|
My Fantasy Online 2 Oficjalne forum gry My Fantasy Online 2 |
 |
Śmietnik - Błędy typu FPD (Dzisiejszy zbiór ^^)
Proximus - 24-08-2010, 22:39 Temat postu: Błędy typu FPD (Dzisiejszy zbiór ^^) Witam,
dzisiaj poświęciłem chwilkę czasu aby poszukać jakiś błędów, okazała się że na mfo jest mnóstwo błędów typu Full Path Disclosure - może nie są to jakieś straszliwie groźne błędy ale przy złożonych atakach (bardziej skomplikowanych) mogą się przydać
Tutaj lista, wszystko zapisywałem w notatniku więc tutaj wrzucam do kodu
Wygląd:
Link
Kod błędu po jego wpisaniu
Kod: |
Błędy FPD na mfo:
http://w1.my-fantasy.net/market.php?keywords[]=iop&item_type[]=item&level_min[]=1&level_max[]=155&price_min[]=100&price_max[]=2222222&sztuki[]=1&available[]=1
Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/market/search.php on line 16
-=-=-=-=-=-=-
http://w1.my-fantasy.net/market.php?p[]=your_items
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-
http://w1.my-fantasy.net/map.php?p[]=move
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-
http://w1.my-fantasy.net/market.php?p[]=your_items&city_id[]=20
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
+ Query error
-=-=-=-=-=-=-
http://w1.my-fantasy.net/map.php?p[]=map
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/index.php?p[]=news&s_pos=-10
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
+ Query error
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/services.php?p[]=charge
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/services.php?p[]=services
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/services.php?p[]=log
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/services.php?p[]=error
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/services.php?p=charge&type[]=cos
Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/services/charge.php on line 10
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/logs.php?p[]=market&pid=768445
Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/logs.php?p[]=level&pid=768445
Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/logs.php?p[]=team&pid=768445
Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/logs.php?p[]=gm&pid=768445
Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/logs.php?p[]=boss&pid=768445
Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/logs.php?p[]=cups&pid=768445
Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/logs.php?p[]=rank&pid=768445
Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/services.php?p=error&type[]=wizard&qid=1
Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/services/error.php on line 2
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/items.php?p[]=armor
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/items.php?p[]=items
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/items.php?p[]=gems
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/ai.php?p[]=settings
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/ai.php?p[]=edit
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/ai.php?p=edit&script_id=&msg[]=cos
Warning: Illegal offset type in /home/mfo/public_html/logic/ai/edit.php on line 22
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/challenge.php?p[]=challenges
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/challenge.php?p[]=fights
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/teams.php?msg[]=team_do_not_have
Warning: Illegal offset type in /home/mfo/public_html/logic/teams/team.php on line 15
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/teams.php?p[]=challenges
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/teams.php?p[]=fights
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/teams.php?p[]=teams
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/index.php?p[]=write&msg_to=Proximus
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/index.php?p=write&msg_to[]=Proximus
Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/mfo/public_html/logic/messages/write.php on line 43
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/cups.php?p[]=fights
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/cups.php?p[]=yours
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/cups.php?p[]=private
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/cups.php?p[]=public
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/cups.php?p=public&search[]=&join_cost_min[]=&join_cost_max[]=&cup_name[]=&owner_name[]=&finished[]=1&member_only[]=&available_only[]=&order_by[]=creation_time&order_dir[]=desc&s_pos[]=5
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/cups/show.php on line 64
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/cups/show.php on line 67
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/market.php?p[]=search
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/market.php?p[]=your_items
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/market.php?p[]=observed
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/market.php?p[]=avg_prices
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/profile.php?p[]=edit
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/profile.php?p[]=show
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/search.php?p[]=player
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/search.php?p[]=team
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/search.php?p=player&search_now[]=1&s_sort_by[]=p.name&s_sort_dir[]=asc
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/player.php on line 51
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/player.php on line 54
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/search.php?p=team&search_now[]=1&s_sort_by[]=t.name&s_sort_dir[]=asc
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/team.php on line 11
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/team.php on line 14
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/rank.php?p[]=players
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/rank.php?p=players&rank_type[]=rank_points_change
Warning: array_key_exists() [function.array-key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/rank/players.php on line 3
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/faq.php?p[]=mirabar.eu
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/regulamin.php?p[]=gm
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/regulamin.php?p[]=kodeksgm
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/regulamin.php?p[]=penalty
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/regulamin.php?p[]=regulamin
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/pp.php?p[]=logs
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/pp.php?p[]=info
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=-
http://w1.my-fantasy.net/pp.php?p[]=about
Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53
-=-=-=-=-=-=-=- |
Większość opiera się na tym samym pliku overall_header.php
Prawdopodobnie powodem jest złe filtrowanie co poniektórych zmiennych na obecność tablic (brak rzutowania typów).
Pozdrawiam Proximus
musaraj - 25-08-2010, 12:55
A mógłbyś po polsku
Proximus - 25-08-2010, 13:31
Jest po polsku, admini techniczni na pewno zrozumieją błąd
HaSu - 25-08-2010, 23:21
Proximus, kawal dobre roboty trzeba przyznac
Walkmen - 26-08-2010, 08:41
HaSu napisał/a: | Proximus, kawal dobre roboty trzeba przyznac |
A czy wiesz co one oznaczają?
A czy jakikolwiek Windows jest bez błędów? Czy cokolwiek na świecie jest wolne od błędów?
Wątpię. Zawsze coś tam może być lepsze, dokładniejsze ...
Proximus - 26-08-2010, 12:38
Walkmen napisał/a: | A czy wiesz co one oznaczają? |
Jeśli to pytanie do mnie to tak
wiadomo nie ma rzeczy bez błędów
HaSu napisał/a: | Proximus, kawal dobre roboty trzeba przyznac |
a tam dużo tego nie było, znacznie mniej groźne od ostatniego zgłoszenia (tamtego nie umieszczałem na forum bowiem ktoś mógłby z niego skorzystać - wykradanie danych do logowania użytkowników poprzez wejście do mnie na profil )
|
|