Clean UberCMS!

Status
Not open for further replies.
Newbie Spellweaver
Joined
Dec 9, 2010
Messages
10
Reaction score
1
Clean UberCMS [Updated]

FIRST OF ALL I'M VERY SORRY FOR THE FIRST DOWNLOAD LINK


Want it Phoenix compactible?

what you do is
add the sql **** from all the phoenix updates to your uberdb
then add this at the top of your page-client.php.
PHP:
<?php dbquery("UPDATE users SET ip_last = '" . $_SERVER['REMOTE_ADDR'] . "' WHERE username = '" . USER_NAME . "'");   ?>
With: Quickregister, Updated webbuild, client updated.

Or if your lazy. Download this:

Screens:
DevilXXL - Clean UberCMS! - RaGEZONE Forums

DevilXXL - Clean UberCMS! - RaGEZONE Forums



No edit just cleaned evrerything up. Some things aren't working. Its an very basic CMS


Credits to:
Meth0d 100%
not for iis
Download:
CMS:

DB:


Again, Sorry

Its just a clean one, i prefer RevCMS :thumbup1:

i hope al feuters should work now..

-Me

Again, sorry for my English
 
Last edited:
I see, well i'm sorry about the link. I needed to post it quick cuz i had to go. I will update the link. And post some screens
 
Downloaded this and looked at the register (Key exploit page) and this is NOT safe to use. Just look;

Code:
$name = $_POST['bean_avatarName'];

Try filtering the post, then you've prevented an SQL injection.

Oh dear, another error here;

Code:
          $name = $_POST['bean_avatarName'];
		$password = $_POST['bean_password'];
		$password2 = $_POST['bean_retypedPassword'];
		$email = $_POST['bean_email'];
		$dob_day = $_POST['bean_day'];
		$dob_month = $_POST['bean_month'];
		$dob_year = $_POST['bean_year'];

All exploits.. Just change that to this;

Code:
        $name = filter($_POST['bean_avatarName']); 
        $password = filter($_POST['bean_password']); 
        $password2 = filter($_POST['bean_retypedPassword']); 
        $email = filter($_POST['bean_email']); 
        $dob_day = filter($_POST['bean_day']); 
        $dob_month = filter($_POST['bean_month']); 
        $dob_year = filter($_POST['bean_year']);

This should be less "hackable" as we've escaped illegal characters. Next time, check for exploits.
 
Your cms fails :blush:. Register isn't based on quickregister? And I can even find a file is named quickregister. Homes not working? They are explode. I thought there are working homes in this cms. And working minimail. etc. Otherwise I had build it on HomePremiumCMS :)
 
It is not 'my' CMS. Its a from a friend. And i agree i should take a look at it better. I will add a Quickregister and will add the SQL injection fix

-Me
 
Status
Not open for further replies.
Back