What I HAve Learned ( Tricks For Newbies )

[BioBeo]

Hi I am Posting this coz some one here told me that i have shared nothing so here I Go..

Search The Read Highlighted Texts in Google


Personal localhost Server : Xampp (Best localhost server for windows with pearl support)

Php Editor : Winsyntax (Great Php Editor)

File Renamer : Renamer (Renames Files with extension)

Text Replacer : BatchTextReplacer ( By text replacers you can easily change any DB of a script within a minute.. Also You can Use MS Word just by Ctrl+F)


UA Changer : User Agent Swicher (FireFox Addon. By This You Can Easily Change Your User Agent And Access Any Site... Like I have Entered the 2wap.net as like as mobile from my Pc...But to access in WML page in FireFox also Use WML Plugin for it...)

Emulator : Wap-Proof 2008 ( A Smart Emulator which allow u to test your site from pc that hows it will look like from mobile. Bt always look on Messages Bar beside . Is there any red highlighted errors... then fix them as soon as u can)

I have added the Wap-Proof 2008 Emulator with Crack.. Its Really hard to Find it out.. But Now You Dont Need to Buy it..

HD Protector : DeepFreeze and COMONDO Time Machine (With Both this software you can easily restore your pc and also be free from viruses without any Antivirus.. As DeepFreeze is Good coz its Paid but CTM also good as its free)

Open All File : Universal File Viewer (Its the Software supports maximum file formats)




Now Come to Lavalair


Protection code in .config.php

DiD you noticed in the place of localhost in config.php that you can also give your pc name !

Like biobeo in the place of localhost so http://localhost here http://biobeo


Protection Code : (After Database Settings)

if( !get_magic_quotes_gpc() )

{

    if( is_array($_GET) )

    {

        while( list($k, $v) = each($_GET) )

        {

            if( is_array($_GET[$k]) )

            {

                while( list($k2, $v2) = each($_GET[$k]) )

                {

                    $_GET[$k][$k2] = addslashes($v2);

                }

                @reset($_GET[$k]);

            }

            else

            {

                $_GET[$k] = addslashes($v);

            }

        }

        @reset($_GET);

    }



    if( is_array($_POST) )

    {

        while( list($k, $v) = each($_POST) )

        {

            if( is_array($_POST[$k]) )

            {

                while( list($k2, $v2) = each($_POST[$k]) )

                {

                    $_POST[$k][$k2] = addslashes($v2);

                }

                @reset($_POST[$k]);

            }

            else

            {

                $_POST[$k] = addslashes($v);

            }

        }

        @reset($_POST);

    }

}

Also You Can Use this Codes too.. in config.php

mysql_connect("$dbhost","$dbuser","$dbpass") or die ("<h3><center><br/><img src=\"images/exit.gif\" alt=\"x\"/><br/>Database Updating<br/>Please Try within 20 Minutes<br/><br/>BioBeo Team</center></h3>");

mysql_select_db("$dbname") or die(mysql_error());

Protection Codes u need to add on .core.php bt paste these after connectdb fuction

////////////////////////////////////////////// SQL INJECTION PROTECTION

function clean($string)
{
    $string = htmlentities($string);
    $string = strip_tags($string);
    $string = mysql_real_escape_string($string);
    $string = str_replace("char", "x", $string);
    return $string;
}

///////////////////////////////////////////// SQL InJection Protection

function get_var($var)
{
$myvar=$_REQUEST["$var"];
if(is_array($myvar))$var=$myvar[0];
else $var=htmlspecialchars(trim($_REQUEST["$var"]),ENT_QUOTES);
return $var;
}

Also Use this in .htaccess

php_flag register_globals on

addtype audio/x-mpegurl m3u
addtype audio/mpegurl m3u
addtype text/vnd.wap.wml wml
addtype application/vnd.wap.wmlc wmlc
addtype text/vnd.wap.wmlscript wmls
addtype application/vnd.wap.wmlscriptc wmlsc
addtype image/vnd.wap.wbmp wbmp
addType application/java-archive jar
addType application/x-java-archive jar
addType text/vnd.sun.j2me.app-descriptor;charset=UTF-8 jad
addType application/vnd.symbian.install sis
addType audio/3gpp 3gp
addType video/3gpp 3gp
addType audio/x-wav wav
addType audio/amr amr
addType audio/amr-wb awb
addType audio/mpeg mp3
addType audio/x-midi mid
addType audio/midi mid
addType audio/midi midi
addType application/x-smaf mmf
addType application/vnd.smaf mmf
addType application/vnd.mophun.application mpn
addType application/vnd.mophun.application mpc
addType application/vnd.eri.thm thm
addType application/vnd.nok-s40theme nth

<Files 403.shtml>
order allow,deny
allow from all
</Files>

create and put this in php.ini

register_globals = On

[Zend]
zend_optimizer.optimization_level=15
zend_extension_manager.optimizer=/usr/local/Zend/lib/Optimizer-2.5.10
zend_extension_manager.optimizer_ts=/usr/local/Zend/lib/Optimizer_TS-2.5.10
zend_optimizer.version=2.5.10a
zend_extension = /usr/local/lib/ioncube_loader_lin_4.4.so

zend_extension=/usr/local/Zend/lib/ZendExtensionManager.so
zend_extension_ts=/usr/local/Zend/lib/ZendExtensionManager_TS.so

Cannot Moderate a Owner by an admin or mod account (INVENTED BY ME)



Paste this after the function if is_looged=false in ( mcppl.php mprocpl.php admincp.php admproc.php | also u can add this to ownercp.php if you have )

//// Author BioBeo


$who = $_GET["who"];

if($who==1)   <----- here change the UID of owner
    {
    

       mysql_query("DELETE FROM biobeo_ses WHERE id='".$sid."'");

      $who2 = mysql_real_escape_string($_GET["who"]);
  $user = getnick_uid($who2);
      mysql_query("INSERT INTO biobeo_mlog SET action='Edit Owner', details='<b>".getnick_uid(getuid_sid($sid))."</b>$user Tried to COntrol BioBeo ', actdt='".time()."'");

        echo "<card id=\"index\" title=\"BioChat\">";
      echo "<p align=\"center\">";
      echo "<img src=\"images/exit.gif\" alt=\"X\"/><br/>";
      echo "Your session droped !<br/>";
      echo "If you try to control <b>BioBeo</b> again <br/>You will be banned automatically<br/><br/>";
      echo "<a href=\"index.php?action=main&amp;sid=$sid\">";
echo "Home</a>";
      echo "</p>";
      echo "</card>";
    }

Here is some of the things there are many more and more i have in my brain.. will share them in future...

Coz I am Leaving this site for Unexpected behavior from Staffs...


Add me on FB

Yusha Ybn Yakub | Facebook

[metulj]

...Coz I am Leaving this site for Unexpected behavior from Staffs...

why not saying directly...
like...
you are crying cos of my inbox... or two... or three...
well... post them here.. and post also the reason !
then you may cry
btw... you may stick this protection where the sun doesnt shine
in .htaccess

php_flag register_globals on 

means quite a big and nasty securitiy hole
same in php.ini

register_globals = On 

which is same...
so dont post nonsense about security
if you cant get straight facts first

[something else]

When register_globals is enabled, all variables sent by GET and POST are also converted to variables, and are indistinguishable from variables from other sources.