For free time that I don’t have

Hi , I wanna indicate to two small and petty serious notes I reached and experiences gotten in php programming , however each programmer has his manner but it’s necessary to read php changelogs .

Read more…

General, PHP, Programming difference between explode() and split(), difference between preg_replace and ereg_replace, ereg_replace(), explode(), preg_replace(), split()

Today I’ve been accidentally paying attention to a php code that reminds me a issue that it ain’t totally important how long has somebody been in programing world , just his ability to reduction and maintenance ! Read more…

General, PHP, Programming explode(), list(), passwd, preg_match_all, split()

Hello everybody , after a insufferable weak that I complain with , I’m here to post up the blog , I’ve recently been occupied by penetration test on some web applications , while these days I’ve frequently seen several bypasses for php and I just wondered , the vulnerabilities are advancing coming out faster than I thought they would Read more…

Bypassing, General, Hacking, PHP, Security Cpanel Bypass Safe mode [ extract tar.gz by Cpanel ], open_basedir, PHP 5.2.11/5.3.0 Multiple Vulnerabilities, PHP 5.2.12/5.3.1 symlink() open_basedir bypass, posix_mkfifo(), Safe mode bypass, symlink(), tempnam()

This publishing is around bonus stuff which I’ve considered ,MySQL injection , I had written a query :

/page.php?id=-1 union select table_name,2 from from information_schema.tables
where TABLE_SCHEMA='Sc0rpion'

As you see we used a single quote in query Read more…

Bypassing, General, Hacking, Mysql injection, PHP, Security bypass mysql_real_escape_string, Bypassing, escaping by mysql_real_escape_string(), Mysql injection, PHP, Securitybypass magic_quote

In the present paper there will be a speech about one of safety ways of the programming language PHP . in each web application you surely must care about any processing data obtained from the user and operating for their storage the database MySQL . Read more…

General, PHP, Programming, Security eregi, filtering the characters in php, get_magic_quotes_gpc(), mysql_real_escape_string, PHP security class, prevention of attacks in php, strip html tags in php, strip_tags(), validate the string in php

I had my own PHP source analyzer , I used it in my projects and it helped me write content management systems efficiently . I have it right now , all it does is showing the dynamic queries , dynamic inclusions and important dynamic variables clearly . for example I give it a blah project directory so it searches into source of all files in all main and sub directories then if it finds something , returns the the result in HTML page containing the path of file besides the line of file which the word located on , at last it classifies the information . Read more…

General, PHP, Programming Finding writable files by php, ISCN x-searcher, PHP searcher.PHP local searcher

In the way of changing of style of coding to OOP , I tried to wrote various classes and call them back whenever I want , as a efficient one you would feel comfortable with that is MySQL class . in old way the query had to frequently be assigned to a variable and then the mysql_query() , mysql-fetch-array() , mysql-num-rows() or etc … appeared by default in most cases . Read more…

Developing, General, PHP, Programming MySQL class, OOP, OOP Mysql class

Hi everybody I know my blog was such a motionless place during two months ago but it’s going not to be …. I’ve been occupied by server replacing issue , however , I wasn’t work-less whole this stories ,  I wrote article main subjected on uploading a file to MySQL database . Read more…

Developing, General, PHP file upload, MySQL, mysql upload, PHP, php script for upload to mysql, Uplaod file to mysql

I’ve recently been studying with object oriented programing , while my thought strayed constantly whether OOP is actually better ? I don’t wanna name myself PHP coder but if I would , then I , as a traditional PHP programmer made decision to switch to OOP , by the way I never say if I’d done it earlier I would be more professional now , surely I had to proceed step by step . Read more…

General, PHP PHP Object oriented, PHP OOP, PHP OOP programming

Hi , the tutorial clip around cracking the passwords of cPanel has recently been published , the method is mainly focused on trying different passwords within a user name ( brute force ) . you might ask me about the protection installed in cPanels that commonly controls authentication against brute force attacks Read more…

Bypassing, Hacking, PHP Bypass PHP 5.2.9 safe mode, cPanel brute forcer, cPanel password cracker, open basedir Bypass PHP 5.2.9, php cPanel brute forcer, php cpanel password cracker, safe mode Bypass PHP 5.2.9