Adsl Petition Site

It was redirecting to a porn site. At least it's not going there anymore.
 
they are all playing with meta refreshes, they will have it redirecting everywhere till they get bored, if it says site down ignore it its just a meta refresh
 
Sad that people mess things up that will ultimately benifit them aswell.
 
its not hacking, its simply pasting tags in the form

i fixed it, its gonna break again when they see it, i will try make a script
 
Problem is you can still duplicate the form on another site and post directly to index.php. So submitted another meta redirect's not going to fix it. They're going to have to edit the server side script. Notified the admin and technical contacts of the domain.
 
exactly, i suspect its also susepitble to SQL injection... once they figure that out its over
 
The only constant here is the form itself. Slimothy try writing an app. to monitor the URL and parse some of the content on the page (since that will remain static). If the content contains a meta refresh tag post to the form again filling in your tags. Maybe redirect to http://www.lusion.co.za/adsl.htm (again since this is notifies users of the problem)
 
I agree, the app is probably prone to SQL injection as well. But hopefully they don't go that route, b/c worst case: the current valid petitions can be deleted. At least at this point they can clean up the data from this mess.
 
yes, i was already writing something in php, i'll run it from my web server to make sure it constantly redirects to that page and ends their little pranks
 
all they have to do is edit the asp/php input script then, to reject anything thing contains a ; ( or < in it and any script just wont function.
 
sburrell said:
all they have to do is edit the asp/php input script then, to reject anything thing contains a ; ( or < in it and any script just wont function.
Click to expand...
php has functions to handle that already, they could do $string = html_special_chars($string); or they could do $string = str_replace('<', '', $string);
 
Man the idiots. Hope they have a very unrestfull night! This is not doing us any good. Stupid swine.
 
From the content they have been able to put into the form I don’t think that SQL injection will work, that part at least seems to be escaping any funny characters.

Many of the php based database functions automatically escape any parameters, will be sad if an injection attack can be done as who knows what else the server is responsible for, could be a big headache for the admins.
 
they just have to actualy CGI escape the contents, then whatever arb characters are there will be escaped to the rendering and not proccessed as HTML.
 
pookfuzz said:
From the content they have been able to put into the form I don’t think that SQL injection will work, that part at least seems to be escaping any funny characters.

Many of the php based database functions automatically escape any parameters, will be sad if an injection attack can be done as who knows what else the server is responsible for, could be a big headache for the admins.
Click to expand...
it only escapes certain sql characters if magic_quptes is turned on and remember you can url encode stuff to get passed it, i dont have faith in their scripting abailities to be honest, i dont think they have it on
 
Well, they did say the site was not really ready for the world to see, so I wouldn’t be too hard on Imaginet, even if the scripting is very naive.

Seems the Lusion people have put a redirect in with an explanation of why the site is out of action. Might be best to just leave it like this until it gets fixed properly.
 
Some of the original porn pics were referenced from jeeva.net. But if you go there now, the site looks like it's been cleaned out. Or at least check out the date modified on the images folder (08-Aug-2005 00:09): http://jeeva.net/images/

A whois on jeeva.net reveals a Cape Town registrant:
9 Degrees Business Solutions
<removed per request> (<removed per request>)
27214246877
Fax: 27214221906
Suite 4, Greenmarket Place
54 Shortmarket street
Cape Town, NA 8000
ZA

The image links should still be in the database if a SQL injection attack wasn't successful to clean out the data.
 
Last edited:
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X