Admin
Kurucu Admin
Download
RAR ŞİFRESİ : kocuce.com.tr
SQL KODLARI
[/vfc_hh][/CODE]
Gizli içeriği görüntüleme özelliği kayıtlı kullanıcılar için mevcuttur!
RAR ŞİFRESİ : kocuce.com.tr
Kod:
güvenliğiniz için;
/cgi-bin/printenv.pl
/phpinfo.php
bu dosyaları silin
string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri
PHP- Kodu:
function sql_injection_check(){
$badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");
foreach($_REQUEST as $value) {
foreach($badwords as $word) {
if(substr_count($value, $word)) {
exit();
}
}
}
}
sql_injection_check();
bunu da /config/db.php
en alta ekleyin
ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilirSQL KODLARI
Kod:
USE [kn_online]
GO
/****** Object: Table [dbo].[_ASD] Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_ASD](
[cc] [varchar](50) NULL
) ON [PRIMARY]
GO
SET ANSI_PADDING OFF
GO
/****** Object: Table [dbo].[_BANKALAR] Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BANKALAR](
[id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
[Banka] [varchar](250) NULL,
[Sube] [varchar](250) NULL,
[Hesap] [varchar](250) NULL,
[Isim] [varchar](50) NULL,
[IBAN] [varchar](250) NULL
) ON [PRIMARY]
GO
SET ANSI_PADDING OFF
GO
/****** Object: Table [dbo].[_BASLANGIC_ITEMLERI] Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI](
[Warrior] [varchar](255) NULL,
[Rogue] [varchar](255) NULL,
[Mage] [varchar](255) NULL,
[Priest] [varchar](255) NULL,
[durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum] DEFAULT ((0)),
[inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory] DEFAULT ((0))
) ON [PRIMARY]
GO
SET ANSI_PADDING OFF
GO
/****** Object: Table [dbo].[_BLOCK] Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BLOCK](
[id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
[titletr] [varchar](200) NULL,
[titleen] [varchar](200) NULL,
[contenttr] [text] NULL,
[contenten] [text] NULL
) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY]
GO
SET ANSI_PADDING OFF
GO
/****** Object: Table [dbo].[_CASHPAKETI] Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CASHPAKETI](
[id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
[CashPaketi] [varchar](50) NULL,
[Fiyati] [varchar](50) NULL
) ON [PRIMARY]
GO
SET ANSI_PADDING OFF
GO
/****** Object: Table [dbo].[_CODEHISTORY] Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CODEHISTORY](
[id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
[ESN] [varchar](50) NULL,
[PASS] [varchar](50) NULL,
[StrAccountID] [varchar](50) NULL
) ON [PRIMARY]
GO
SET ANSI_PADDING OFF
GO
/****** Object: Table [dbo].[_DESTEK] Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DESTEK](
[id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
[StrUserID] [varchar](80) NULL,
[StrTitle] [varchar](80) NULL,
[StrSoru] [varchar](1500) NULL,
[StrCevap] [varchar](1500) NULL,
[StrCatID] [varchar](50) NULL,
[StrDurum] [varchar](50) NULL
) ON [PRIMARY]
GO
SET ANSI_PADDING OFF
GO
/****** Object: Table [dbo].[_DOWNLOADS] Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DOWNLOADS](
[id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
[titletr] [varchar](250) NULL,
[titleen] [varchar](250) NULL,
[varchar](250) NULL,
[tarih] [...NSERT [dbo].[TB_USER] ON[/vfc_hh][/CODE]
