My Fantasy Online 2
Oficjalne forum gry My Fantasy Online 2

Śmietnik - Błędy typu FPD (Dzisiejszy zbiór ^^)

Proximus - 24-08-2010, 22:39
Temat postu: Błędy typu FPD (Dzisiejszy zbiór ^^)
Witam,
dzisiaj poświęciłem chwilkę czasu aby poszukać jakiś błędów, okazała się że na mfo jest mnóstwo błędów typu Full Path Disclosure - może nie są to jakieś straszliwie groźne błędy ale przy złożonych atakach (bardziej skomplikowanych) mogą się przydać :)

Tutaj lista, wszystko zapisywałem w notatniku więc tutaj wrzucam do kodu :)

Wygląd:
Link

Kod błędu po jego wpisaniu

Kod:

Błędy FPD na mfo:

http://w1.my-fantasy.net/market.php?keywords[]=iop&item_type[]=item&level_min[]=1&level_max[]=155&price_min[]=100&price_max[]=2222222&sztuki[]=1&available[]=1

Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/market/search.php on line 16


-=-=-=-=-=-=-

http://w1.my-fantasy.net/market.php?p[]=your_items


Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-

http://w1.my-fantasy.net/map.php?p[]=move

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-

http://w1.my-fantasy.net/market.php?p[]=your_items&city_id[]=20

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

+ Query error

-=-=-=-=-=-=-

http://w1.my-fantasy.net/map.php?p[]=map

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/index.php?p[]=news&s_pos=-10


Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

+ Query error

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/services.php?p[]=charge


Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/services.php?p[]=services


Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/services.php?p[]=log


Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/services.php?p[]=error


Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/services.php?p=charge&type[]=cos

Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/services/charge.php on line 10

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/logs.php?p[]=market&pid=768445

Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/logs.php?p[]=level&pid=768445

Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/logs.php?p[]=team&pid=768445

Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/logs.php?p[]=gm&pid=768445

Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/logs.php?p[]=boss&pid=768445

Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/logs.php?p[]=cups&pid=768445

Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/logs.php?p[]=rank&pid=768445

Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/services.php?p=error&type[]=wizard&qid=1

Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/services/error.php on line 2

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/items.php?p[]=armor

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/items.php?p[]=items

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/items.php?p[]=gems

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53


-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/ai.php?p[]=settings

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/ai.php?p[]=edit

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/ai.php?p=edit&script_id=&msg[]=cos

Warning: Illegal offset type in /home/mfo/public_html/logic/ai/edit.php on line 22

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/challenge.php?p[]=challenges

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/challenge.php?p[]=fights

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/teams.php?msg[]=team_do_not_have

Warning: Illegal offset type in /home/mfo/public_html/logic/teams/team.php on line 15

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/teams.php?p[]=challenges

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/teams.php?p[]=fights

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/teams.php?p[]=teams

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/index.php?p[]=write&msg_to=Proximus

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/index.php?p=write&msg_to[]=Proximus

Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/mfo/public_html/logic/messages/write.php on line 43

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/cups.php?p[]=fights

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/cups.php?p[]=yours

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/cups.php?p[]=private

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/cups.php?p[]=public

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/cups.php?p=public&search[]=&join_cost_min[]=&join_cost_max[]=&cup_name[]=&owner_name[]=&finished[]=1&member_only[]=&available_only[]=&order_by[]=creation_time&order_dir[]=desc&s_pos[]=5

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/cups/show.php on line 64

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/cups/show.php on line 67

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/market.php?p[]=search

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/market.php?p[]=your_items

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/market.php?p[]=observed

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/market.php?p[]=avg_prices

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/profile.php?p[]=edit

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/profile.php?p[]=show

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/search.php?p[]=player

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/search.php?p[]=team

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/search.php?p=player&search_now[]=1&s_sort_by[]=p.name&s_sort_dir[]=asc

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/player.php on line 51

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/player.php on line 54

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/search.php?p=team&search_now[]=1&s_sort_by[]=t.name&s_sort_dir[]=asc

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/team.php on line 11

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/team.php on line 14

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/rank.php?p[]=players

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/rank.php?p=players&rank_type[]=rank_points_change

Warning: array_key_exists() [function.array-key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/rank/players.php on line 3

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/faq.php?p[]=mirabar.eu

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/regulamin.php?p[]=gm

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/regulamin.php?p[]=kodeksgm

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/regulamin.php?p[]=penalty

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/regulamin.php?p[]=regulamin

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/pp.php?p[]=logs

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/pp.php?p[]=info

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-

http://w1.my-fantasy.net/pp.php?p[]=about

Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53

-=-=-=-=-=-=-=-


Większość opiera się na tym samym pliku overall_header.php ;)

Prawdopodobnie powodem jest złe filtrowanie co poniektórych zmiennych na obecność tablic (brak rzutowania typów).

Pozdrawiam Proximus

musaraj - 25-08-2010, 12:55

A mógłbyś po polsku :?: :?: :?: :?:
Proximus - 25-08-2010, 13:31

Jest po polsku, admini techniczni na pewno zrozumieją błąd :)
HaSu - 25-08-2010, 23:21

Proximus, kawal dobre roboty trzeba przyznac ;)
Walkmen - 26-08-2010, 08:41

HaSu napisał/a:
Proximus, kawal dobre roboty trzeba przyznac ;)

A czy wiesz co one oznaczają?
A czy jakikolwiek Windows jest bez błędów? Czy cokolwiek na świecie jest wolne od błędów?
Wątpię. Zawsze coś tam może być lepsze, dokładniejsze ...

Proximus - 26-08-2010, 12:38

Walkmen napisał/a:
A czy wiesz co one oznaczają?


Jeśli to pytanie do mnie to tak ;)

wiadomo nie ma rzeczy bez błędów

HaSu napisał/a:
Proximus, kawal dobre roboty trzeba przyznac ;)


a tam dużo tego nie było, znacznie mniej groźne od ostatniego zgłoszenia (tamtego nie umieszczałem na forum bowiem ktoś mógłby z niego skorzystać - wykradanie danych do logowania użytkowników poprzez wejście do mnie na profil :D )


Powered by phpBB modified by Przemo © 2003 phpBB Group