MuWeb ver 0.3

[Cold666]

Just to advise, this website isn't hack free. Anyone can inject ur sql server easily.

[Svaike]

need some help plz....


I downloaded it.

Now you say goto you ip .. etc.

I click it and the url is dead, what do i do now.

I fixed up the config.php, now i just gotta do this your_ip url thing.

Help?

go to: http://your_ip/install/install.php

btw, i need more people opinion. Is this site realy so secureles?

[Cold666]

go to: http://your_ip/install/install.php

btw, i need more people opinion. Is this site realy so secureles?

It isn't secure!

[=Master=]

pff tell me whatz the problem with secaure and i will resolve it..

[Cold666]

ur webbie is vulnerable to sql injects.

[Svaike]

in this site there is anti sql injection by john_d, and it puted wrong or what? i thought it can save me from sql injections..

[Cold666]

it can't.

[Svaike]

Cold666, do u know how to make sql injection? try with mine site http://FanMU.sytes.net
if u can, then i can believe that it doesn't. If some1 can make sql injection post in this section my sql user and password (my server is offline so no harm). If any1 can it will be very big warning to users of this site and and warning to =master= to secure it better

[=Master=]

lolz but what have the anti-sql injection? dsent work or what?

[Svaike]

lolz but what have the anti-sql injection? dsent work or what?

ur webbie is vulnerable to sql injects.

cold666 thinks and i want that it will be tested (personaly i am not sure...):smileysex

btw, master, can u make a little thing in 0.4 version? :) suporting of listing is sub server online or not (sometimes it may be that only subserver is online and main server offline)

[graywolf]

sql password is hashed in msdb so it can't be retrived... only login, but it will not give any sense. But anyway you can run any queries you want.

[Svaike]

mhhh... it's bad.... how to fix it or block it?

[Cold666]

Cold666, do u know how to make sql injection? try with mine site http://FanMU.sytes.net
if u can, then i can believe that it doesn't. If some1 can make sql injection post in this section my sql user and password (my server is offline so no harm). If any1 can it will be very big warning to users of this site and and warning to =master= to secure it better

Ur webbie isn't secure.

[Svaike]

Ur webbie isn't secure.

i am waiting for sql login and pass :)

[AnHiMiLaToR]

I started web site with this package and i created my admin account and password also security code,then i go to admin area and edit sucessfuly my char,and after 15 mins i go again there and when i write admin account , password and security code,they gives me an error :


Spirit Uniti Administrator control panel
Error: Only Administrator can do this!

how to resolve this problem ?
and also i am SURE im typing the right things !