BorderGame
Guida Anti-Deface - Versione stampabile

+- BorderGame (https://www.bordergame.it)
+-- Forum: Giochi (/Forum-Giochi)
+--- Forum: Browsergame (/Forum-Browsergame--213)
+---- Forum: Habbo Hotel (/Forum-Habbo-Hotel)
+---- Discussione: Guida Anti-Deface (/Thread-Guida-Anti-Deface)



Guida Anti-Deface - scl - 03-12-2012 10:51 PM

Oggi girando per il Web, ho trovato un guida molto interessante su come difendere il proprio hotel, eccola:

Ogni Giorno Quasi Tutti Gli Hotel Vengono Defacciati e Dossati.
Siccome mi sono Rotto ho scoperto come non farsi dossare e defacciare!

Passo N.1
-Eliminare le shell del CMS:
-xml/db_founder.php
-xml/figure_editor.php
-housekeeping/fixnews.php

Ecco come eliminare le Shell:

1° Eliminare La Cartella XML, tutta!
2° Andare Su Housekeeping e cercare fixnews.php ed eliminarla!
3° Eliminare Webdav ripeto eliminare non modificare!
4° Non Usare le News.php con i commenti perchè si puo defacciare!
5° Usare un codice News.php, postato qui sotto:

Codice PHP:
<?php






$allow_guests 
true;




include(
'core.php');
include(
'includes/session.php');




$body_id "news";
$pageid "4";
//$id = FilterText($_GET['id']);
//yaya




if(FilterText($_GET['id'])){
        
$news_id FilterText($_GET['id']);
        
$main_sql mysql_query("SELECT * FROM cms_news WHERE num = '".$news_id."'") or die(mysql_error());
        
$article_exists mysql_num_rows($main_sql);
    if(
$article_exists == "1"){
                
$news mysql_fetch_assoc($main_sql);
                
$pagename "News - " stripslashes($news['title']);
                
$archive "0";
    } else {
                
$pagename "Articolo inesistente!";
                
$archive "1";
    }




      
} else {
        
$pagename "News";
        
$archive "1";
}




include(
'templates/community/subheader.php');
include(
'templates/community/header.php');




?>








<?php
function FilterNew($str$news_id)
{
    
$str str_replace("à""&agrave;",($str));
    
$str str_replace('\r\n''', ($str));
    
$str str_replace('\"''', ($str));
    
$str str_replace("è""&egrave;",($str));
    
$str str_replace("ì""&igrave;",($str));
    
$str str_replace("ò""&ograve;",($str));
    
$str str_replace("ù""&ugrave;",($str));




    
    return 
$str;
}
?>




<div id="container">
    <div id="content">
    <div id="column1" class="column">
                <div class="habblet-container ">
                        <div class="cbb clearfix default ">




                            <h2 class="title">News
                            </h2>
                        <div id="article-archive">












<h2>Tutte le News</h2>
<ul>
    <li>
<?php
    $get_sub_archive 
mysql_query("SELECT num, title, date FROM cms_news ORDER BY num DESC LIMIT 50");
    
$count mysql_num_rows($get_sub_archive);




    if(
$count 0){
        while (
$row mysql_fetch_array($get_sub_archiveMYSQL_NUM)) {
            
printf("<li><a href='news.php?id=%s'>%s</a> &raquo;</li>"$row[0], HoloText($row[1]));
        }
    } else {
        echo 
"<br />No headlines to display yet.";
    }
    
?>
</li>
</ul>




</div>








                    </div>
                </div>
                <script type="text/javascript">if (!$(document.body).hasClassName('process-template')) { Rounder.init(); }</script>




</div>
<div id="column2" class="column">
                <div class="habblet-container ">
                        <div class="cbb clearfix notitle ">




<?php if($archive 1){ ?>
                        <div id="article-wrapper">
    <h2><?php echo stripslashes($news['title']); ?></h2>
    <div class="article-meta">Postata il <?php echo $news['date']; ?>
             <a href="news.php?category=<?php echo $news['category']; ?>"><?php echo $news['category']; ?></a>
</div>
    <p class="summary"><?php echo nl2br(htmlspecialchars(stripslashes($news['short_story']))); ?></p>




    <div class="article-body">
    <p><?php echo stripslashes(FilterNew($news['story'], $news['id'])); ?></p>








        <div class="article-body"><a href='user_profile.php?name=<?php echo $news['author']; ?>' target='_self'><img src='./web-gallery/album1/users_online.PNG' alt='User Profile' border='0'></a><b><?php echo $news['author']; ?></b>
























            </div>




    </div>
</div>
<?php } elseif($archive == "1"){ ?>
<div id="article-wrapper">




                <h2>Articolo inesistente</h2>
    <div class="article-meta" style="height: 1px">&nbsp;</div>
    L'articolo non esiste: clicca su un Articolo esistente!
</div>




<?php ?>












                    </div>
                </div>








</div>




<div id="column3" class="column">
</div>




<?php




include('templates/community/footer.php');




?>

6° Creare Retro Con IIS (mettere il cms su wwwroot cosi non possono defacciare)1*
7° Istallare Kiwi Guard Anti-Doss 2*


Diritti a DjLolOwna (Sciax2)