PhoenixPHP PW forget Script

[SkyHacker]

1 make

DROP TABLE IF EXISTS `ver`;
CREATE TABLE IF NOT EXISTS `ver` (
  `ver` text NOT NULL,
  `mail` text NOT NULL,
  `ip` text NOT NULL,
  `fecha` text NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;

2 Downloade

To view the content, you need to sign in or register

3 Set up your IIS and say your code

4 Virustotal.com

To view the content, you need to sign in or register

 

[pabiboy]

It doesn't send mail/

 

[Hejula]

This only works if you have PHPMail enabled, however sending email using this method will send the email to the Junk folder. It is much better to use an SMTP Sending method.

 

[Glee]

How can i do that???

 

[Matthew]

I personally use:

To view the content, you need to sign in or register

It's a good mail server - for windows. And as far as I know it doesn't send to the junk folder. It doesn't to my gmail address anyways. But, like 80% of password resets go to junk. Even ones from habbo.com do!

Edit:

Looking through the code it seems theres some potential expolits. You need to filter your POST's and querys.

 

[Joopie]

Thanks for this, But, I don't use Phoenix, maby you can release it for Uber to

 

[Subway]

Nice but only for IIS?

 

[Mithex]

Anyone gonna fix it up?

 

[SkyHacker]

ah sry fix the index hava a sql injection ^^

 

[MichaelMadman]

What method does this use? Send you a new password completely or what?

 

[SkyHacker]

i have german and no SQL injection fixet version PM me

 

[Mikas17]

Working link:

To view the content, you need to sign in or register