Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - tohave

Pages: [1]
1
Discussion & Troubleshooting / index pages in all directories are infected by: http://www.perls.cc
« on: February 09, 2007, 01:30:59 AM »
Hi,  This is what I got to night:

Code: [Select]
<head>

<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>Oxx§::::::::::::::::::::&raquo; iNvIsIbLe HaNd &laquo;:::::::::::::::::§xxO</title>
</head>

<body>
<p align="center">
<img border="0" src="http://www.perls.cc/Untitled-1.gif" width="1041" height="557"></p>
<p align="center"><font size="7" color="#CC0000"><b>
<a href="mailto:cC@pErLs.Cc"><font color="#CC0000">
<span style="text-decoration: none">cC@pErLs.Cc</span></font></a></b></font></p>
</body>
why it hapend? I googled and there are several sites thoses are infected simmilarli, that are using 4images!!

All index files (html, php) are infected, even those are not inside 4images directory!!!

any sugestions?

2
Mods & Plugins (Releases & Support) / Re: [MOD] Send postcard to more then one email address at ones
« on: August 07, 2006, 10:41:40 PM »
Hi V@NO

I tried it but I got error on eCard. There is two small buttons apear on sent eCards (send and change originally). When I click on theme several times, I can get into the modification page of that eCard !

How can I delete those images at the buttom of sent eCards?

http://cardaz.birolmali.com/postcards.php?postcard_id=427cfd9e9fbaea6c6b645b091100cd6e

(10 days active)

3
Discussion & Troubleshooting / Re: Sham bug found
« on: August 06, 2006, 01:37:24 AM »
Thanks Jan and V@NO,

It is fixed now.

Cheers

4
Discussion & Troubleshooting / Re: Sham bug found
« on: August 04, 2006, 04:57:00 PM »
Hi V@NO

1- Sorry about not giving tech info  :wink:
2- Version is 4images 1.7.2
3- postcars.php was modified and was replaced by fresh one! stiil got the problem

The link for expierd key is:

http://www.cardaz.birolmali.com/postcards.php?postcard_id=4c6b3012426a670f0a9a17b196171c81

by refreshing the page you see a random image even from protected categories

5
Discussion & Troubleshooting / Sham bug found
« on: August 03, 2006, 06:26:53 PM »
Hi there

I have just found a bug in the app which makes me embareced!
I host abig gallery which include naked images as well as funny and flowers, cars and etc.

If any one has previously received an eCard from us and trying to watch it after expiry date, they will see a random which include locked categories as well!
So even not registred users can see unwanted and not suitable images in our gallery so this makes us embareced and ashamed.

Please help us to fix it or we will have to stop our service.

Thanks for your helps

6
Mods & Plugins (Requests & Discussions) / eCard to multiple recepients
« on: April 27, 2006, 07:02:47 PM »
Hi

I saw this in some sites so they can send and eCard to several eMails. 4Images dosen't support it. Is there any possibility to add this function on it?

eCard to multiple recepients

7
Discussion & Troubleshooting / Re: Database backup problem
« on: April 09, 2006, 03:33:56 AM »
Hi V@NO,

That was it. It is done now. Thanks a lot :D
.

8
Mods & Plugins (Releases & Support) / Re: [Mod] Image Annotation (Watermark)
« on: April 05, 2006, 02:50:05 AM »
Hi

I have recently installed this MOD, it seems OK and I do not get any error message. I am not sure if it is been discussed befor or not! so my problem is that when I do batch annotation, it counts all the files, gives OK prompt but there is not any watermark on images!!!

the last message I get is:

Annotating between image ID 2131 and 2139:

Finished!



any suggestions? pls

9
Discussion & Troubleshooting / Database backup problem
« on: April 05, 2006, 02:02:56 AM »
Hi

I was trying to backup the databases but this error popedup:

Warning: gzopen(./../data/database/backup200604041959.sql.gz): failed to open stream: Permission denied in /home/baybak/public_html/cardaz/admin/backup.php on line 169

Warning: gzwrite(): supplied argument is not a valid stream resource in /home/baybak/public_html/cardaz/admin/backup.php on line 170

Warning: gzclose(): supplied argument is not a valid stream resource in /home/baybak/public_html/cardaz/admin/backup.php on line 171

Error backing up. Check your permissions (chmod 777).

=============================

lines are:

169=>    $fp = gzopen(ROOT_PATH.DATABASE_DIR."/".$file_name, "w9");
170=>    $ok = gzwrite($fp, $contents);
171=>    gzclose($fp);

and the chmod is 777 for admin/backup.php

any idea?

10
Feedback & Suggestions / Re: Pic Security
« on: March 29, 2006, 12:24:48 AM »
I got it work.

I have realised problems in e-card function (postcard.php) that is out of the coverage of your PIC security.

1- the URL is easy to be seen in source code (I have right click prevented) but View > Source is working
2- the image is being downloaded (just in e-card, not in other pages)
.

11
Feedback & Suggestions / Re: Pic Security
« on: March 28, 2006, 11:34:51 PM »
Hi again,

There was a problem in implementing the codes, SHAME I did not see it first, an extra "," . now I fixed it and the page shows properly.

 :D :oops:

12
Feedback & Suggestions / Re: Pic Security
« on: March 28, 2006, 11:15:09 PM »
Hi

Thanks VA@NO for this great job you have done so far, it was what I wanted. But I have a problem. When user wants to send e-card, this message comes up:

Parse error: parse error, unexpected ',' in /home/baybak/public_html/cardaz/postcards.php on line 149

I heve modified it as you have written, rest is OK but this one !!

If I put the original file back, it works but it shows the URL of images that I do not want to.
.

13
Discussion & Troubleshooting / Protecting Images an files from direct access
« on: March 28, 2006, 03:42:24 AM »
Hi

I have protected some categories and allowed users can have access to the images and all the rest.
The problem is that when you once enter the protected directory, you are able to see it by just having the URL, without being signed in!! so there is problem in protecting stuff from ordinary users (if they find the URL)

I was wondering if there is any thing that can solve the problem?
 
by having in mind;

1- The categories must be writable (executable) by selected users: cmd 777
2- files are writable (executable) by selected users: cmd 777
3- directory is writable (executable) by selected users: cmd 777

so, if I change the : cmd 777 to something else it does not fuction properyi. Thumbnils do not show or images are not accessable! or eben the categories are not available.

Please help me to solve this problem. Thanks

Pages: [1]