Пути:
Заходим на http://up3gp.info/style/
Получаем:
Код:
Warning: include_once(sys/config.inc.php) [function.include-once]: failed to open stream: No such file or directory in /home/[path]/style/index.php on line 3
Warning: include_once() [function.include]: Failed opening 'sys/config.inc.php' for inclusion (include_path='.:/usr/local/php5/lib/php') in /home/[path]/style/index.php on line 3
Warning: mysql_query() [function.mysql-query]: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2) in /home/[path]/style/index.php on line 6
Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in /home/[path]/style/index.php on line 6
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/[path]/style/index.php on line 7
Fatal error: Call to a member function assign() on a non-object in /home/[path]/style/index.php on line 10
Пути:
Заходим на http://up3gp.info/style/
Получаем:
Код:
Warning: include_once(sys/config.inc.php) [function.include-once]: failed to open stream: No such file or directory in /home/[path]/style/index.php on line 3
Warning: include_once() [function.include]: Failed opening 'sys/config.inc.php' for inclusion (include_path='.:/usr/local/php5/lib/php') in /home/[path]/style/index.php on line 3
Warning: mysql_query() [function.mysql-query]: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2) in /home/[path]/style/index.php on line 6
Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in /home/[path]/style/index.php on line 6
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/[path]/style/index.php on line 7
Fatal error: Call to a member function assign() on a non-object in /home/[path]/style/index.php on line 10
странно этого файла там вообще быть не должно
__
А вы не будете показывать где дыра? Я до сих пор не понял фокус с аватаром...
Еще пути:
Заходим под тестовым акком. Потом в куки. Добавляем к сессии символы !@#$%^&*()/
Перезагружаем страницу.
Видим во всей красе:
Код:
Warning: session_start() [function.session-start]: The session id contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,' in /home/[path]/html/index.php on line 2
Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/[path]/html/index.php:2) in /home/[path]/html/index.php on line 2
Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/[path]/html/index.php:2) in /home/[path]/html/index.php on line 2
�u�eh�5���J!%�r��B;��Z�%L|�&&�a|#�6X������{�9�F=o��q��N��� �٥{=�L�-ςy�s���xMA�0������㪪Z���I����O{��Ԉ�n��G2������yDk5��р�.%� �R�P���k�1����pY�����DT�Ǝ��ؙ������K'zЎ��M��6���\T���?���>��z�J�4,IH�y�0<�k��� Ļ��S�