stop session stealing on lava scripts

[ozziemale31]

i dont know why u fools havent thought of this befor lol
add this to core

function isblocked2($str,$sender)
{
  if(ismod($sender))
  {
    return false;
  }
  $str = str_replace(" ","",$str);
  $code[0] = ".php";
  $code[1] = ".php4";
  $code[2] = ".php5";

  for($i=0;$i<count($codes);$i++)
  {
        $nosf = substr_count($str,$codes[$i]);
    if($nosf>0)
    {
      return true;
    }
  }
  return false;
} 

and some of you will be shaking your heads on how easy this simple code is lol
as all it will do is report the message being sent then ban the person for it

[kiLLeR-eyEd_14]

We have different ways to prevent it..anyway, that's good and helpful for the others.,tnx

[ozziemale31]

We have different ways to prevent it..anyway, that's good and helpful for the others.,tnx

also help against sql injection ban the users who try inserting these symbols ${}
etc

$code[3] = "$";
$code[4] = "{";
$code[4] = "}"; 

[makvanpor2000]

Great guys,

[rap-4ever]

i dont know why u fools havent thought of this befor lol
add this to core

function isblocked2($str,$sender)
{
  if(ismod($sender))
  {
    return false;
  }
  $str = str_replace(" ","",$str);
  $code[0] = ".php";
  $code[1] = ".php4";
  $code[2] = ".php5";

  for($i=0;$i<count($codes);$i++)
  {
        $nosf = substr_count($str,$codes[$i]);
    if($nosf>0)
    {
      return true;
    }
  }
  return false;
} 

and some of you will be shaking your heads on how easy this simple code is lol
as all it will do is report the message being sent then ban the person for it

hmmm...just add this in core.php???

[riderz]

yea rap just add this in core then it should work

[something else]

i dont know why u fools havent thought of this befor lol
add this to core

function isblocked2($str,$sender)
{
  if(ismod($sender))
  {
    return false;
  }
  $str = str_replace(" ","",$str);
  $code[0] = ".php";
  $code[1] = ".php4";
  $code[2] = ".php5";

  for($i=0;$i<count($codes);$i++)
  {
        $nosf = substr_count($str,$codes[$i]);
    if($nosf>0)
    {
      return true;
    }
  }
  return false;
} 

and some of you will be shaking your heads on how easy this simple code is lol
as all it will do is report the message being sent then ban the person for it

yeah cool idea that would help at least lol ....
still leaves u a little vulnerable cos of mod rewrite but every little helps

[something else]

yeah cool idea that would help at least lol ....
still leaves u a little vulnerable cos of mod rewrite but every little helps

wouldnt just:
$str = str_replace(".php","",$str);
do the same job?

[WhiteWarrior]

i dont know why u fools havent thought of this befor lol
add this to core

function isblocked2($str,$sender)
{
  if(ismod($sender))
  {
    return false;
  }
  $str = str_replace(" ","",$str);
  $code[0] = ".php";
  $code[1] = ".php4";
  $code[2] = ".php5";


  for($i=0;$i<count($codes);$i++)
  {
        $nosf = substr_count($str,$codes[$i]);
    if($nosf>0)
    {
      return true;
    }
  }
  return false;
} 

and some of you will be shaking your heads on how easy this simple code is lol
as all it will do is report the message being sent then ban the person for it

Your missing something... php3

[ozziemale31]

lol i know plus u need to block extensions like html htm wml xml etc and so forth
$str = str_replace(".php","",$str);
do the same job?
no it just replaces the extension u want the person who posts that extension to be auto banned saves u time going thru your database searchn for how yr hacker got in

[kei_ki7]

sorry for noob question for what is this? i mean what will the script do if condition is = yes?

[riderz]

it just secure ur script from session hack

[something else]

was just thinking .php3 .php4 etc is a waste when .php would pick them up

function isblocked2($str,$sender)
{
if((substr_count($str,".php")>0)&&(!ismod($sender))){
//ban
}
} 

[ozziemale31]

let me know how u guys go i havent got a LAVA edit script up anywhere atm but i think that will help a lot of u guys

[wapmaster2]

frustrated by SId hacking

ok thanks if my site will not hack again within 10 days..... lol