[SECURITY] PHPretro "Security"! [MUST READ]

Well, this is kind of old news isn't it? These kind of 'booby traps' have been placed in software for a very long time. Heck, even Microsoft did such a thing with Windows in cooperation with the American government to spy on other governments. ;)

Thanks for the update.

Some of the Exploits are in the CMS, But alot of the Exploits are in the XAMPP itself.

---------- Post added at 05:18 PM ---------- Previous post was at 05:17 PM ----------

Quote:

---

Originally Posted by sisija

Well, this is kind of old news isn't it? These kind of 'booby traps' have been placed in software for a very long time. Heck, even Microsoft did such a thing with Windows in cooperation with the American government to spy on other governments. ;)

---

Wow. Microsoft are really smart but have to do that?

I didn't know this. I'm actually quite surprised.

Winter is Correct, PHPRetro is very secure compared to HoloCMS, HoloCMS contains almost all of the exploits in PHPRetro and alot more, I'm not sure if UberCMS contains exploits, It does but I'm not sure how bad they are, I haven't really looked yet, But my opinion, I doubt there will be another CMS for Habbo, Most of us cannot be bothered to do it any more or even see a point (I can't see a point in developing one, releasing it, ect) As it will just get a Name change, ect.

Quote:

---

Originally Posted by -Jordan-

Winter is Correct, PHPRetro is very secure compared to HoloCMS, HoloCMS contains almost all of the exploits in PHPRetro and alot more, I'm not sure if UberCMS contains exploits, It does but I'm not sure how bad they are, I haven't really looked yet, But my opinion, I doubt there will be another CMS for Habbo, Most of us cannot be bothered to do it any more or even see a point (I can't see a point in developing one, releasing it, ect) As it will just get a Name change, ect.

---

PHPretro has like 1 or 2 less Exploits than HoloCMS but PHPretro was HoloCMS based. UberCMS has so many Exploits, thats why most Flash Hotels get Hacked.

Quote:

---

Originally Posted by Sphinx

PHPretro has like 1 or 2 less Exploits than HoloCMS but PHPretro was HoloCMS based. UberCMS has so many Exploits, thats why most Flash Hotels get Hacked.

---

PHPRetro is alot more secure than HoloCMS i think its alot more than 1 or 2 less exploits, Yifan was a decent coder, Shame at the first sign of trouble he had to leave, by Now PHPRetro would be really good if he stayed.

Quote:

---

Originally Posted by -Jordan-

PHPRetro is alot more secure than HoloCMS i think its alot more than 1 or 2 less exploits, Yifan was a decent coder, Shame at the first sign of trouble he had to leave, by Now PHPRetro would be really good if he stayed.

---

Alot of people continued his work Un-Officially. By basically edit the CMS and claiming it as their own.

When i made SuperCMS I gave Yifan Lu, Oni & Meth0d Credits because I used some part from PHPretro and UberCMS. But if people just edit the Footer and it basically is PHPretro then he will have to Hack the Hotel through those Exploits.

Version(s):
4.0.8 = A few.
4.0.9 = Unstable.
4.1.1 = Oni fixed quite alot of Exploits.

Good update 9/10. But I favor Xampp being the biggest problem when your retro is hacked not so much as PHPRetro itself.

Quote:

---

Originally Posted by iConnor

Good update 9/10. But I favor Xampp being the biggest problem when your retro is hacked not so much as PHPRetro itself.

---

WebDAV makes XAMPP Exploitable, But PHPretro also contains some Exploits so that's why i started this Thread.

Quote:

---

Originally Posted by Sphinx

WebDAV makes XAMPP Exploitable, But PHPretro also contains some Exploits so that's why i started this Thread.

---

Could you please list the locations of these exploits?

Quote:

---

Originally Posted by LMC

Could you please list the locations of these exploits?

---

I only know a few, But if you wish to Protect Xampp then just follow these Steps:

1. Open 'C:\xampp' Folder.
2. Delete the 'WebDAV' Folder.
3. Delete the 'Security' Folder.
4. Rename 'PhpMyAdmin' to 'PhpMyAdminn'.
5. Copy 'PhpMyAdminn' into the 'Anonymous' Folder.

Then your Done. Not so hard is it?
But you will need to Find the PHPretro Exploits yourself.

Quote:

---

Originally Posted by Sphinx

I only know a few, But if you wish to Protect Xampp then just follow these Steps:

1. Open 'C:\xampp' Folder.
2. Delete the 'WebDAV' Folder.
3. Delete the 'Security' Folder.
4. Rename 'PhpMyAdmin' to 'PhpMyAdminn'.
5. Copy 'PhpMyAdminn' into the 'Anonymous' Folder.

Then your Done. Not so hard is it?
But you will need to Find the PHPretro Exploits yourself.

---

Ive knew about the xampp exploits since day 1. I cannot personally see why people use xammp, just set apache/php/mysql up your self. And i cannot see why your being a selfish jerk and not actually helping people and telling them were the exploits are so we can fix them, looks like ill have to look myself.

Quote:

---

Originally Posted by LMC

Ive knew about the xampp exploits since day 1. I cannot personally see why people use xammp, just set apache/php/mysql up your self. And i cannot see why your being a selfish jerk and not actually helping people and telling them were the exploits are so we can fix them, looks like ill have to look myself.

---

How am i being Selfish?

Quote:

---

Originally Posted by LMC

You released a topic just saying that there is exploits, is dosent help any of the new members to the community. How is this even ment to be in this section? Its not even a release except saying that there is exploits?

---

I'm still looking for more Exploits and im Busy making Add-Ons for SuperCMS, I'm fixing my Computer and ive got to fix my Xbox, I can't do all that in a few minutes can I?

So i can't exactly help. All i can say is, Most of them are in the 'templates' Folder.

You can't really call him selfish, no one asked him to inform the community of these exploits.

Anyway, thankyou for informing us!