Log in

View Full Version : Please Read: Need Testers


Slynderdale
09-09-2002, 01:20 AM
im working on a download function that works with url's and absoulute paths and any file type.

I need people to test it to see if it works with all browsers, i tried it with the newest version internet explorer, aol and msn explorer, if your interested heres how you can help:

http://slynderdale.darktechgameing.com/authvb.php?url=[url to file]

try using it to download variouse files with different browsers that you have, if the file doesnt download or loads instead of downloading, reply with the browser and its version.

Thanks.

Erwin
09-09-2002, 01:41 AM
Watch it - your downloader allows users to download full PHP files (something you cannot do with a browser normally since PHP is parsed into HTML). I was able to download your "authvb.php" file off your server. If a user downloads your config.php, he may get information about your username and password to your server.

:eek:

Erwin
09-09-2002, 01:43 AM
Oops... that was just a false alarm. The file is empty.

And I was able to download vbulletin.org's config.php too, but the file is empty. In fact, it appears that you can download any file from anyone's server. I was going to ask you to take that file off your site, but it looks for the moment, that PHP files remain empty... as far as I can see.

Slynderdale
09-09-2002, 01:44 AM
With files like php, cgi and so on, it only saves the html part, not the actual source code.

Erwin
09-09-2002, 01:45 AM
Ahhh... I see, thanks for letting me know. :) I was freaking out because I was able to download the config.php files off any forums /admin directory.

Slynderdale
09-09-2002, 02:04 AM
Oh yea, to the testers, if the file fail to download tell me the:
browser your using
its version
the file type you were trying to download like .txt
the url to the file (optional)

what i mean by failing to download, is that you can normaly access the file from a url and it doesnt download or instead of downloading, it loads.

Dean C
09-09-2002, 06:20 PM
doesn't download / ie6

no prompt comes up or anything.... jus a blank screen...

- Mist

Slynderdale
09-09-2002, 10:47 PM
Originally posted by Mist
doesn't download / ie6

no prompt comes up or anything.... jus a blank screen...

- Mist

hmm i tried it with ie6 and it worked

Dean C
09-10-2002, 03:26 PM
nope definately doesn't work....

- Mist

Neo
09-10-2002, 04:26 PM
I dont think there is a way using PHP scripts to extract PHP code.

Slynderdale
09-10-2002, 10:26 PM
Originally posted by Neo
I dont think there is a way using PHP scripts to extract PHP code.

you can with fopen, you can get the actual file and its data with it, thats how its easy to access others forums on a shared host and so on, i disabled the absoulute path download in this download scripted for security reasons as i mentioned above

Erwin
09-11-2002, 12:37 AM
Yes, that's right. It's easier than you think.