|
|
|
| Latest News |
Latest Threads |
|
|
 |
| 57.317 Posts & 4.945 Themen in 78 Foren |
|
|
|
|
 |
Forensuche |
|
Suchbegriff |
Benutzerauswahl |
Ergebnisse anzeigen |
|
 |
GB Spamschutz
37 Beiträge in diesem Thema |
|
|
|
 WEBI
Unberechenbares Urgestein |
 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 |
29.01.2007 - 20:00 Uhr |
|
|
|
|
| | PHP-Quelltext if ($_POST['gbook_hpage']!='') $gbook_hpage=htmlentities(addslashes(str_replace("'", "",str_replace("<", "",str_replace(">", "",$_POST['gbook_hpage']))))); | |
Wäre sinnvoll deines mit diesem zu ersetzen, ist ein Sicherheits Fix.
Ich weiss nicht wie es damals bei mir aussah da ich ja nun Captcha drin habe, glaube auch nicht das ich noch n Backup habe obwohl, wenn ich mich recht erinner hatte ich noch eins, muss es mal suchen ^^
|
|
|
| |
|
|
|
|
|
|
|
|
29.01.2007 - 20:01 Uhr |
|
|
|
|
Ich kann dir auch gerne meine original dateien schicken und du änderst sie für mich ^^
|
|
|
| |
|
|
|
|
|
WEBI
Unberechenbares Urgestein |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
29.01.2007 - 20:04 Uhr |
|
|
|
|
 Hier klicken zum aufklappen 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
| | PHP-Quelltext <?php
if ($config['gbook_eod']==1) {
$error=0;
if (isset($_REQUEST['action'])) $ACTION=$_REQUEST['action'];
else $ACTION='view';
if ($ACTION==$_POST['save'] || $ACTION==$_POST['preview']) {
$floodcontrol=time() - ($config['gbook_floodctrl']*60);
$infocount=$DB->fetch_array($DB->query("SELECT COUNT(*) FROM ".$db_tab['gbook']." WHERE gbook_ip='".$thisUSER['ipaddr']."' && gbook_userid='".$USER['id']."' && gbook_time>'".$floodcontrol."' LIMIT 1"));
if (trim($_POST['content'])=='' || trim($_POST['gbook_title'])=='' || trim($_POST['gbook_autor'])=='') $error=1;
elseif (strlen(trim($_POST['content']))>$config['gbook_maxchars']) {$event=2; $charcount=strlen($_POST['content']);}
elseif ($infocount[0]>0) $error=3;
elseif (!checkusername($_POST['gbook_autor'],1)) $error=4;
elseif (($_POST['gbook_notify']==1 || $_POST['gbook_email']!='') && !emailcheck($_POST['gbook_email'],1)) $error=5;
else {
if ($ACTION==$_POST['save']) {
if(!isset($_POST[spam_check])) {header ("location: include.php?path=start.php"); exit();};
$userinfo=$DB->fetch_array($DB->query("SELECT * FROM ".$db_tab['user']." WHERE user_id='".$USER['id']."'"));
if ($userinfo['psp_aktiv']==1) {
$psp_info = $DB->fetch_array($DB->query("SELECT * FROM ".$db_tab['psp_config'].""));
if ($psp_info['psp_aktiv']==1) {
if ($psp_info['psp_gbeintrag_aktiv']==1) {
$DB->query("UPDATE ".$db_tab['user']." SET psp_punkte=psp_punkte+'".$psp_info['psp_gbeintrag']."' WHERE user_id ='".$USER['id']."'");
}
}
}
if ($DB->query("INSERT INTO ".$db_tab['gbook']." (gbook_autor, gbook_title, gbook_email, gbook_icqnr, gbook_time, gbook_text, gbook_check, gbook_hpage, gbook_ip, gbook_userid, gbook_notify) VALUES ('".$_POST['gbook_autor']."','".addslashes($_POST['gbook_title'])."','".$_POST['gbook_email']."','".$_POST['gbook_icqnr']."','".time()."','".addslashes($_POST['content'])."','".$_POST['gbook_check']."','".$_POST['gbook_hpage']."','".$thisUSER['ipaddr']."','".$USER['id']."','".$_POST['gbook_notify']."')")) {
$gbid=$DB->insert_id();
$autor=$_POST['gbook_autor'];
$mail_title=$config['site_name'].' - '.$lang['new_gbentry'].': '.$_POST['gbook_title'];
eval ("$mail_text= "".getTemplate("guestbook/signgb_mail_notify")."";");
notifymail('gbook',$mail_title,$mail_text);
$im_title=$lang['new_gbentry'].': '.$_POST['gbook_title'];
eval ("$im_text= "".getTemplate("guestbook/signgb_im_notify")."";");
notifyim('gbook',$im_title,$im_text);
header("location: include.php?event=7session_id()); exit();
}
$error=6;
}
elseif ($ACTION==$_POST['preview']) {
$counter=$DB->fetch_array($DB->query("SELECT COUNT(*) FROM ".$db_tab['gbook'].""));
$gbook_number=$counter[0]+1;
if ($_POST['gbook_check']==1 && $_POST['gbook_email']!='') {
$userinfo['user_email']=$gbook_email;
eval ("$gbook_email= "".getTemplate("member_email_iconlink")."";");
}
else $gbook_email=' ';
if ($_POST['gbook_hpage']!='') {
if (eregi("http://",$_POST['gbook_hpage'])) $info_link=$_POST['gbook_hpage'];
else $info_link="http://".$_POST['gbook_hpage'];
eval ("$gbook_hpage= "".getTemplate("member_hpage_iconlink")."";");
}
else $gbook_hpage=' ';
if ($_POST['gbook_icqnr']>0) {
$userinfo['user_icqid']=$_POST['gbook_icqnr'];
eval ("$gbook_icq= "".getTemplate("member_icq_iconlink")."";");
}
else $gbook_icq=' ';
$gbook_title=htmlentities($_POST['gbook_title']);
$gbook_text=$PARSE->parse($_POST['content'],0,$config['gbook_ubb'],$config['gbook_smilies'],$config['gbook_images'],1);
$gbook_time=formattime();
eval ("$site_body.= "".getTemplate("guestbook/signgb_preview")."";");
}
}
}
if ($error>0) eval ("$sign_message= "".getTemplate("guestbook/signgb_error".$error."")."";");
else eval ("$sign_message= "".getTemplate("guestbook/signgb_message")."";");
if ($_POST['gbook_autor']!='') $gbook_autor=$_POST['gbook_autor'];
else $gbook_autor=$USER['nick'];
if ($_POST['gbook_email']!='') $gbook_email=$_POST['gbook_email'];
else $gbook_email=$USER['email'];
if ($_POST['gbook_check']==1) $check1="checked";
elseif ($ACTION=='view') $check1="checked";
if ($config['gbook_commenteod']==1) {
if ($_POST['gbook_notify']==1) $check2="checked";
eval ("$sign_comment= "".getTemplate("guestbook/signgb_comment")."";");
}
if ($_POST['gbook_hpage']!='') $gbook_hpage=htmlentities(addslashes(str_replace("'", "",str_replace("<", "",str_replace(">", "",$_POST['gbook_hpage'])))));
elseif ($USER['hpage']!='') $gbook_hpage=$USER['hpage'];
if (intval($_POST['gbook_icqnr'])>0) $gbook_icqnr=$_POST['gbook_icqnr'];
elseif (intval($USER['icqid'])>0) $gbook_icqnr=intval($USER['icqid']);
if (trim($_POST['gbook_title'])!='') $gbook_title=htmlentities($_POST['gbook_title']);
if (trim($_POST['content'])!='') $gbook_text=htmlentities($_POST['content']);
unset($sign_format);
if ($config['gbook_ubb']==1) eval ("$sign_format= "".getTemplate("format_text")."";");
if ($config['gbook_smilies']==1) {
$smilies=new smilies();
$sign_format.=$smilies->getSmilies("1");
}
if ($sign_format) eval ("$sign_format= "".getTemplate("format_table")."";");
eval ("$site_body.= "".getTemplate("guestbook/signgb")."";");
}
else {$event=23; include ("admin/config/event.php");}
?> | | |
Das ist meine alte, aber darin enthalten sind Codezeilen, die an sich nichts für eure Seiten sind ^^
Einfach mal vergleichen.
//edit
Hier klicken zum aufklappen 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
| | PHP-Quelltext <?php
if ($config['gbook_eod']==1) {
$error=0;
if (isset($_REQUEST['action'])) $ACTION=$_REQUEST['action'];
else $ACTION='view';
if ($ACTION==$_POST['save'] || $ACTION==$_POST['preview']) {
$floodcontrol=time() - ($config['gbook_floodctrl']*60);
$infocount=$DB->fetch_array($DB->query("SELECT COUNT(*) FROM ".$db_tab['gbook']." WHERE gbook_ip='".$thisUSER['ipaddr']."' && gbook_userid='".$USER['id']."' && gbook_time>'".$floodcontrol."' LIMIT 1"));
if (trim($_POST['content'])=='' || trim($_POST['gbook_title'])=='' || trim($_POST['gbook_autor'])=='') $error=1;
elseif (strlen(trim($_POST['content']))>$config['gbook_maxchars']) {$event=2; $charcount=strlen($_POST['content']);}
elseif ($infocount[0]>0) $error=3;
elseif (!checkusername($_POST['gbook_autor'],1)) $error=4;
elseif (($_POST['gbook_notify']==1 || $_POST['gbook_email']!='') && !emailcheck($_POST['gbook_email'],1)) $error=5;
else {
if ($ACTION==$_POST['save']) {
if(!isset($_POST[spam_check])) {header ("location: include.php?path=start.php"); exit();};
if ($DB->query("INSERT INTO ".$db_tab['gbook']." (gbook_autor, gbook_title, gbook_email, gbook_icqnr, gbook_time, gbook_text, gbook_check, gbook_hpage, gbook_ip, gbook_userid, gbook_notify) VALUES ('".$_POST['gbook_autor']."','".addslashes($_POST['gbook_title'])."','".$_POST['gbook_email']."','".$_POST['gbook_icqnr']."','".time()."','".addslashes($_POST['content'])."','".$_POST['gbook_check']."','".$_POST['gbook_hpage']."','".$thisUSER['ipaddr']."','".$USER['id']."','".$_POST['gbook_notify']."')")) {
$gbid=$DB->insert_id();
$autor=$_POST['gbook_autor'];
$mail_title=$config['site_name'].' - '.$lang['new_gbentry'].': '.$_POST['gbook_title'];
eval ("\$mail_text= \"".getTemplate("guestbook/signgb_mail_notify")."\";");
notifymail('gbook',$mail_title,$mail_text);
$im_title=$lang['new_gbentry'].': '.$_POST['gbook_title'];
eval ("\$im_text= \"".getTemplate("guestbook/signgb_im_notify")."\";");
notifyim('gbook',$im_title,$im_text);
header("location: include.php?event=7session_id()); exit();
}
$error=6;
}
elseif ($ACTION==$_POST['preview']) {
$counter=$DB->fetch_array($DB->query("SELECT COUNT(*) FROM ".$db_tab['gbook'].""));
$gbook_number=$counter[0]+1;
if ($_POST['gbook_check']==1 && $_POST['gbook_email']!='') {
$userinfo['user_email']=$gbook_email;
eval ("\$gbook_email= \"".getTemplate("member_email_iconlink")."\";");
}
else $gbook_email=' ';
if ($_POST['gbook_hpage']!='') {
if (eregi("http://",$_POST['gbook_hpage'])) $info_link=$_POST['gbook_hpage'];
else $info_link="http://".$_POST['gbook_hpage'];
eval ("\$gbook_hpage= \"".getTemplate("member_hpage_iconlink")."\";");
}
else $gbook_hpage=' ';
if ($_POST['gbook_icqnr']>0) {
$userinfo['user_icqid']=$_POST['gbook_icqnr'];
eval ("\$gbook_icq= \"".getTemplate("member_icq_iconlink")."\";");
}
else $gbook_icq=' ';
$gbook_title=htmlentities($_POST['gbook_title']);
$gbook_text=$PARSE->parse($_POST['content'],0,$config['gbook_ubb'],$config['gbook_smilies'],$config['gbook_images'],1);
$gbook_time=formattime();
eval ("\$site_body.= \"".getTemplate("guestbook/signgb_preview")."\";");
}
}
}
if ($error>0) eval ("\$sign_message= \"".getTemplate("guestbook/signgb_error".$error."")."\";");
else eval ("\$sign_message= \"".getTemplate("guestbook/signgb_message")."\";");
if ($_POST['gbook_autor']!='') $gbook_autor=$_POST['gbook_autor'];
else $gbook_autor=$USER['nick'];
if ($_POST['gbook_email']!='') $gbook_email=$_POST['gbook_email'];
else $gbook_email=$USER['email'];
if ($_POST['gbook_check']==1) $check1="checked";
elseif ($ACTION=='view') $check1="checked";
if ($config['gbook_commenteod']==1) {
if ($_POST['gbook_notify']==1) $check2="checked";
eval ("\$sign_comment= \"".getTemplate("guestbook/signgb_comment")."\";");
}
if ($_POST['gbook_hpage']!='') $gbook_hpage=htmlentities(addslashes(str_replace("'", "",str_replace("<", "",str_replace(">", "",$_POST['gbook_hpage'])))));
elseif ($USER['hpage']!='') $gbook_hpage=$USER['hpage'];
if (intval($_POST['gbook_icqnr'])>0) $gbook_icqnr=$_POST['gbook_icqnr'];
elseif (intval($USER['icqid'])>0) $gbook_icqnr=intval($USER['icqid']);
if (trim($_POST['gbook_title'])!='') $gbook_title=htmlentities($_POST['gbook_title']);
if (trim($_POST['content'])!='') $gbook_text=htmlentities($_POST['content']);
unset($sign_format);
if ($config['gbook_ubb']==1) eval ("\$sign_format= \"".getTemplate("format_text")."\";");
if ($config['gbook_smilies']==1) {
$smilies=new smilies();
$sign_format.=$smilies->getSmilies("1");
}
if ($sign_format) eval ("\$sign_format= \"".getTemplate("format_table")."\";");
eval ("\$site_body.= \"".getTemplate("guestbook/signgb")."\";");
}
else {$event=23; include ("admin/config/event.php");}
?> | | |
Ohne den angesprochenen Code ^^
|
|
|
| |
|
|
|
|
|
|
|
|
30.01.2007 - 18:15 Uhr |
|
|
|
|
AHA. Deshalb die Fehlermeldungen.
Oder könnt es sein das es daran liegt das ich diesen hack drauf haben wo man für die aktivierung der gb einträge als admin ein hacken setzen muss damit diese aktiviert werden ???
Mit der Captchalösung hab ich auch Probleme. Wird bei mir auch nicht angezeigt.
|
|
|
| |
|
|
|
|
|
|
|
|
31.01.2007 - 16:36 Uhr |
|
|
|
|
So für alle die noch am grübeln sind.
Hier die lösung dank Apenotis von PSD Resources
signgb.htm
signgb.php
Hier klicken zum aufklappen 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
| | Quellcode <?php
if ($config['gbook_eod']==1) {
$error=0;
if (isset($_REQUEST['action'])) $ACTION=$_REQUEST['action'];
else $ACTION='view';
if ($ACTION==$_POST['save'] || $ACTION==$_POST['preview']) {
$floodcontrol=time() - ($config['gbook_floodctrl']*60);
$infocount=$DB->fetch_array($DB->query("SELECT COUNT(*) FROM ".$db_tab['gbook']." WHERE gbook_ip='".$thisUSER['ipaddr']."' && gbook_userid='".$USER['id']."' && gbook_time>'".$floodcontrol."' LIMIT 1"));
if (trim($_POST['content'])=='' || trim($_POST['gbook_title'])=='' || trim($_POST['gbook_autor'])=='') $error=1;
elseif (strlen(trim($_POST['content']))>$config['gbook_maxchars']) {$event=2; $charcount=strlen($_POST['content']);}
elseif ($infocount[0]>0) $error=3;
elseif (!checkusername($_POST['gbook_autor'],1)) $error=4;
elseif (($_POST['gbook_notify']==1 || $_POST['gbook_email']!='') && !emailcheck($_POST['gbook_email'],1)) $error=5;
else {
if ($ACTION==$_POST['save']) {
if(!isset($_POST[spam_check])) {header ("location: include.php?path=start.php"); exit();};
if ($DB->query("INSERT INTO ".$db_tab['gbook']." (gbook_autor, gbook_title, gbook_email, gbook_icqnr, gbook_time, gbook_text, gbook_check, gbook_hpage, gbook_ip, gbook_userid, gbook_notify) VALUES ('".$_POST['gbook_autor']."','".addslashes($_POST['gbook_title'])."','".$_POST['gbook_email']."','".$_POST['gbook_icqnr']."','".time()."','".addslashes($_POST['content'])."','".$_POST['gbook_check']."','".$_POST['gbook_hpage']."','".$thisUSER['ipaddr']."','".$USER['id']."','".$_POST['gbook_notify']."')")) {
$gbid=$DB->insert_id();
$autor=$_POST['gbook_autor'];
$mail_title=$config['site_name'].' - '.$lang['new_gbentry'].': '.$_POST['gbook_title'];
eval ("$mail_text= "".getTemplate("guestbook/signgb_mail_notify")."";");
notifymail('gbook',$mail_title,$mail_text);
$im_title=$lang['new_gbentry'].': '.$_POST['gbook_title'];
eval ("$im_text= "".getTemplate("guestbook/signgb_im_notify")."";");
notifyim('gbook',$im_title,$im_text);
header("location: include.php?event=7session_id()); exit();
}
$error=6;
}
elseif ($ACTION==$_POST['preview']) {
$counter=$DB->fetch_array($DB->query("SELECT COUNT(*) FROM ".$db_tab['gbook'].""));
$gbook_number=$counter[0]+1;
if ($_POST['gbook_check']==1 && $_POST['gbook_email']!='') {
$userinfo['user_email']=$gbook_email;
eval ("$gbook_email= "".getTemplate("member_email_iconlink")."";");
}
else $gbook_email=' ';
if ($_POST['gbook_hpage']!='') {
if (eregi("http://",$_POST['gbook_hpage'])) $info_link=$_POST['gbook_hpage'];
else $info_link="http://".$_POST['gbook_hpage'];
eval ("$gbook_hpage= "".getTemplate("member_hpage_iconlink")."";");
}
else $gbook_hpage=' ';
if ($_POST['gbook_icqnr']>0) {
$userinfo['user_icqid']=$_POST['gbook_icqnr'];
eval ("$gbook_icq= "".getTemplate("member_icq_iconlink")."";");
}
else $gbook_icq=' ';
$gbook_title=htmlentities($_POST['gbook_title']);
$gbook_text=$PARSE->parse($_POST['content'],0,$config['gbook_ubb'],$config['gbook_smilies'],$config['gbook_images'],1);
$gbook_time=formattime();
eval ("$site_body.= "".getTemplate("guestbook/signgb_preview")."";");
}
}
}
if ($error>0) eval ("$sign_message= "".getTemplate("guestbook/signgb_error".$error."")."";");
else eval ("$sign_message= "".getTemplate("guestbook/signgb_message")."";");
if ($_POST['gbook_autor']!='') $gbook_autor=$_POST['gbook_autor'];
else $gbook_autor=$USER['nick'];
if ($_POST['gbook_email']!='') $gbook_email=$_POST['gbook_email'];
else $gbook_email=$USER['email'];
if ($_POST['gbook_check']==1) $check1="checked";
elseif ($ACTION=='view') $check1="checked";
if ($config['gbook_commenteod']==1) {
if ($_POST['gbook_notify']==1) $check2="checked";
eval ("$sign_comment= "".getTemplate("guestbook/signgb_comment")."";");
}
#if ($_POST['gbook_hpage']!='') $gbook_hpage=htmlentities($_POST['gbook_hpage']);
if ($_POST['gbook_hpage']!='') $gbook_hpage=htmlentities(addslashes(str_replace("'", "",str_replace("<", "",str_replace(">", "",$_POST['gbook_hpage'])))));
elseif ($USER['hpage']!='') $gbook_hpage=$USER['hpage'];
if (intval($_POST['gbook_icqnr'])>0) $gbook_icqnr=$_POST['gbook_icqnr'];
elseif (intval($USER['icqid'])>0) $gbook_icqnr=intval($USER['icqid']);
if (trim($_POST['gbook_title'])!='') $gbook_title=htmlentities($_POST['gbook_title']);
if (trim($_POST['content'])!='') $gbook_text=htmlentities($_POST['content']);
unset($sign_format);
if ($config['gbook_ubb']==1) eval ("$sign_format= "".getTemplate("format_text")."";");
if ($config['gbook_smilies']==1) {
$smilies=new smilies();
$sign_format.=$smilies->getSmilies("1");
}
if ($sign_format) eval ("$sign_format= "".getTemplate("format_table")."";");
eval ("$site_body.= "".getTemplate("guestbook/signgb")."";");
}
else {$event=23; include ("admin/config/event.php");}
?> | | |
Danke an alle anderen für die mühe 
|
|
| Dieser Beitrag wurde bereits 3 mal editiert, zuletzt von Cyrus - 31.01.2007 - 16:37 Uhr |
|
|
|
| |
|
|
|
|
|
|
|
|
 |
Ähnliche Themen |
| |
Es wurden keine ähnlichen Themen gefunden.
|
|
|
|
|
|
|
|
|
|
GB Spamschutz
