Re: Ghost in my machine?
| From: | daniel at rhesusb dot dk | Date: | Thu, 22 May 2003 13:10:46 +0000 |
| Subject: | Re: Ghost in my machine? | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-148555@lists.php.net to get a copy of this message | ||
This is my code (email text is in Danish):
<?
// If the username and password have already been entered, they're available in the session
vars.
session_start();
// So let's check if these data will give access to the database:
if((isset($dbUser) and ($dbUser>"")) and (isset($dbPassword) and
($dbPassword>""))) {
// Try to connect to the database as admin with the given password:
$dbSocket = mysql_connect('localhost', $dbUser, $dbPassword);
if ($dbSocket != FALSE) {
// We succeeded, take note of it, and select our database:
$dbConnected = TRUE;
// (Re-)register the user data in the session for state retention:
session_register('dbUser');
session_register('dbPassword');
mysql_select_db('rum46', $dbSocket) or die(mysql_error);
} else {
// We didn't succeed. Get the error report e-mail by accessing the database as visitor and
send an e-mail about the possible intrusion attempt:
include("dbSocket.php");
if ($dbSocket != FALSE) {
$result = mysql_query("SELECT errorreportaddress FROM system");
$email = mysql_result($result, 0);
mail($email, "MULIGT INDTRÆNGNINGSFORSØG PÅ RUM 46'S BACKEND", "Et
administrationslogin på Rum 46's backend er lige blevet afvist (angivet bruger og kodeord:
$dbUser - $dbPassword).\nVedkommende forsøgte sig adgang fra IP-adressen $REMOTE_ADDR.\n\nDu kan
bruge dette link til at få en lille idé om, hvor personen befinder sig:\nhttp://samspade.org/t/whois?a=$REMOTE_ADDR&server=magic");
} else {
// Unless, of course, no succesful connection to the database server could be made at all, in
which case we notify about the problem:
echo("</head><body bgcolor=\"E0E0E0\" text=\"#000000\"
link=\"#333333\" vlink=\"#333333\"
alink=\"#333333\"><b>Alvorlig fejl.</b><br>Administrationslogin
fejlede, hvorefter brugerlogin fejlede.<br>Dette skyldes formentlig at databaseserveren er
nede eller fejlkonfigureret.<br>Det kan også skyldes at databasen er slettet eller er
alvorligt fejlramt.<br><br>MySQL returnerede denne fejlkode: " .. mysql_error() .
"</body></html>");
}
}
}
//var_dump($dbConnected);
// If we're not yet connected, we'll ask for a username and a password:
if(!$dbConnected) { var_dump($dbConnected);
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>RHESUS BACKEND | RUM 46 | LOGIN</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="E0E0E0" text="#000000" link="#333333"
vlink="#333333" alink="#333333"
onLoad="self.focus();document.loginForm.dbUser.focus()">
<br><br><br><br><br><br><br>
<table width="400" border="0" align="center"
cellpadding="0" cellspacing="0">
<tr height="10">
<td align="center">
<font size="1" face="Verdana, Arial, Helvetica, sans-serif">Du er
ikke logget ind.<? echo("$dbUser, $dbPassword"); ?><br><br></font>
</td>
</tr>
<tr>
<td align="center">
<form action="<? echo($PHP_SELF) ?>" method="get"
name="loginForm" target="_self" id="loginForm">
<input type="text" name="dbUser">
<input type="password" name="dbPassword">
<input type="submit" name="clicked" value="
">
</form>
</td>
</tr>
</table>
</body>
</html> <?
}
?>