If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.
ok, finding a hundred percent lava script will be pretty hard... also, the holes are there to be fixed... If someone fixes holes and uploads here then other coders figure out how to crack the script and learn the database structure, etc... if you wanna secure your script... create a function to strip specific characters out of posts, etc for anti sqli measures and secure your uploader... ie: there's a post regarding storing images in db, or make files upload to above public_html/www ie:
/home/user/uploadsfolder/.... (above public_html can't be accessed by typing url...)
not like ./uploads (can be hotlinked to, thus running shell scripts, etc...)
or
/home/user/public_html/... (can be hotlinked to, thus running shell scripts, etc...)
--------------------------------------
then to access uploaded files you use a force download method to get files and force download so they can't be run... I'll post the uploader and force download files a bit later, i think i might have already posted in another thread... use search...
(or be patient till I'm done on the script i'm messing with at the moment, lol)
-------------------------------------------------------------------
And for those who trying to learn, keep editing that lava script, you'll get it right sooner than you think!
Comment