Kick-out script...

**bluewalrus** · 09-14-2010, 02:40 AM

You have to post the php code you are using. There is no way for anyone to obtain it without access to your server unless you post it.

**[Nicolas]** · 09-14-2010, 03:45 PM

CPanel:

PHP Code:


<?php

    //If not sure use the form to get here and copy what is displayed above the fail in quotes (if the welcome is displayed 



you id it correctly.

    echo "Copy the value in these Quotes '" . $_SERVER['HTTP_REFERER'] . "'<br />";

"; if ($_SERVER['HTTP_REFERER'] == "http://kapleenmusic.webfreehosting.net/thisisatestyouknow.php" || 



$_SERVER['HTTP_REFERER'] == "http://kapleenmusic.webfreehosting.net/thisisatestyouknow.php") { echo "Welcome

"; if ($_GET['secured'] == 24) { ?><html>



<head>

<meta http-equiv="Content-Type"

content="text/html; charset=iso-8859-1">

<title>Welcome To Your CPanel Sarah!</title>

</head>



<body>

<p align="center"><font size="7"><strong>Welcome To Your CPanel </strong><em><strong><u>Sarah!</u></strong></em></font></p>



<p align="center">|<font size="4"><strong> Request a playlist | </strong></font><a

href="editor.htm"><font size="4"><strong>Draw!</strong></font></a><font

size="4"><strong> | </strong></font><a href="music.htm"><font

size="4"><strong>Music</strong></font></a><font size="4"><strong>

| Contact Us | </strong></font><a

href="http://www.kapleenmusic.webfreehosting.net"><font size="4"><strong>Logout</strong></font></a><font

size="4"><strong> |</strong></font></p>



<p align="center"><font size="2"><strong>Your sash:</strong></font></p>



<hr>



<p align="center"><font size="1"><strong>Winning:</strong></font></p>



<table border="0" width="982">

    <tr>

        <td align="center"><img src="star.gif" width="57"

        height="56"></td>

        <td align="center"><img src="star.gif" width="57"

        height="56"></td>

        <td align="center"><img src="star.gif" width="57"

        height="56"></td>

        <td align="center"><img src="star.gif" width="57"

        height="56"></td>

        <td align="center"><img src="star.gif" width="57"

        height="56"></td>

        <td align="center"><img src="star.gif" width="57"

        height="56"></td>

        <td align="center">&nbsp;</td>

        <td align="center">&nbsp;</td>

        <td align="center">&nbsp;</td>

        <td>&nbsp;</td>

    </tr>

</table>

</body>

</html><?php

; } else { echo "Unverified"; } } else { echo "Fail"; } ?>

Form:

PHP Code:


<?php 

if ( isset($_POST['username']) && isset($_POST['password'])) { 

if ($_POST['username']=="foo" && $_POST['password']=="password") {  

    "header("Location: http://kapleenmusic.webfreehosting.net/thisisatestyouknow.php?secured=24");

}

?> 

<html> 

<head> 

<meta http-equiv="Content-Type" 

content="text/html; charset=iso-8859-1"> 

<meta name="GENERATOR" content="Microsoft FrontPage Express 2.0"> 

<title>Test-Login.html</title> 

</head> 

<body> 

<form name="login" method="post" action="<?php echo $_SERVER['PHP_SELF'];?>"> 

     <div align="center"> 

          <center> 

               <table width="225" cellpadding="3" border="1"> 

                    <tbody> 

                         <tr> 

                              <td colspan="2"><font size="5"><b>Members-Only Area!</b></font></td> 

                         </tr> 

                         <tr> 

                              <td>Username:</td> 

                              <td><input type="text" name="username" size="20"></td> 

                         </tr> 

                         <tr> 

                              <td>Password:</td> 

                              <td><input type="text" name="password" size="20"></td> 

                         </tr> 

                         <tr> 

                              <td align="center" colspan="2"><input type="submit" value="Login!"></td> 

                         </tr> 

                    </tbody> 

               </table> 

          </center> 

     </div> 

</form> 

<p align="center"><font face="arial, helvetica" size="1">Or </font><a href="http://kapleenmusic.webfreehosting.net"><font  



face="arial, helvetica" size="1">Register</font></a></p> 

</body> 

</html>

**bluewalrus** · 09-14-2010, 03:56 PM

Remove the " from the header

"header(.........

should be

PHP Code:


header(.........

(everything after the '(' is correct so keep that.

Cpanel code (your refer page is wrong here. Copy the page that is displayed when you get here from the form):

PHP Code:


<?php

echo "Copy the value in these Quotes '" . $_SERVER['HTTP_REFERER'] . "'<br />";

if ($_SERVER['HTTP_REFERER'] == "http://kapleenmusic.webfreehosting.net/thisisatestyouknow.php" || $_SERVER['HTTP_REFERER'] =="http://www.kapleenmusic.webfreehosting.net/thisisatestyouknow.php") { 

    if ($_GET['secured'] == 24) { 

    ?>

<html>

<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

<title>Welcome To Your CPanel Sarah!</title>

</head>

<body>

<p align="center"><font size="7"><strong>Welcome To Your CPanel </strong><em><strong><u>Sarah!</u></strong></em></font></p>

<p align="center">|<font size="4"><strong> Request a playlist | </strong></font><a

href="editor.htm"><font size="4"><strong>Draw!</strong></font></a><font

size="4"><strong> | </strong></font><a href="music.htm"><font

size="4"><strong>Music</strong></font></a><font size="4"><strong> | Contact Us | </strong></font><a

href="http://www.kapleenmusic.webfreehosting.net"><font size="4"><strong>Logout</strong></font></a><font

size="4"><strong> |</strong></font></p>

<p align="center"><font size="2"><strong>Your sash:</strong></font></p>

<hr>

<p align="center"><font size="1"><strong>Winning:</strong></font></p>

<table border="0" width="982">

     <tr>

          <td align="center"><img src="star.gif" width="57"

        height="56"></td>

          <td align="center"><img src="star.gif" width="57"

        height="56"></td>

          <td align="center"><img src="star.gif" width="57"

        height="56"></td>

          <td align="center"><img src="star.gif" width="57"

        height="56"></td>

          <td align="center"><img src="star.gif" width="57"

        height="56"></td>

          <td align="center"><img src="star.gif" width="57"

        height="56"></td>

          <td align="center">&nbsp;</td>

          <td align="center">&nbsp;</td>

          <td align="center">&nbsp;</td>

          <td>&nbsp;</td>

     </tr>

</table>

</body>

</html>

    <?php

    } else { 

        echo "Unverified"; } 

    } else { 

    echo "Fail"; 

}

?>

**[Nicolas]** · 09-14-2010, 04:36 PM

Still doesn't work, I did what you said, err, or put.

**bluewalrus** · 09-14-2010, 05:07 PM

I'd have to see the code on the server email me thebluewalrus@gmail.com if you have ftp access to it.

**[Nicolas]** · 09-14-2010, 05:08 PM

K I will tonight. Thanks.

-[Nic]-

**[Nicolas]** · 09-16-2010, 04:08 PM

Originally Posted by lenco12

if you can't use php (or some similar server-side language), then your only real alternative is .htaccess

otherwise, I think you're out of luck. javascript can't do it securely.

It's working, and out of curiosity, do you know htaccess?

**traq** · 09-16-2010, 08:32 PM

Originally Posted by [Nicolas]

Originally Posted by lenco12

if you can't use php (or some similar server-side language), then your only real alternative is .htaccess

otherwise, I think you're out of luck. javascript can't do it securely.

It's working, and out of curiosity, do you know htaccess?

Actually, I wrote that - I don't know who lenco12 is.

couldn't just say, off the top of my head, but I know enough to figure it out.

PHP is typically better (for user experience), though, .htaccess is just an ugly popup box that asks for a password. It's very secure, though.

Your attempt earlier (around page 2, I think) was a good start. we can look at it in more detail if you're interested.

**bluewalrus** · 09-16-2010, 08:36 PM

The lenco was spamish in nature it brought up the same points already made and didn't offer anything new except a link to a movie site.

**[Nicolas]** · 09-17-2010, 03:45 AM

Originally Posted by traq

Actually, I wrote that - I don't know who lenco12 is.

couldn't just say, off the top of my head, but I know enough to figure it out.

PHP is typically better (for user experience), though, .htaccess is just an ugly popup box that asks for a password. It's very secure, though.

Your attempt earlier (around page 2, I think) was a good start. we can look at it in more detail if you're interested.

That wasn't expected :P (YOU ARE LINCO12?!?! Why didn't you tell us?)

I would like to learn HTAccess, it would be very useful, that and I'm trying PHP.
Thanks

Thread: Kick-out script...

Thread Tools

Search Thread

Bookmarks

Bookmarks

Posting Permissions