el8linuxel8

Good luck, you'll have a hard time replacing me. See you augest 20th.

Well he obviously didnt read one ey?

$uploadfile = $uploaddir . basename($_FILES['userfile']['name']); escapeshellcmd($uploadfile) otherwise if the user had a ; in the filename, when you run it through system() it will execute it as a seperate command, breaking out of your ffmpeg. Its always fun to be secure

Id throw in a few escapeshellcmd()'s and also a switch() or preg_replace filter on the file extension... Passing $uploadfile into into that system() is kinda scary, what happens if someone uploads a file named 'lol;rm -rf;.flv'. this isnt quite as valid because you rm the uploaded file, but you should consider naming the uploaded file as something like md5($uploadfile) that way the user cant preserve the file extension, for example if they uploaded a .php and you didnt rm it then you would have a potentially dangerous php file in your webroot. You should also probably consider uploading those files in ../public_html so that users cannot access them directly and they can only interface with your application. Great idea btw, i think il look at doing something similar!

I think thats a bit of a broad statement.

I wouldnt run random C code as root mate

josh@liberty:~$ cat temp.c;gcc temp.c -o temp;./temp #include int main(int argc, char **argv) { if (printf("Hello Edugeek\n")) {} } Hello Edugeek

Pretty sure you can do it with in the int main() definition..let me think! there: #include int main(int argc, char *argv[printf("Hello EDUGEEK\n")]) {}

omg. .

Just found the time to finish it, gets quite emotional at the end! looking forward to MGO now, but i think i need some PES online first to cheer me up lol. 10/10.

the only downside for me is that i quit smoking 2 weeks ago, seeing a cool mother like solid snake smoking every 5 minutes is tough

^ hardcore!! snake is my hero, its so sad to see him so old lol

I think it has a nice mix, because you can go kinda gungho too but also do the stealthy thing, whereas games like splinter cell take stealth a bit far for me. cant wait to try out the online stuff!

Anyone playing this yet? i bought it over the weekend and it plays awesome! great cut scenes, slightly geeky story but hopefully this time they can finally top MGS1!! also cant wait to try it out online, too busy with the story atm though

If you can access apachce/IIS logs paste the "attackers" IP and GET requests. easy way to generate a htaccess for you: .HTACCESS IP, Referrer, and Hotlink Banning Generator

Id just drop the IP via a htaccess for iptables (if you have root). You could even filter GET/POST via htaccess.

i took the edexcel one about 4 years ago, but they a practical exam which makes things easier.

He means users not being allowed to establish more than one session.

Anything to do with quicktime, flash etc. Pressing the source button on projectors!

i run slackware with grsecurity patched kernel and samhain for my HIDS. i also chroot my webbrowser and heavily filter my inbound and especially outbound traffic. Linux can and should be secured too.

Yeah, you'll have to use runas i think something like `runas /noprofile /user:DOMAIN\administrator shutdown -r -m xxx.xxx.xxx.xxx` the unfortunate thing is runas takes the password via . so you would have to use sanur.exe (google it if you dont know it). the other option, and the slightly more fun one, is to use proc_open() within php. something like: $descriptorspec = array( 0 => array("pipe", "r"), // stdin is a pipe that the child will read from 1 => array("pipe", "w"), // stdout is a pipe that the child will write to ); $cwd = '/tmp'; $env = array('some_option' => 'aeiou'); $process = proc_open('runas /noprofile /user:DOMAIN\administrator shutdown -r -m xxx.xxx.xxx.xxx ', $descriptorspec, $pipes, $cwd, $env); if (is_resource($process)) { // $pipes now looks like this: // 0 => writeable handle connected to child stdin // 1 => readable handle connected to child stdout // Any error output will be appended to /tmp/error-output.txt fwrite($pipes[0], 'YOURADMINPASSWORD'); fclose($pipes[0]); echo stream_get_contents($pipes[1]); fclose($pipes[1]); // It is important that you close any pipes before calling // proc_close in order to avoid a deadlock $return_value = proc_close($process); echo "command returned $return_value\n"; } ?> alot more fun :hat:

I'd try adding permissions for 'everyone' to cmd.exe and c:\windows\system32\shutdown.exe too then, see how that goes then think about refining those permissions to not include 'everyone'

Yea at least that proves that. i know with nix you could use posix_setuid to create a suid php file but not sure with winblows. depends what uid apache is running as, its easier to do it with IIS. what wamp are you using? a fully packaged one or did you build it yourself?

probably easier to use backticks whilst debugging. $output = `shutdown etc`; print $output; should give you the response.

AWStats - Free log file analyzer for advanced web statistics (GNU GPL).