Speed CMS Edited By me (Jessy) (Safer phoenixPHP)

:w00t:So i had this CMS up on fearhotel.
downloaded it.
(there was exploits),

So my hotel got Scripted i went over the CMS,
File by File.
Patched as much as i could.
this is now probz now the most safest phoenixPHP Edited on the internet.
so i am releaseing it.

Screen shot index.php

http://oi52.tinypic.com/70hmpt.jpg

Download The Cms to see what the Rest Looks like.
i did have it on fearhotel.com

Easy to set up just edit config.php,
add your swf files And your away to go.

here is the download link also

MEGAUPLOAD - The leading online storage and
file delivery service

(important) edit in home.php (important)

Api.php to /client if you don't have a api
enjoy and this will keep your Retro Safer

-Jessy

p,s this is a SPEEDCMS Edited
50% loris for PhoenixPHP
25% to ryan for releasing the speedcms
25% to me for patching as many exploits as i could.

I'll be testing this now!

I get a white client...

I'm really thankful that you posted this il post a screen cos i use this cms to make a big project :
http://i54.tinypic.com/1fuukj.png
http://oi55.tinypic.com/33kdlxf.jpg
This is not all but i just posted those screens

Pretty nice.. good job

Nice Jessy.

To Mutch Errors... 2/10

Already found Exploits, Just sayin. But Good Work :D

Quote:

---

Originally Posted by AkhaMiI

To Mutch Errors... 2/10

---

I agree..

You need to fix it. I've got a white client going on and it's not loading.

OMG so cool

Quote:

---

Originally Posted by Sofles

I agree..

You need to fix it. I've got a white client going on and it's not loading.

---

Funny this cms works on iWabbo.com perfectly?:):

Why not make a template class to handle all of the template stuff? also the way its coded, confusing... but that's just my opinion.

Hopefully it sheds some light onto the cms.
Thanks,
Xeno

in step2.php are 13 exploits

Then stop bitching and fix them ^:thumbup:

Or find them and use them maliciously against FearHotel. I've got no issues morally with that idea.

If OP is the author of this, I wouldn't be surprised to see many, many more than 13 issues. His spelling is atrocious, he's a nobody to the community and the fact that he's working on PhoenixPHP in the first place makes me think he's utterly retarded.

Besides that... good release? 8-)

update_room.php - line 13:

Code:

---

$query = mysql_query("UPDATE rooms SET caption = '".$core->EscapeString($_POST['caption'])."', owner = '".$core->EscapeString($_POST['owner'])."', state = '".$core->EscapeString($_POST['state'])."', model_name = '".$core->EscapeString($_POST['model_name'])."', password = '".$_POST['password']."', users_max = '".$core->EscapeString($_POST['users_max'])."' WHERE id ='".$core->EscapeString($_POST['id'])."'");

---

Notice unfiltered post for 'password'. Injectable. La la la...