r57 shell script

[ewanz]

yeah... thanks bro..

[makvanpor2000]

get the php.ini in a text editor, ctrl + f for safe_mode then change off to on, ctrl + s to save and restart apache and your ****ing sorted

simplez

have tried it,but its working, that way is nt it, pls help

[xola]

I dont understand the use of thumb

google it okay, its the best place for you to ask such questions

[makvanpor2000]

I dont understand the use of thumb

[amylee]

H0w t0 set it?

get the php.ini in a text editor, ctrl + f for safe_mode then change off to on, ctrl + s to save and restart apache and your ****ing sorted

simplez

[ewanz]

in php.ini

H0w t0 set it?

[xcoderx]

one code from myside

add it to your upload.php or wheresoever

$fishy = array

(".php", ".php.jpg", ".php.jpeg", ".php.gif", ".php.png", 
".phtml", ".php3", ".php4",".js",".js.php",".js.png",".php5",    ".js.gif",
".js.jpeg",".vb",".vb.png",".vb.jpeg",".vb.gif", ".sis", ".sisx", ".nth", ".thm");

foreach ($fishy as $item) {
if(preg_match("/$item\$/i", $_FILES['uploaded']['name'])) {
echo "<p align=\"center\">";
echo "Oops seems like you are trying to upload something fishy, <br/>
Sorry we do not allow such files.<br/>";
echo "<a href=\"gallery.php?action=main&amp;sid=$sid\">Back to Gallery</a><br/>"; 

simple and easy way to block unwanted extensions from being uploaded. hope its useful to some of you.

[amylee]

Where can i turn on my safe mode in my server

in php.ini

[makvanpor2000]

Where can i turn on my safe mode in my server

[xola]

Okay thank you ranzit and killer,

[kiLLeR-eyEd_14]

okay and what is the best configuration to stop the excution of the phpshell that we may look out for in a webserver??

check on ur server if they disabled some functions to protect from c99 or r57 shell script attacks..Like shell_exec, passthru, etc..Mostly, web servers disable them..And what ranzit2 said..Turn on ur safe_mode..

[ranzit2]

okay and what is the best configuration to stop the excution of the phpshell that we may look out for in a webserver??

safe mode on can prevent rest i dnt knw.

[xola]

thats useless, i can execute a phpshell with a sisx, nth, thm extentions with a few modifications to firefox's mime types
as long as the extention is executable the shell can be run unless stopped by a properly configured webserver and not just solely relying on htaccess rules

okay and what is the best configuration to stop the excution of the phpshell that we may look out for in a webserver??

[amylee]

thats useless, i can execute a phpshell with a sisx, nth, thm extentions with a few modifications to firefox's mime types
as long as the extention is executable the shell can be run unless stopped by a properly configured webserver and not just solely relying on htaccess rules

[kiLLeR-eyEd_14]

This is what ozi posted..Make an htaccess file in the upload directory and put this:

IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*
<Limit GET POST>
order deny,allow
deny from all
allow from all
</Limit>
<Limit PUT DELETE>
order deny,allow
deny from all
</Limit>
<Files images>
deny from all
</Files>
<Files *.php>
deny from all
</Files>
<Files *.php.*>
deny from all
</Files>
<Files *.php.php.*>
deny from all
</Files> 

this file ignores any file uploaded with a .php in filename or extension..In my site, aside from that thing..i also made my uploader more secure to be m0re sure and so that hackers go crazy..