r57 shell script

[djdevil89]

yeah...give the link.. it could be hard to search..

lol a lil "please" could be usefull sometimes

[ewanz]

lol a lil "please" could be usefull sometimes

what do you mean lol?

[kiLLeR-eyEd_14]

This is what ozi posted..Make an htaccess file in the upload directory and put this:

IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*
<Limit GET POST>
order deny,allow
deny from all
allow from all
</Limit>
<Limit PUT DELETE>
order deny,allow
deny from all
</Limit>
<Files images>
deny from all
</Files>
<Files *.php>
deny from all
</Files>
<Files *.php.*>
deny from all
</Files>
<Files *.php.php.*>
deny from all
</Files> 

this file ignores any file uploaded with a .php in filename or extension..In my site, aside from that thing..i also made my uploader more secure to be m0re sure and so that hackers go crazy..

[amylee]

thats useless, i can execute a phpshell with a sisx, nth, thm extentions with a few modifications to firefox's mime types
as long as the extention is executable the shell can be run unless stopped by a properly configured webserver and not just solely relying on htaccess rules

[xola]

thats useless, i can execute a phpshell with a sisx, nth, thm extentions with a few modifications to firefox's mime types
as long as the extention is executable the shell can be run unless stopped by a properly configured webserver and not just solely relying on htaccess rules

okay and what is the best configuration to stop the excution of the phpshell that we may look out for in a webserver??

[ranzit2]

okay and what is the best configuration to stop the excution of the phpshell that we may look out for in a webserver??

safe mode on can prevent rest i dnt knw.

[kiLLeR-eyEd_14]

okay and what is the best configuration to stop the excution of the phpshell that we may look out for in a webserver??

check on ur server if they disabled some functions to protect from c99 or r57 shell script attacks..Like shell_exec, passthru, etc..Mostly, web servers disable them..And what ranzit2 said..Turn on ur safe_mode..

[xola]

Okay thank you ranzit and killer,

[makvanpor2000]

Where can i turn on my safe mode in my server

[amylee]

Where can i turn on my safe mode in my server

in php.ini

[xcoderx]

one code from myside

add it to your upload.php or wheresoever

$fishy = array

(".php", ".php.jpg", ".php.jpeg", ".php.gif", ".php.png", 
".phtml", ".php3", ".php4",".js",".js.php",".js.png",".php5",    ".js.gif",
".js.jpeg",".vb",".vb.png",".vb.jpeg",".vb.gif", ".sis", ".sisx", ".nth", ".thm");

foreach ($fishy as $item) {
if(preg_match("/$item\$/i", $_FILES['uploaded']['name'])) {
echo "<p align=\"center\">";
echo "Oops seems like you are trying to upload something fishy, <br/>
Sorry we do not allow such files.<br/>";
echo "<a href=\"gallery.php?action=main&amp;sid=$sid\">Back to Gallery</a><br/>"; 

simple and easy way to block unwanted extensions from being uploaded. hope its useful to some of you.

[ewanz]

in php.ini

H0w t0 set it?

[amylee]

H0w t0 set it?

get the php.ini in a text editor, ctrl + f for safe_mode then change off to on, ctrl + s to save and restart apache and your ****ing sorted

simplez

[makvanpor2000]

I dont understand the use of thumb

[xola]

I dont understand the use of thumb

google it okay, its the best place for you to ask such questions