Silk Road was using PHP also. I tried some SQL injections in its earlier days (mid-2011), and got back full error reports including the mySQL commands (I never successfully exploited it because I wasn't able to get a closing parenthesis ")" past the sanitizer). They changed the server config shortly afterwards, and stopped printing the debug messages.
Just the implication that a big chunk of the site is in index.php kind of tipped me off that it might be ugly. A little bit of modularization might have helped contain the damage from the screwed up server settings, if nothing else.
that is some pretty hideous code, but which part of it potentially reveals the identity of backopy? or was it a part in the full source that was apparently given away by the VPS provider?
Comments
http://iobm.net/forum/dos/index.php/topic,17.msg113.html#msg...
This is evidently some of the code that was leaked. It's some pretty ugly PHP.
Silk Road was using PHP also. I tried some SQL injections in its earlier days (mid-2011), and got back full error reports including the mySQL commands (I never successfully exploited it because I wasn't able to get a closing parenthesis ")" past the sanitizer). They changed the server config shortly afterwards, and stopped printing the debug messages.
Just the implication that a big chunk of the site is in index.php kind of tipped me off that it might be ugly. A little bit of modularization might have helped contain the damage from the screwed up server settings, if nothing else.
that is some pretty hideous code, but which part of it potentially reveals the identity of backopy? or was it a part in the full source that was apparently given away by the VPS provider?
Well, the way the SQL code in that file is ripe for SQL injection, it's possible that the database has been compromised for a while...
mvc anyone???