5 ms·

http://iobm.net/forum/dos/index.php/topic,17.msg113.html#msg113 http://iobm.net/forum/dos/index.php/topic,17.msg113.html#msg... This is evidently some of the c

by jtolj 13y ago

http://iobm.net/forum/dos/index.php/topic,17.msg113.html#msg113 http://iobm.net/forum/dos/index.php/topic,17.msg113.html#msg... This is evidently some of the code that was leaked. It's some pretty ugly PHP.

ThePinion 13y ago
that is some pretty hideous code, but which part of it potentially reveals the identity of backopy? or was it a part in the full source that was apparently given away by the VPS provider?
- abolibibelot 13y ago
  Well, the way the SQL code in that file is ripe for SQL injection, it's possible that the database has been compromised for a while...
mtdewcmu 13y ago
Just the implication that a big chunk of the site is in index.php kind of tipped me off that it might be ugly. A little bit of modularization might have helped contain the damage from the screwed up server settings, if nothing else.
kylebrown 13y ago
Silk Road was using PHP also. I tried some SQL injections in its earlier days (mid-2011), and got back full error reports including the mySQL commands (I never successfully exploited it because I wasn't able to get a closing parenthesis ")" past the sanitizer). They changed the server config shortly afterwards, and stopped printing the debug messages.
retr0h 13y ago
mvc anyone???