View Single Post
Old 03-01-2008, 12:46 PM   #1 (permalink)
webtuto
The Addict
 
webtuto's Avatar
 
Join Date: Dec 2007
Location: morocco
Posts: 221
Thanks: 19
webtuto is on a distinguished road
Default here are some bugs in my guestbook script how to solve them ?

SQL and Full Path Disclosure:
http://mixwebs.com/guest/home.php?page
Quote
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/sites/mixwebs.com/public_html/guest/home.php on line 166

Full Path Disclosure:
http://mixwebs.com/guest/delete.php
Quote
Warning: Cannot modify header information - headers already sent by (output started at /home/sites/mixwebs.com/public_html/guest/delete.php:15) in /home/sites/mixwebs.com/public_html/guest/delete.php on line 16

SQL:
http://mixwebs.com/guest/ban.php?ip='
Quote
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''''' at line 1

Full Path Disclosure:
When you enter \ or ' for the admin login.
Quote
Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/sites/mixwebs.com/public_html/guest/login.php on line 7
__________________
Send a message via MSN to webtuto Send a message via Yahoo to webtuto Send a message via Skype™ to webtuto
webtuto is offline  
Reply With Quote