Thread: Maxcape.com [ Updated - Full Website ]

Page 2 of 2 FirstFirst 12
Results 11 to 18 of 18
  1. #11  
    Registered Member

    Join Date
    Nov 2013
    Posts
    746
    Thanks given
    187
    Thanks received
    459
    Rep Power
    5000
    Get pay before you do the work... You know rsps cunt

    Attached image

    Attached image


    Attached image

    Reply With Quote  
     

  2. #12  
    §ecurity Ⱥnalyst
    Noele's Avatar
    Join Date
    Dec 2016
    Posts
    527
    Thanks given
    291
    Thanks received
    572
    Rep Power
    2203
    Quote Originally Posted by Gang View Post
    Get pay before you do the work... You know rsps cunt

    Attached image
    LMAO. Jesus if this isn't the norm in this community, when someone starts a reputation pissing contest over $40.

    even tho i alrdy have this ty fox
    Attached image
    Join the Zenyte discord below to keep up with the development, and grow with our community! 2000+ members and 7000+ registered in one week!
    Attached image
    Reply With Quote  
     

  3. #13  
    Registered Member

    Join Date
    Nov 2013
    Posts
    746
    Thanks given
    187
    Thanks received
    459
    Rep Power
    5000
    Quote Originally Posted by Noele View Post
    LMAO. Jesus if this isn't the norm in this community, when someone starts a reputation pissing contest over $40.

    even tho i alrdy have this ty fox
    This guy prolly don't even have 40 usd on his bank account lul.
    Ot : ty for the share fox

    Attached image


    Attached image

    Reply With Quote  
     

  4. Thankful user:


  5. #14  
    Extreme Donator


    Join Date
    Apr 2019
    Posts
    332
    Thanks given
    140
    Thanks received
    167
    Rep Power
    1248
    Thanks for this Fox, perhaps find use for it somewhere
    Reply With Quote  
     

  6. Thankful user:


  7. #15  
    shit im high af

    Chance's Avatar
    Join Date
    Feb 2012
    Age
    28
    Posts
    1,046
    Thanks given
    96
    Thanks received
    1,076
    Rep Power
    5000
    Well damn crazy!
    Cool release, man! Shame that happened to you.
    Reply With Quote  
     

  8. Thankful user:


  9. #16  
    KNOWLEDGE IS POWER

    OG KingFox's Avatar
    Join Date
    Dec 2006
    Age
    33
    Posts
    1,683
    Thanks given
    628
    Thanks received
    1,062
    Rep Power
    750
    Thanks everyone, appreciated. It does include the front-end templates, but not the public/ directory where it's initialized. I'd have to recreate it to get it to working order. Actually wouldn't be impossible.

    Found exploit in clans/info, if you plan to use this for anything:

    app/controllers/ClanController.php
    $clanName not sanitized. Inputting anything other than a string will cause site to throw a 500.

    Line 17:

    Code:
    $csv_data = $this->fetchCsv($clanName);

    line 59:
    Code:
    public function fetchCsv($clan) {
        $url = "http://services.runescape.com/m=clan-hiscores/members_lite.ws?clanName=$clan";
    
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_HEADER, FALSE);
        curl_setopt($ch, CURLOPT_NOBODY, FALSE); // remove body
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt($ch, CONNECTION_TIMEOUT, 5);
        $response = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);
    
        return $httpCode != '200' ? null : $response;
    }

    Solution:

    Replace line 17 with:
    Code:
    $csv_data = $this->fetchCsv($this->filter->sanitize($clanName, "string"));

    Attached image
    Reply With Quote  
     

  10. Thankful user:


  11. #17  
    #ProjectShield
    PhantomRSPS's Avatar
    Join Date
    Apr 2016
    Posts
    173
    Thanks given
    103
    Thanks received
    17
    Rep Power
    16
    Nice release, sorry to hear what happen
    Reply With Quote  
     

  12. #18  
    Banned

    Join Date
    Dec 2011
    Posts
    572
    Thanks given
    34
    Thanks received
    74
    Rep Power
    0
    Thanks for the release, will check this out
    Reply With Quote  
     

Page 2 of 2 FirstFirst 12

Thread Information
Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)


User Tag List

Similar Threads

  1. Sql Scape!
    By meiscooldude in forum Downloads
    Replies: 33
    Last Post: 09-16-2008, 03:24 AM
  2. Dumped worldmap XML and SQL Files.
    By Zachera in forum Downloads
    Replies: 16
    Last Post: 05-25-2008, 07:50 AM
Posting Permissions
  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •