

WHERE 1 AND X
?
WHERE X
???

? ? ??????? ????? ??? 1. ??? ????? ??? ?????? ?????????? ??????? ?? ?????? ???????? ?? ?????????? AND. ??? ?????? ?????????? ????.
? ??? ???????? ????????? ????????????, ??????? ??? ??? ??????? ? ????????? ????????????.

? ?????? ? ?????? ???????? ? HitMan.
?? ??????? ???? ???????? ??? ?????? ?????? ? ??????? ?? sql-????????, ??????? ?? ??? ?????? ?????????
??????????? ????? ?????? ????????? ??? ?????????????? ????.
??? ??? ??????:
'  or 1=1 UNION SELECT NULL, NULL, NULL, NULL

beotiger's Website

9 Reply by KCEOH

  • From: Russia
  • Registered: 2006-01-28
  • Posts: 39

Re: Тестим старый новый мод - uploadMod!

> ??? ????? ??? ?????? ?????????? ??????? ?? ?????? ???????? ?? ?????????? AND. ??? ?????? ?????????? ????.
? ?????? $sql .= ?? ?????? ?????? AND smile)

> ???????? ??? ?????? ??????
???????? ???? ???????? wink ?????? ? ???? ????? ???? ??????, ???????? ?????????? ???????. ?? sql-inj ???????? ?????, ? ????? ??????? ??????? ????????? ?????? smile ??????? ???? ???? ?? ???????, ?? ????? ???.

?? ?????????? ??????????????? ???? ????? ???????? ?????? ????? ???????? wink

?? ???? ???????? ?????? - ???????? ????.

i C q  1 3 o o 7 5 5 5 5
  • From: Tzaritzyn, Russia
  • Registered: 2006-02-16
  • Posts: 82

Re: Тестим старый новый мод - uploadMod!

? ?????? $sql .= ?? ?????? ?????? AND

?? ??????? ?? ??????, ????? ? ???? ????? ?????? sql.

?? ???? ???????? ?????? - ???????? ????.

????? ???? ?????????? ?????? ???????? ?? ??? ? ?? ??????...

beotiger's Website