RE: [PHP] To The Hacker: CodeBoy
| From: | Dallas Kropka | Date: | Sat, 10 Feb 2001 01:52:47 +0000 |
| Subject: | RE: [PHP] To The Hacker: CodeBoy | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-39045@lists.php.net to get a copy of this message | ||
LOLOL
Ya know, I get half of my business this way... they think they don't want
me to fix there site... until I send them their database dump and passwords
retrieved from invalid form checks or unsecured image directories...
Jonathan actually did this guy a favor, an embarrassing favor, but it
wouldn't have been if he had gone the right path with his complaint.
Wait, isn't that 2 lessons?
-----Original Message-----
From: Jonathan Sharp [mailto:webdev@flyerware.com]
Sent: Thursday, February 08, 2001 7:15 PM
To: Philip Olson; James, Yz
Cc: php-general@lists.php.net
Subject: RE: [PHP] To The Hacker: CodeBoy
Ok, I just checked my mail and found this thread... to clear this up...
In one of your posts you posed a url to a script you were working on...and I
backed up a directory and it gave me a directory listing...one folder was
/admin/ it gave another listing...then showed phpMyAdmin and then it gave
your full db schema...no passwords or anything...i was able to insert a
record...and a user to your mysql server... password is (abc123) that's all
i did...nothing else...and i'd hardly consider that a hack...more of a
"browse"
Cheers,
-Jonathan
aka: "Codeboy the *dangerous* hacker"
> -----Original Message-----
> From: Philip Olson [mailto:philip@cornado.com]
> Sent: Thursday, February 08, 2001 4:24 PM
> To: James, Yz
> Cc: php-general@lists.php.net
> Subject: Re: [PHP] To The Hacker: CodeBoy
>
>
> > True, but none of which are applicable to me, as I've not
> slandered, defamed
> > or spoofed anything or anyone. As far as hacking is concerned,
> I wouldn't
> > know my arse from my elbow :)
>
> just a fyi, my post had nothing to do with you. or the other james (which
> that line you're referring too had to do with) but rather, that of the
> person in question ("hacker"). but anyway, let's let this thread die.
> it's time.
>
> Philip
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net
> To contact the list administrators, e-mail: php-list-admin@lists.php.net
>
>
>
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
For additional commands, e-mail: php-general-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net