vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)
-   -   New Posting Features - Upload to a RAPIDSHARE PREMIUM ACCOUNT from a thread / newpost (https://vborg.vbsupport.ru/showthread.php?t=190123)

technom8t 09-07-2008 03:25 PM

Quote:

Originally Posted by rapidshare.vn (Post 1616622)
you will lost your RapidShare Premium Account if member view your code (view source HTML) ^_^

how is this??

technom8t 09-07-2008 03:31 PM

Quote:

Originally Posted by juan71287 (Post 1616685)
Lol yeah i just noticed that. Not very safe. However, i've encrypted the files a bit. If anyone needs it i can post it :)


can you post what you mean please?

juan71287 09-07-2008 03:34 PM

Quote:

Originally Posted by technom8t (Post 1616722)
can you post were you just noticed this in your page source please, because its impossible as the details arent stored on there, they are in php file you upload to your server??

see above!!!!

The php is not stored but the login details are in the javascript and javascript its client sided not server sided. Just click the "upload to rapidshare" button then right click the page -> View source and you can see the login details there unless you encrypt the files like i did :)

technom8t 09-07-2008 03:35 PM

Quote:

Originally Posted by juan71287 (Post 1616729)
The php is not stored but the login details are in the javascript and javascript its client sided not server sided. Just click the "upload to rapidshare" button then right click the page -> View source and you can see the login details there unless you encrypt the files like i did :)


yes just noticed and edited above posts , can you post what you did for others please?

thanks for pointing it out, didn't realize javascript would have given them :-(

juan71287 09-07-2008 03:42 PM

Quote:

Originally Posted by technom8t (Post 1616733)
yes just noticed and edited, can you post what you did for others please?

Sure here:
save this as encrypt.js:
Code:

document.write('<title>RapidShare Upload</title>');
document.write('<frameset rows="100%,*" framespacing="0" border="0">');
document.write('<frame frameborder="0" name="topFrame" src="encrypt.php" noresize="noresize" />');
document.write('</frameset>');

Save this as encrypt.php:
Code:

<html>
<head><title>RapidShare Upload</title>
<Style>
body {
 font-family: Verdana;
 font-size: 12px;
}
table {
 font-family: Verdana;
 font-size: 12px;
}
</Style>
</head>
 
<html xmlns="http://www.w3.org/1999/xhtml">
 <head>
 <html xmlns="http://www.w3.org/1999/xhtml">
 
<body>
<script language=JavaScript>m='%3Cscript%20language%3DJavaScript%3E%3C%21--%0D%0A%0D%0Avar%20message%3D%22Function%20Disabled%21%22%3B%0D%0A%0D%0Afunction%20clickIE%28%29%20%20%7Bif%20%28document.all%29%20%7Balert%28message%29%3Breturn%20false%3B%7D%7D%0D%0Afunction%20clickNS%28e%29%20%7Bif%20%0D%0A%28document.layers%7C%7C%28document.getElementById%26%26%21document.all%29%29%20%7B%0D%0Aif%20%28e.which%3D%3D2%7C%7Ce.which%3D%3D3%29%20%7Balert%28message%29%3Breturn%20false%3B%7D%7D%7D%0D%0Aif%20%28document.layers%29%20%0D%0A%7Bdocument.captureEvents%28Event.MOUSEDOWN%29%3Bdocument.onmousedown%3DclickNS%3B%7D%0D%0Aelse%7Bdocument.onmouseup%3DclickNS%3Bdocument.oncontextmenu%3DclickIE%3B%7D%0D%0A%0D%0Adocument.oncontextmenu%3Dnew%20Function%28%22return%20false%22%29%0D%0A%0D%0A//%20--%3E%3C/script%3E';d=unescape(m);document.write(d);</script>
<script type="text/javascript">
<!--
    var multi = false;
    function switchfiles() {
        alert("Please note, the total sum of the files simultaneously uploading, cannot exceed 200 MB.");
        var text = "";
        for (i=1;i<11;i++) {
            if (i < 10)
                text += '0';
            text += i+'.';                           
            text += '<input type="file" size="65" onchange="zeigeUploadBtn();"';
            text += ' id="dateiname';
            if (i > 1)
                text += i;
            text += '" name="filecontent';
            if (i > 1)
                text += i;
            text += '"><br />';
        }
        document.getElementById('files').innerHTML = text;
        multi = true;
    }
    var ok = false;                       
    function zeigeUploadBtn()
    {       
        var dn = document.getElementById("dateiname").value;
        dn = dn.replace(/^\s+|\s+$/g, '');       
        var Woerter = dn.split("\\");
        var dateiname = Woerter[Woerter.length-1];       
        if (dn.length < 1)
        {
            ok = false;
            return false;
        }
        ok = true;
        document.getElementById("btnupload").style.visibility = "visible";           
        var elem = document.getElementById("dname");
        elem.firstChild.nodeValue = dateiname;           
        if (multi)  {
            for (i=2;i<11;i++) {               
                dn = document.getElementById("dateiname"+i).value;
                dn = dn.replace(/^\s+|\s+$/g, '');                     
                Woerter = dn.split("\\");
                dateiname = Woerter[Woerter.length-1];       
                if (dn.length > 1) {                       
                    elem.firstChild.nodeValue += ", "+dateiname;
                }
            }
        }                                                   
    }
    function zeigeProcess()
    {             
        if (!ok)
            return false; 
        document.getElementById("dateiwahl").style.display = "none";
        document.getElementById("progbar").style.display = "block";                   
        return true;
    }
//-->
</script>
 
    <form name="ul" method="post" action="http://rs170cg.rapidshare.com/cgi-bin/upload.cgi?rsuploadid=124627680596212864" enctype="multipart/form-data" onsubmit="return zeigeProcess();">
        <input type="hidden" name="login" value="login" />
        <input type="hidden" name="password" value="pass" />
        <center>
        <div id="progbar" style="display:none;">
            <div style="font-size:8pt;">You are uploading:</div>
            <p style="margin-top:0px;color:#8E908F;font-size:16pt;" id="dname">.</p>
 
            <iframe src="http://rs170l3.rapidshare.com/progress.html?uploadid=012345678901234567" name="pframe" width="100%" height="120" frameborder=0 marginwidth="0" marginheight="0" scrolling="no"></iframe>       
        </div>           
        <div id="dateiwahl">                     
            <table style="font-size:8pt;color:#002760;"><tr><td align=left>               
            <div id="files">
                <a href="javascript:switchfiles()" style="font-size:8pt;color:#002760;">Do you want to upload several files? Please click here</a>
                    | Maximum upload size 200 MB | Split archives allowed!<br />
                <input type="file" size="65" id="dateiname" name="filecontent" onchange="zeigeUploadBtn();" /><br />
                <input type="checkbox" name="norelocate" value="1"> SHOW ME THE DOWNLOAD LINK
            </div>
 
              </td></tr></table>             
              <div style="font-size:8pt;padding-bottom:20px;">Choose your preferred Carrier:
            <input name="mirror" type="radio" onclick="document.ul.action='http://rs170cg.rapidshare.com/cgi-bin/upload.cgi?rsuploadid=124627680596212864';" /> Cogent |
            <input checked name="mirror" type="radio" onclick="document.ul.action='http://rs170l3.rapidshare.com/cgi-bin/upload.cgi?rsuploadid=124627680596212864';" /> Level3 |
            <input name="mirror" type="radio" onclick="document.ul.action='http://rs170tl.rapidshare.com/cgi-bin/upload.cgi?rsuploadid=124627680596212864';" /> TeliaSonera               
            </div>       
            <input type=image id="btnupload" name="u" src="http://www.hacked-downloads.co.uk/forums/upload_file.jpg" style="visibility:hidden;" />                             
      </div>
      </center>
    </form>
</div>
 
 
</body>
</html>

save this as rapidpremium.php:
*** Encrypted code removed. Only visible source allowed on vB.org. ***

Upload & Replace, and done. People shouldn't be able to see your source code.

technom8t 09-07-2008 03:45 PM

thanks if it works ill put you as co author ;-) LOL

juan71287 09-07-2008 03:49 PM

Quote:

Originally Posted by technom8t (Post 1616747)
thanks if it works ill put you as co author ;-) LOL

No problem :)

technom8t 09-07-2008 03:55 PM

edit : important PM at you mate.....

Marco van Herwaarden 09-07-2008 04:19 PM

Please note that we do not allow encrypted files on vB.org.

technom8t 09-07-2008 04:37 PM

Hi,

No files posted here are encrypted, we are posting how to encrypt them once they are on someones server, all files are currently viewable on here as you will see

Thanks


All times are GMT. The time now is 04:55 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02903 seconds
  • Memory Usage 1,760KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete