TalkPHP
 
 
Account Login
Latest Articles
» The basic usage of PHPTAL, a XML/XHTML template library for PHP
» Vulnerable methods and the areas they are commonly trusted in.
» Simple way to protect a form from bot
» The Basics On: How Session Stealing Works
» How to keep your forms from double posting data
IRC Channel
IRC Speech Bubble Join the friendly bunch on IRC...
(#TalkPHP on Freenode)

...Also available via a web interface.

See this thread for information on the TalkPHP Free Hugs Initiative™. Subject to availability.
Associates
Associates
CSS Tutorials
Reply
 
LinkBack Thread Tools Search this Thread Display Modes
Old 03-27-2008, 11:04 PM   #1 (permalink)
The Contributor
 
Join Date: Dec 2007
Posts: 31
Thanks: 0
TerrorRonin is on a distinguished road
Application Error My Engine/Framework

So i'm in the process of building my own engine. Hoping some of you would be willing to take some time to look over it, and give me some suggestions, etc..

PHP Source Code Reader

Above is a link to a source code viewer, it doesn't have highlight, so it's a little tedious to read, but i'll hopefully be adding highlight to it soon :)
TerrorRonin is offline  
Reply With Quote
The Following User Says Thank You to TerrorRonin For This Useful Post:
Nor (03-28-2008)
Old 03-28-2008, 01:48 AM   #2 (permalink)
Nor
The Addict
 
Join Date: Nov 2007
Posts: 282
Thanks: 61
Nor is on a distinguished road
Default

Dude thats nice :) Looking good.

Note: robot.txt shouldn't contain XML lol
Note2: error in the # at top of page

Quote:
<table cellpadding="2" cellspacing"0">
I also think this is the wrong forum?
__________________
PHP/XHTML Freelancer:
Cleanscript.com v3 - Programming starting at just $5 act now!
Nor is offline  
Reply With Quote
Old 03-28-2008, 02:30 AM   #3 (permalink)
The Contributor
 
Join Date: Dec 2007
Posts: 31
Thanks: 0
TerrorRonin is on a distinguished road
Default

Weird, didn't know there was XML in the robots :P Thanks for the heads up.

And what do you mean by your error #2?
TerrorRonin is offline  
Reply With Quote
Old 03-28-2008, 03:08 AM   #4 (permalink)
Nor
The Addict
 
Join Date: Nov 2007
Posts: 282
Thanks: 61
Nor is on a distinguished road
Default

your html isn't valid. check your source.
__________________
PHP/XHTML Freelancer:
Cleanscript.com v3 - Programming starting at just $5 act now!
Nor is offline  
Reply With Quote
Old 03-28-2008, 06:40 AM   #5 (permalink)
Orc
The Prestige
 
Orc's Avatar
 
Join Date: Dec 2007
Posts: 1,044
Thanks: 193
Orc is on a distinguished road
Default

I got an error
PHP Code:
Warningfile(source/index.php) [function.file]: failed to open streamNo such file or directory in /home/clanproj/public_html/reader/index.php on line 91

Warning
Invalid argument supplied for foreach() in /home/clanproj/public_html/reader/index.php on line 94 
It's obviously not a valid array for the foreach(); and the file doesnt exist, why would you need it anyway? Its just to found how many lines there are on a file, you sohuld use stat.
__________________
VillageIdiot can have my babbies ;d
Orc is offline  
Reply With Quote
Old 03-28-2008, 09:00 AM   #6 (permalink)
The Contributor
 
Join Date: Dec 2007
Posts: 31
Thanks: 0
TerrorRonin is on a distinguished road
Default

Sorry it was down for a bit, it's fixed now.

@Nor:
I'm not asking for critique on the reader :P I'm asking for critique on what the reader shows.
TerrorRonin is offline  
Reply With Quote
Old 03-28-2008, 03:16 PM   #7 (permalink)
The Frequenter
Newcomer 
 
xenon's Avatar
 
Join Date: Dec 2007
Location: Bucharest, Romania
Posts: 438
Thanks: 3
xenon is on a distinguished road
Default

try removing the paths from the urls. it's not ok at all to pass paths like that through the system.
__________________
I have optimistic thoughts, even though sometimes (if not always) life's a bitch.
xenon is offline  
Reply With Quote
Old 03-30-2008, 10:14 AM   #8 (permalink)
The Contributor
 
Join Date: Dec 2007
Posts: 31
Thanks: 0
TerrorRonin is on a distinguished road
Default

What do you mean xenon?
TerrorRonin is offline  
Reply With Quote
Old 03-31-2008, 04:56 PM   #9 (permalink)
The Contributor
 
flyingbuddha's Avatar
 
Join Date: Jan 2008
Location: Birmingham, UK
Posts: 60
Thanks: 10
flyingbuddha is on a distinguished road
Default

Code:
?page=..//admin/images/header-background.jpg
Ouch! I've seen system's like this before, you can just keep adding '../' after the equal sign to get to the root of your machine, then it's free roaming on your server files.
__________________
Pro. Geek
http://www.mikeholloway.co.uk
flyingbuddha is offline  
Reply With Quote
Old 03-31-2008, 05:15 PM   #10 (permalink)
Nor
The Addict
 
Join Date: Nov 2007
Posts: 282
Thanks: 61
Nor is on a distinguished road
Default

You shouldn't allow images to be parsed, more display the image it self as a image not show the compiled code :).
__________________
PHP/XHTML Freelancer:
Cleanscript.com v3 - Programming starting at just $5 act now!
Nor is offline  
Reply With Quote
Old 03-31-2008, 05:20 PM   #11 (permalink)
Nor
The Addict
 
Join Date: Nov 2007
Posts: 282
Thanks: 61
Nor is on a distinguished road
Default

lol man thats very insecure!!! I actually found the sql data :O, lemme PM you the security risk bro. I pmed you maybe you'll see how that can be insecure ;)..
__________________
PHP/XHTML Freelancer:
Cleanscript.com v3 - Programming starting at just $5 act now!
Nor is offline  
Reply With Quote
Old 03-31-2008, 06:25 PM   #12 (permalink)
The Addict
 
Join Date: Nov 2007
Posts: 264
Thanks: 2
TlcAndres is on a distinguished road
Default

I think it would look nicer if the code viewer and file structure were next to each other - btw you have an error on line 47 of your install file.
__________________
"What everyone seems to forget is that while knowledge certainly is something - it's the implementation of knowledge that brings power" - Andres Galindo.
TlcAndres is offline  
Reply With Quote
Old 03-31-2008, 08:46 PM   #13 (permalink)
The Contributor
 
Join Date: Dec 2007
Posts: 31
Thanks: 0
TerrorRonin is on a distinguished road
Default

Thanks for the heads up on the security.

I've taken the source reader down for the time being.
TerrorRonin is offline  
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 12:14 AM.

 
     

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Inactive Reminders By Icora Web Design