The Arcive of Official vBulletin Modifications Site.

Gutspiller · #1 07-25-2003, 08:46 PM

I found a bug that's down by my quick reply in my PM section.

You should really return the bug reporting forum so people can actually report bugs in the proper places. Or did you think you guys had no bugs?

NTLDR · #2 07-25-2003, 09:09 PM

Theres never been a bug forum here as far as I know. vB.com has a bug forum though.

Gutspiller · #3 07-25-2003, 09:18 PM

I thought I had seen one before? ah well. I found a place to post the bug in here so it dont matta.

Xenon · #4 07-25-2003, 09:43 PM

never saw that kind of bug here??

/me calls erwin

and NTLDR is right, we haven't had any bug reporting forum ^^

Gutspiller · #5 07-25-2003, 10:10 PM

This may be part of the problem. It seems the bug is gone, but in the PM that I have the problem in has this code within the PM.

Code:

#!/usr/bin/perl -w
#
#***********************************************************************
# PURPOSE:  Freeware Perl script to display some server-side information
#           including environment variables and installed modules.
#
# DATE:     21 August, 2002
# VERSION:  0.2.1
#
# LICENSE:
# Copyright (C) Shashank Tripathi (shanx@shanx.com)
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
# 02111-1307, USA.
#
#=======================================================================
# I N S T A L L A T I O N:
#-----------------------------------------------------------------------
#
#  1. Copy and paste all this text into a file, e.g., perldigger.cgi
#  2. Upload this file into your CGI-BIN or an equivalent CGI directory.
#  3. CHMOD the file to 755 so it can be executed.
#  4. It is common for Perl to reside on most servers at "/usr/bin/perl"
#     but if it doesn't, please replace the first line of this program
#     with the appropriate path (e.g., "/usr/local/bin/perl").
#
#  That should be all. If you have any problems, please feel free to
#  write to me at shanx@shanx.com.
#
#***********************************************************************
use CGI qw(:standard);
use CGI::Carp qw(fatalsToBrowser);
print "Content-type: text/html\n\n";


# You can set the page title here
$PAGE_TITLE  = "PERL DIGGER ?| Free CGI script to list environment information and installed Perl modules";


#-----------------------------------------------------------------------
# NO NEED TO TOUCH ANYTHING BEYOND THIS POINT
#=======================================================================

#Location of Perl
$whereperl      = join("<BR>", split(/\s+/, qx/whereis perl/));

#Location of Sendmail
$wheresendmail  = join("<BR>", split(/\s+/, qx/whereis sendmail/));

#Location of Current Directory
$currentdirectory = `pwd`;

# List of processes
$processes = qx/ps aux/;
$processes =~ s/<br>/\n/gi;
$processes =~ s/<br>/\n\n/gi;
$processes =~ s/<(?:[^>'"]*|(['"]).*?\1)*>//gs;

#Perl Variables
$perlversion = $];

$path_tar       = join("<BR>", split(/\s+/, qx/whereis tar/));
$path_gzip      = join("<BR>", split(/\s+/, qx/whereis gzip/));
$path_apache    = join("<BR>", split(/\s+/, qx/whereis apache/));
$path_httpd     = join("<BR>", split(/\s+/, qx/whereis httpd/));
$path_php       = join("<BR>", split(/\s+/, qx/whereis php/));
$path_mysql     = join("<BR>", split(/\s+/, qx/whereis mysql/));
$path_man       = join("<BR>", split(/\s+/, qx/whereis man/));
$path_perldoc   = join("<BR>", split(/\s+/, qx/whereis perldoc/));


#Perl Os
$perlos = $^O;
$perlos_version = get_server('version');
$perlos_version =~ s/#/<BR>#/s;
$perlos_version =~ s/\(/<BR>(/s;

$perlos_cpu     = get_server_detail('cpuinfo');
$perlos_mem     = get_server_detail('meminfo');
$perlos_mem     =~ s/^.*?\n.*?\n.*?\n//s;
$perlos_dsk     = `df`;

sub get_server
{
    open PROC, "</proc/$_[0]" || &error("Cannot read proc [/proc/$_[0]]", $!);
    my $res = join("<BR>", <PROC> );
    close PROC;
    return $res ? $res : undef;
}
sub get_server_detail
{
    open PROC, "</proc/$_[0]" || &error("Cannot read proc [/proc/$_[0]]", $!);
    my $res = join("", <PROC> );
    close PROC;
    return $res ? $res : undef;
}


#Module Paths
foreach $line (@INC)
	{
	$modulepaths .= "$line<br>";
	}

#Environment Variables
$environment = qq~
<table width="69%" align="center"  cellspacing="0" cellpadding="4" bordercolor="#c5c5c5">
<tr>
<td colspan="2" bgcolor="#efefef" class="tabletitle">ENVIRONMENT VARIABLES   <a href="#top" title="Back to top"><font style="font-family: Webdings; font-size: 15px; text-decoration: none">5</font></a> </td>
</tr>
~;

$PAGE_FOOTER = "Powered by <a href='http://sniptools.com/perldigger'>Get PERL DIGGER (it's free!)</a>   |   Copyright ? <a href='http://shanx.com'>Shashank Tripathi </a>";

@allkeys = keys(%ENV);
foreach  $key (@allkeys)
{
$value = $ENV{$key};
if ($value eq "") {$value = "-";}
$environment .= qq~
<tr>
<td width="168" class="tableitems">$key</td>
<td class="tablevalue">$value</td>
</tr>
~;
}
$environment .= qq~
</table>
~;


$documentroot = $ENV{'DOCUMENT_ROOT'};
if ($documentroot ne "")
{
@lines = `du -c -k $documentroot`;
$lastline = @lines-1;
($diskusage) = split/[\t| ]/,$lines[$lastline];
}

#Server Software
$serverip = $ENV{'SERVER_ADDR'};
$servername = $ENV{'SERVER_NAME'};
$serverport = $ENV{'SERVER_PORT'};

$serversoftware = $ENV{'SERVER_SOFTWARE'};

$serveruptime =`uptime`;


#Localtime
($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
@months = ("Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec");
$date = sprintf("%02d-%s-%04d",$mday,$months[$mon],$year+1900);
$time = sprintf("%02d:%02d:%02d",$hour,$min,$sec);
$localtime = "$date, $time";

#GMTtime
($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = gmtime(time);
@months = ("Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec");
$date = sprintf("%02d-%s-%04d",$mday,$months[$mon],$year+1900);
$time = sprintf("%02d:%02d:%02d",$hour,$min,$sec);
$gmttime = "$date, $time";


print qq~
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>

    <title>$PAGE_TITLE</title>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta http-equiv="PICS-Label" content=' (PICS-1.1 "http://www.gcf.org/v2.5" labels on "2001.11.05T08:15-0500" until "1995.12.31T23:59-0000" for "http://w3.org/PICS/Overview.html" ratings (suds 0.5 density 0 color/hue 1))'>
    <meta name="author" lang="en" content="Shashank Tripathi">
    <meta name="title" content="$PAGE_TITLE">
    <meta name="copyright" content="(c) Shashank Tripathi, 1998 - 2010. All rights reserved.">
    <meta name="revisit-after" content="1 week">
    <meta name="description" content="Perl Digger is a freeware Perl script to dig for information about the server-side environment including a list of all installed Perl modules with a handy link to their documentation at CPAN">
    <meta name="keywords" content="Perl digger, Perl info, server-side free Perl / CGI script to show environment variables and all installed Perl modules, Shashank Tripathi">

<style type="text/css">
<!--
h1          {font-family: Arial, Helvetica, sans-serif; font-size: 18px; font-weight: bold; }
.tabletitle {  font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-weight: bold; height: 22px; }
.tableitems {  font-family: Arial, Helvetica, sans-serif; font-weight: bold; font-size: 11px; border-bottom: 1px #efefef solid;}
.tablevalue {  font-family: Arial, Helvetica, sans-serif; font-size: 11px; border-bottom: 1px #efefef solid;}
a           {  color: #3366ff; }
a:hover     {  text-decoration: none; color: #ff6600;}
td          {  font-family: Arial, Helvetica, sans-serif; font-size: 11px }
table       {  border: 1px #c5c5c5 solid; background-color: #fff }
-->
</style>
</head>

<body bgcolor="#FFFFFF" text="#000000" background="http://sniptools.com/av/bg.gif"><a name="top"></a><br>
<table width="69%" align="center"  cellpadding="4" cellspacing="0">
<tr><td  height="51" width="168" valign="top" background="http://sniptools.com/av/bg_grey.gif"><h1 style="margin-bottom: 3px">Perl Digger</h1>
<a href="http://sniptools.com/code/perldigger.txt">Get Perl code here</a></td>
 <td  valign="middle" background="http://sniptools.com/av/bg_grey.gif"><b style="font-size: 12px">Perl Digger is a freeware Perl script to dig for information
 about the server-side environment including a list of all installed Perl modules
 with a handy link to their documentation at CPAN. This page is based on easy CSS so you can easily change
 the look if you wish.
</b> </tr>
  <tr>
    <td colspan="2" height="60" align="center" valign="middle">
            <a href="#perlinfo">PERL INFORMATION</a>
          |   <a href="#serverinfo">SERVER INFORMATION</a>
          |   <a href="#env">ENVIRONMENT VARIABLES</a>
          |   <a href="#modules">INSTALLED PERL MODULES</a>
    </td>
  </tr>
</table>

<br>
<a name="perlinfo"></a><br>

<table width="69%" align="center"  cellpadding="4" cellspacing="0">
  <tr bgcolor="#efefef">
    <td colspan="2" class="tabletitle">

      PERL INFORMATION  <a href="#top" title="Back to top"><font style="font-family: Webdings; font-size: 15px; text-decoration: none">5</font></a>

    </td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Perl version</td>
    <td class="tablevalue">$perlversion</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Perl</td>
    <td class="tablevalue">$whereperl</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Sendmail</td>
    <td class="tablevalue">$wheresendmail</td>
  </tr>
</table>
<br>
<a name="serverinfo"></a><br>

<table width="69%" align="center"  cellspacing="0" cellpadding="4" bordercolor="#c5c5c5">
  <tr bgcolor="#efefef">
    <td colspan="2" class="tabletitle">

      SERVER INFORMATION   <a href="#top" title="Back to top"><font style="font-family: Webdings; font-size: 15px; text-decoration: none">5</font></a>

    </td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Name</td>
    <td class="tablevalue">$servername</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">IP</td>
    <td class="tablevalue">$serverip</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Listing Port</td>
    <td class="tablevalue">$serverport</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Document Root</td>
    <td class="tablevalue">$documentroot</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Disk Usage by Root</td>
    <td class="tablevalue">$diskusage KB</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Server stamp</td>
    <td class="tablevalue">$serversoftware</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Server Time (Local)</td>
    <td class="tablevalue">$localtime</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Server Time (GMT)</td>
    <td class="tablevalue">$gmttime</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Server Details </td>
    <td class="tablevalue">
        <p><strong>OPERATING SYSTEM:</strong><br>$perlos_version
        <p><strong>CPU UTILIZATION:</strong><br><textarea rows=10 cols=60>$perlos_cpu</textarea>
        <p><strong>MEMORY UTILIZATION:</strong><br><textarea rows=10 cols=60>$perlos_mem</textarea>
        <p><strong>DISK UTILIZATION:</strong><br><textarea rows=10 cols=60 wrap="OFF">TOTAL DISK USAGE:\n$diskusage KB \n\n$perlos_dsk</textarea>
    </td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Module Paths</td>
    <td class="tablevalue">$modulepaths</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Path(s) to TAR</td>
    <td class="tablevalue">$path_tar</td>
  </tr>
    <tr>
    <td class="tableitems" width="168" valign="top">Path(s) to GZIP</td>
    <td class="tablevalue">$path_gzip</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Path to APACHE/HTTPD</td>
    <td class="tablevalue">$path_apache<p>$path_httpd</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Path to PHP</td>
    <td class="tablevalue">$path_php</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Path to MYSQL</td>
    <td class="tablevalue">$path_mysql</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Path to MAN (Unix manual)</td>
    <td class="tablevalue">$path_man</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Path to PERLDOC</td>
    <td class="tablevalue">$path_perldoc</td>
  </tr>
  <tr>
    <td class="tableitems" width="168" valign="top">Processes currently on the server</td>
    <td class="tablevalue"><textarea rows=10 cols=60 wrap="OFF">$processes</textarea> </td>
  </tr>
</table>

<br>
<a name="env"></a><br>
$environment

<!-- ALL MODULES -->
<a name="modules"></a><br>
<table width="69%" align="center"  cellspacing="0" cellpadding="4" bordercolor="#c5c5c5">
  <tr bgcolor="#efefef">
    <td colspan="2" class="tabletitle">
      LIST OF ALL INSTALLED PERL MODULES   <a href="#top" title="Back to top"><font style="font-family: Webdings; font-size: 15px; text-decoration: none">5</font></a>
    </td>
  </tr>
  <tr>
    <td>

~;

&vars;
find(\&wanted,@INC);
$modcount = 0;
foreach $line(@foundmods)
{
    $match = lc($line);
    if ($found{$line}[0] >0)
    {$found{$line} = [$found{$line}[0]+1,$match]}
    else
    {$found{$line} = ["1",$match];$modcount++}
}
@foundmods = sort count keys(%found);

sub count
{
    return $found{$a}[1] cmp $found{$b}[1]

}
$third = $modcount/3;
$count=0;
$firstroundtotal = 0;

    foreach $mod(@foundmods)
    {
        chomp $mod;
        $count++;
        if ($count <= $third)
        {
            $firstroundtotal++;
            print qq~
             $firstroundtotal. <a href="http://search.cpan.org/search?module=$mod" title="Click here to see $mod on CPAN
[Opens in a new window]" target="_blank">$mod</a><br>

            ~;
        }
        else
        {
            push (@mod1,$mod)
        }
    }

        $count = 0;
        print qq~ </td><td>~;
        foreach $mod1(@mod1)
        {
            chomp $mod1;
            $count++;
            if ($count <= $third){}
            else {

                push (@mod2,$mod1)}}$count = 0;
                foreach $mod2(@mod2)
                {	chomp $mod2;	$count++;	if ($count <= $third)
                {
                $firstroundtotal++;
                print qq~
                 $firstroundtotal. <a href="http://search.cpan.org/search?module=$mod2" title="Click here to see $mod2 on CPAN
[Opens in a new window]" target="_blank">$mod2</a><br>~;	}};
sub vars {use File::Find;}
sub wanted { $count = 0; if ($File::Find::name =~ /\.pm$/) { open(MODFILE,$File::Find::name) || return;
while(<MODFILE> ){ if (/^ *package +(\S+);/){
push (@foundmods, $1); last; } } } }
print qq~
    </td>
  </tr>
</table>

<p class="tablevalue"> </p>
<p class="tablevalue" align="center"><a href="#top" title="Back to top"><font style="font-family: Webdings; font-size: 15px; text-decoration: none">5</font></a> $PAGE_FOOTER</p><br><p>
</body>
</html>
~;

Perhaps some of that code is actually getting executed or something.

Erwin · #6 07-25-2003, 11:54 PM

Someone's trying to hack vB.org by running scripts using my PM hack... mmm... at least they were trying to get some server information from it... funny how you got the PM...

Anyway, it gets parsed like a normal PM so it's secure.

Gutspiller · #7 07-26-2003, 12:02 AM

Quote:

Today at 06:54 PM Erwin said this in Post #6
Someone's trying to hack vB.org by running scripts using my PM hack... mmm... at least they were trying to get some server information from it... funny how you got the PM...

Anyway, it gets parsed like a normal PM so it's secure.

If you are talking about the code attached, that was sent to me on purpose. It wasn't a hacking thing. The file was ment for me to attach that code into a modules.cgi and upload to my server so I can see what perl modules I already have so I can begin work on that Usenet hack floating around.

Erwin · #8 07-26-2003, 06:27 AM

Why is it showing up in the PM box? Makes no sense.

Gutspiller · #9 07-26-2003, 06:06 PM

yer the admin, not me. I dunno.

Keyser S?ze · #10 08-04-2003, 06:32 AM

there is a bug, i get a new PM and i have not read it, yes my pm box says 1 new pm and 0 unread, but i havnt read it yet

also when i click the pm to read it it jumps right to the reply, tho i havnt even read it yet

most annoying

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.04954 seconds Memory Usage 2,306KB Queries Executed 12 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (1)ad_showthread_firstpost (1)ad_showthread_firstpost_sig (1)ad_showthread_firstpost_start (1)bbcode_code (1)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)navbar (3)navbar_link (120)option (1)pagenav (1)pagenav_curpage (1)pagenav_pagelink (10)post_thanks_box (10)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (10)post_thanks_postbit_info (10)postbit (1)postbit_attachment (10)postbit_onlinestatus (10)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_attachment postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!