[PHP] Witte pagina bij login

Gestart doorSkytop7 reacties19 weergaven

8 berichten · pagina 1 van 1

Skytop

Lid · Topicstarter

Berichten
1.101
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
[COLOR= #0000BB]<?php[/COLOR]
[URL="http://www.php.net/include"]include[/URL] [COLOR= #DD0000]"ipsRegistry.php"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$DB_SERVER[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"titan-ac.com.mysql"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$DB_USERNA[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"USERNAME"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$DB_DATABA[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"titan_ac_com"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$DB_PASSID[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"WACHTWOORD"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$mysqlconexion[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_connect"]mysql_connect[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$DB_SERVER[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$DB_USERNA[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$DB_PASSID[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"Cannot connect to da server!"[/COLOR][COLOR= #007700]);[/COLOR]
[URL="http://www.php.net/mysql_select_db"]mysql_select_db[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$DB_DATABA[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"Cannot select Database!"[/COLOR][COLOR= #007700]);[/COLOR]

[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]username[/COLOR][COLOR= #007700]]) {[/COLOR]
 [COLOR= #0000BB]$username[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]username[/COLOR][COLOR= #007700]];[/COLOR]
 [COLOR= #0000BB]$password[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]password[/COLOR][COLOR= #007700]];[/COLOR]

 [COLOR= #0000BB]$sql[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"SELECT `member_id` FROM `ipb_members` WHERE `name`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$username[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700];[/COLOR]
 [COLOR= #0000BB]$sql2[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"SELECT `members_pass_salt` FROM `ipb_members` WHERE `name`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$username[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700];[/COLOR]
 [COLOR= #0000BB]$res[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$sql[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$mysqlconexion[/COLOR][COLOR= #007700]);[/COLOR]

 [COLOR= #0000BB]$rowRes[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$res[/COLOR][COLOR= #007700]);[/COLOR]
 [COLOR= #0000BB]$userid[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$rowRes[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]member_id[/COLOR][COLOR= #007700]];[/COLOR]

 [COLOR= #0000BB]$res2[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$sql2[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$mysqlconexion[/COLOR][COLOR= #007700]);[/COLOR]
 [COLOR= #0000BB]$rowRes2[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$res2[/COLOR][COLOR= #007700]);[/COLOR]
 [COLOR= #0000BB]$salt[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$rowRes2[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]member_pass_salt[/COLOR][COLOR= #007700]];[/COLOR]


 [COLOR= #0000BB]$hash[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR] [URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR] [COLOR= #0000BB]$salt[/COLOR] [COLOR= #007700]) .[/COLOR] [URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR] [COLOR= #0000BB]$password[/COLOR] [COLOR= #007700]) );[/COLOR]
 [COLOR= #0000BB]$auth[/COLOR] [COLOR= #007700]=[/COLOR] authenticateMember[COLOR= #007700]([/COLOR][COLOR= #0000BB]$userid[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$hash[/COLOR][COLOR= #007700]);[/COLOR]

 [URL="http://www.php.net/if"]if[/URL] [COLOR= #007700]([/COLOR][COLOR= #0000BB]$auth[/COLOR] [COLOR= #007700]==[/COLOR] true[COLOR= #007700]) {[/COLOR]
  [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"True"[/COLOR][COLOR= #007700];
 }[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
  [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"False"[/COLOR][COLOR= #007700];
 }
}[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
 [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"Unable to verify username!"[/COLOR][COLOR= #007700];
}[/COLOR]
?>


Nou ja ik krijg dus helemaal niks gewoon wit, de pagina moet Unable to verify username! terugsturen als je niks invoert en proberen the authen als je wel wat verstuurd.
0
Berichten
3.314
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
Maak van

if($_GET[username])

eens

if(isset($_GET[username]))

GETs zijn namelijk strings dus je kunt ze niet zomaar als boolean benaderen.
0
Skytop

Lid · Topicstarter

Berichten
1.101
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
Kyron schreef:
Maak van
if($_GET[username])
eens
if(isset($_GET[username]))
GETs zijn namelijk strings dus je kunt ze niet zomaar als boolean benaderen.
Dat had ik ook al geprobeerd, helaas bleef het wit sadley
0
Berichten
13.482
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
Bevat ipsRegistry.php een regel die het script afbreekt?
0
Skytop

Lid · Topicstarter

Berichten
1.101
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
Niet voor zover ik weet (Het is van IP.Board btw).
0
Berichten
13.482
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
[COLOR= #0000BB]<?php[/COLOR]
[URL="http://www.php.net/include"]include[/URL] [COLOR= #DD0000]"ipsRegistry.php"[/COLOR][COLOR= #007700];[/COLOR]

[URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"Hoi"[/COLOR][COLOR= #007700];[/COLOR]


[COLOR= #0000BB]$DB_SERVER[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"titan-ac.com.mysql"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$DB_USERNA[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"USERNAME"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$DB_DATABA[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"titan_ac_com"[/COLOR][COLOR= #007700];[/COLOR]
[COLOR= #0000BB]$DB_PASSID[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"WACHTWOORD"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$mysqlconexion[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_connect"]mysql_connect[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$DB_SERVER[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$DB_USERNA[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$DB_PASSID[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"Cannot connect to da server!"[/COLOR][COLOR= #007700]);[/COLOR]
[URL="http://www.php.net/mysql_select_db"]mysql_select_db[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$DB_DATABA[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"Cannot select Database!"[/COLOR][COLOR= #007700]);[/COLOR]


[URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"Doei"[/COLOR][COLOR= #007700];[/COLOR]

[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]username[/COLOR][COLOR= #007700]]) {[/COLOR]
 [COLOR= #0000BB]$username[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]username[/COLOR][COLOR= #007700]];[/COLOR]
 [COLOR= #0000BB]$password[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]password[/COLOR][COLOR= #007700]];[/COLOR]

 [COLOR= #0000BB]$sql[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"SELECT `member_id` FROM `ipb_members` WHERE `name`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$username[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700];[/COLOR]
 [COLOR= #0000BB]$sql2[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"SELECT `members_pass_salt` FROM `ipb_members` WHERE `name`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$username[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700];[/COLOR]
 [COLOR= #0000BB]$res[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$sql[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$mysqlconexion[/COLOR][COLOR= #007700]);[/COLOR]

 [COLOR= #0000BB]$rowRes[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$res[/COLOR][COLOR= #007700]);[/COLOR]
 [COLOR= #0000BB]$userid[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$rowRes[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]member_id[/COLOR][COLOR= #007700]];[/COLOR]

 [COLOR= #0000BB]$res2[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$sql2[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$mysqlconexion[/COLOR][COLOR= #007700]);[/COLOR]
 [COLOR= #0000BB]$rowRes2[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$res2[/COLOR][COLOR= #007700]);[/COLOR]
 [COLOR= #0000BB]$salt[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #0000BB]$rowRes2[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]member_pass_salt[/COLOR][COLOR= #007700]];[/COLOR]


 [COLOR= #0000BB]$hash[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR] [URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR] [COLOR= #0000BB]$salt[/COLOR] [COLOR= #007700]) .[/COLOR] [URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR] [COLOR= #0000BB]$password[/COLOR] [COLOR= #007700]) );[/COLOR]
 [COLOR= #0000BB]$auth[/COLOR] [COLOR= #007700]=[/COLOR] authenticateMember[COLOR= #007700]([/COLOR][COLOR= #0000BB]$userid[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$hash[/COLOR][COLOR= #007700]);[/COLOR]

 [URL="http://www.php.net/if"]if[/URL] [COLOR= #007700]([/COLOR][COLOR= #0000BB]$auth[/COLOR] [COLOR= #007700]==[/COLOR] true[COLOR= #007700]) {[/COLOR]
  [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"True"[/COLOR][COLOR= #007700];
 }[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
  [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"False"[/COLOR][COLOR= #007700];
 }
}[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
 [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"Unable to verify username!"[/COLOR][COLOR= #007700];
}[/COLOR]
?>


Dat HoiDoei komt er wel als je dit doet?
0
Berichten
4.912
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
let je op de sql injectieemo
0
Berichten
10.421
Reputatie
4
Punten
0,00
Lid sinds
Laatst gezien
En de foutafhandeling is ook met vakantie zo te zien............confusedconfusedconfusedconfused
0

Jouw reactie

Deel je idee, stel een vraag of help een ander verder.

Editor laden…

Praat mee met de One2xs-community.

Inloggen om te reageren