vb.org Archive - [RELEASE] Poll Hack v1.0.1

Page 2 of 14

Last »

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Member Archives (https://vborg.vbsupport.ru/forumdisplay.php?f=202)

- - [RELEASE] Poll Hack v1.0.1 (https://vborg.vbsupport.ru/showthread.php?t=4386)

11-03-2000 09:42 PM

Hello,

Here is the HTML in the form:

Code:

<FORM ACTION=poll.php method=post>

<INPUT TYPE=hidden name=pollid VALUE=2>

<INPUT TYPE=hidden name=pollid VALUE=2>

<INPUT TYPE=hidden name=threadid VALUE=60786>



< poll html here >



<INPUT TYPE=hidden NAME=action VALUE=pollvote>

<INPUT TYPE=hidden NAME=username VALUE=Jim Murray>

<INPUT TYPE=hidden NAME=password VALUE=xxxxxx>

<INPUT TYPE=submit NAME=submitaction VALUE=Vote!>

[Edited by VirtueTech on 11-03-2000 at 07:19 PM]

11-03-2000 09:44 PM

Jim you should delete that line with your password as I could now log on as you by passing the encrypted password on the command line.

I tried to access that thread but it must be in a forum that I don't have access to and I forget the login info for phpMyAdmin so I could tweak myself to an admin ;)

[Edited by freddie on 11-03-2000 at 06:47 PM]

11-03-2000 09:52 PM

Freddie - I made you an admin and emailed you your password to webmaster@hedgehogwheels.com

Also - Doron tried logging in and said he was able to vote on the poll. I have tried clearing my cookies...Other users have tried and gotten the same error I did.

I don't see how he could have voted and myself and my users cannot.

[Edited by VirtueTech on 11-03-2000 at 06:54 PM]

11-03-2000 09:53 PM

Well Jim I logged on as you using the trick I warned you about and this is what I see as the code for the page where it asks for your name/password

Code:

<form action="poll.php" method=post>

Username: <INPUT TYPE="TEXT" NAME="username" SIZE=7 MAXLENGTH=25>

Password: <INPUT TYPE="PASSWORD" NAME="password" SIZE=7 MAXLENGTH=13>

<input type="hidden" name="action" value="pollvote">

<input type="hidden" name="optionNumber" value="">

<input type="hidden" name="pollid" value="">

<input type="submit" value="Login!"></form>

I see fields with no values..Doron^^^I also don't see a threadid.

11-03-2000 09:57 PM

I was able to vote as myself as it didn't ask me to login.

I don't know how Doron tells if you are logged in but it should not be asking you to login when click on the vote button. Are you checking if $bbuserid != 0?

11-03-2000 10:01 PM

Hello Freddie,

GOD what trick is that? ICQ me if you don't mind...please and tell me...thanks.

Also...why does it go to the password page if I am already logged in...

If you lookk above you will see the HTML source from the showthread page where the poll resides.

11-03-2000 10:09 PM

this is wierd, why is it for you not handing over the id's with form submit, but is for me and new people.

I'd suspect it is in my coding, but there is nothing that would differenciate between users.

11-03-2000 10:14 PM

My user on his forum is not new, it has been there since day 1.

Jim edit your post where you posted the HTML and remove the line that has your password in it!

11-03-2000 10:17 PM

Jim has a space in his name whereas we don't, you could start with that and go from there.

[edit]

Yes I changed my name to "rangers fan" and now I get prompted to login so your user verification code is at fault. Why do you pass the password/username through the form instead of just checking for $bbuserid == 0 in poll.php and prompting them to login if it is 0?

btw Jim I was reading the threads in the mods forum and you can't embed viruses into .jpgs so don't fear that someone can get a virus by uploading avatars. What people believe, geez.

[Edited by freddie on 11-03-2000 at 07:23 PM]

11-03-2000 10:21 PM

freddie: came to the same conclusion, i sent him a fix, gonna see if that helps. stupid mistakeof mine

All times are GMT. The time now is 03:35 PM.

Page 2 of 14

Last »

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01348 seconds Memory Usage 1,735KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (3)pagenav_pagelink (1)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: