Forum - Exccessive Ranking - Clan Rank -Link is Back Door?

6 replies [Last post]
epsiplayer
THE ONE AND ONLY
intact-epsilon's picture
Offline
Joined: Dec 2006
Posts:

if its offtopic then sorry didnt knew where to put this :

Can someone change the link from here to what should it be in the 1st place?
http://forums.excessiveplus.net/viewtopic.php?t=9044

I wanted to see the clan rank and i got into a bounch of files and directorys and if i pressed one file it said :
Try to hack another site. Your Ip has been logged ! WTF?

This is a bad thing not to have a index.php or index.html in that directory or please just disable the filelisting!!!!

im a web programmer yes, but just wanted to see the clan rank .. Confused

_____________________
rail-base-air-camper
Epsilon


mow Q [EN]
Offline
Joined: Nov 2003
Posts:
Forum - Exccessive Ranking - Clan Rank -Link is Back Door?

epsiplayer
THE ONE AND ONLY
intact-epsilon's picture
Offline
Joined: Dec 2006
Posts:
Forum - Exccessive Ranking - Clan Rank -Link is Back Door?

http://clanrank.excessiveplus.net/rank <----- works fine ?? look at the link location when you press on the text Clan Rank Site

in here http://forums.excessiveplus.net/viewtopic.php?t=9044 !!

if you dont want that thread anymore, please delete it Happy because this is a major sequrity breach.


x.foksie'loy.drt?
foksie's picture
Offline
Joined: Jun 2005
Posts:
Forum - Exccessive Ranking - Clan Rank -Link is Back Door?
epsiplayer wrote:

because this is a major sequrity breach.

it is?

i dont see how you can use that to do anything.

and second, i cant fix it till term give me back ftp access to the ranking site...

I am proud of spreading a pirated Excessive Plus version and claim to be the original author, yay!

epsiplayer
THE ONE AND ONLY
intact-epsilon's picture
Offline
Joined: Dec 2006
Posts:
Forum - Exccessive Ranking - Clan Rank -Link is Back Door?

well i just looked at some of the filenames in that directory:

input-clan-details.php
pick-match-to-fix.php
user-badpassword.php
generate-rankings.php
add-clan-details.php
add-fixed-details.php

well i dunno if someone could do something with them i didnt tryed and i dont want to , but it sound very .. unsequre.

if you dont want to do nothing then ok, its your deal but at least delete my ip from the hackers log xD

_____________

Epsilon


epsiplayer
THE ONE AND ONLY
intact-epsilon's picture
Offline
Joined: Dec 2006
Posts:
Forum - Exccessive Ranking - Clan Rank -Link is Back Door?

maybe someone could delete that thread/post? that should stop the forum users to become accidentaly "hackers" Big grin

__________
$conf['fields']['hstRSDe2'] = ''; // you just couldn't find a better name no?
Epsilon


x.foksie'loy.drt?
foksie's picture
Offline
Joined: Jun 2005
Posts:
Forum - Exccessive Ranking - Clan Rank -Link is Back Door?

link at that post is edited, it still wont stop people from "accidentally" going there.

Quote:
but at least delete my ip from the hackers log xD

so you tried Winking

I am proud of spreading a pirated Excessive Plus version and claim to be the original author, yay!