Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: Website Security

  1. December 9th, 2003, 03:34 AM #1
    CT2600
    CT2600 is offline
    Senior Member
    Join Date
    Dec 2003
    Posts
    100

    Website Security

    Can anyone check the website I just did for the lady down the street and tell me if there is anything wrong with it? I used PayPal & FatCow so it should be secure.

    I give you permission to review anything on the site/coding, but its hosted by FatCow and Shopping through PayPal and if you mess with any of that it doesn't belong to me.

    www.teamsplus.net

    Reply With Quote Reply With Quote
  2. December 9th, 2003, 03:49 AM #2
    riya_here
    riya_here is offline
    Senior Member
    Join Date
    Jun 2003
    Posts
    219
    nice website...
    u can use a better colour combination if u want...
    overall, nice one!!!
    Now is the moment, or NEVER!!!
    Reply With Quote Reply With Quote
  3. December 9th, 2003, 04:25 AM #3
    creative_32X_mx
    creative_32X_mx is offline
    Senior Member
    Join Date
    Sep 2003
    Posts
    554
    hey,CT.
    I found one weakness so far..check your ftp you should take a closer look at it, as i was able to upload and download files to and from the site.
    If you want the exact details then sh00t me a PM i'd be more then happy to help you patch it up..

    Other then that nice little site although it did take a while for the index.html page to fully load up, but other then that it looks good.

    cheers
    creative
    Reply With Quote Reply With Quote
  4. December 9th, 2003, 10:25 AM #4
    Alt_Ctrl_Delete
    Alt_Ctrl_Delete is offline
    Banned
    Join Date
    Oct 2003
    Posts
    68
    I've also found a weakness in your Source code, found something that could be used to gain "Root"..
    I will PM you with the details..

    Other then that nice layout, the green is a bit hard on the eyes..But excellent Work...

    Stacy
    Reply With Quote Reply With Quote
  5. December 9th, 2003, 10:34 AM #5
    Striek
    Striek is offline
    Senior Member
    Join Date
    Oct 2002
    Posts
    1,130
    I'll apologize in advance if I offend anyone.

    Nobody should be giving out methods to gain root here, or explaining any other way to break this site. There absolutely *N0* guarantee that this person is actually the web site designer. I know if I wanted to hack a site, this is the form of social engineering I would use.

    If it's possible to patch these holes without explaining how to exploit them, more pwer to you, but you're pretty naive if you trust that this person is actually the designer and that his/her intentions are good. What proof do you have?

    We should all be a little more careful than this.
    Government is like fire - a handy servant, but a dangerous master - George Washington
    Government is not reason, it is not eloquence - it is force. - George Washington.

    Join the UnError community!
    Reply With Quote Reply With Quote
  6. December 9th, 2003, 10:58 AM #6
    creative_32X_mx
    creative_32X_mx is offline
    Senior Member
    Join Date
    Sep 2003
    Posts
    554
    striek. I thought about that, but in the PM that CT sent me, he asked me to send all info that i gathered TO the web masters emeail on the site..
    So it all looks legit to me..
    I know that he shoulda coulda worded he's question i little bit better, but i've made sure that this is the person whom made/ownes the site..
    Well i am currently talking to him through PM as to how he or she can fix the problem.
    Not how to exploit the problem..

    anyhow cheers
    creative
    Reply With Quote Reply With Quote
  7. December 9th, 2003, 11:40 AM #7
    el-half
    el-half is offline
    Senior Member
    Join Date
    Jun 2003
    Posts
    772
    /me goes out and defaces www.teamsplus.net muhahaha lol

    EDIT: found some vulns, will pm details
    The above sentences are produced by the propaganda and indoctrination of people manipulating my mind since 1987, hence, I cannot be held responsible for this post\'s content - me

    www.elhalf.com
    Reply With Quote Reply With Quote
  8. December 9th, 2003, 01:07 PM #8
    CT2600
    CT2600 is offline
    Senior Member
    Join Date
    Dec 2003
    Posts
    100
    Okay, I built the website on her Windows XP system and My Windows 2000 system. Software used is HTML and Microsoft FrontPage. I tried a few of the methods you mentioned and it gives me (no anon logons).

    We are PRIMARILY concerned about the shopping section, but I really want to fix the access problem. If anyone can help me patch up the security problems it would be great.
    http://www.AntiOnline.com/sig.php?imageid=661 http://www.AntiOnline.com/sig.php?imageid=662
    Reply With Quote Reply With Quote
  9. December 9th, 2003, 06:39 PM #9
    CT2600
    CT2600 is offline
    Senior Member
    Join Date
    Dec 2003
    Posts
    100
    I'm confused.. I got this feedback, but isn't this what I am trying to do? and what does the red dot mean? Is it urgent? Is there a fix attached?
    Reply With Quote Reply With Quote
  10. December 9th, 2003, 07:08 PM #10
    CT2600
    CT2600 is offline
    Senior Member
    Join Date
    Dec 2003
    Posts
    100
    Originally posted here by Alt_Ctrl_Delete
    I've also found a weakness in your Source code, found something that could be used to gain "Root"..
    I will PM you with the details..

    Other then that nice layout, the green is a bit hard on the eyes..But excellent Work...

    Stacy
    From what I hear, that was not a PM is was a negative antipoint and there was no information attached? Do you have something to assist or are you just mean to new comers?
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules