[Proximus]

Witam,
dzisiaj poświęciłem chwilkę czasu aby poszukać jakiś błędów, okazała się że na mfo jest mnóstwo błędów typu Full Path Disclosure - może nie są to jakieś straszliwie groźne błędy ale przy złożonych atakach (bardziej skomplikowanych) mogą się przydać

Tutaj lista, wszystko zapisywałem w notatniku więc tutaj wrzucam do kodu

Wygląd:
Link

Kod błędu po jego wpisaniu

Kod:

Błędy FPD na mfo: http://w1.my-fantasy.net/market.php?keywords[]=iop&item_type[]=item&level_min[]=1&level_max[]=155&price_min[]=100&price_max[]=2222222&sztuki[]=1&available[]=1 Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/market/search.php on line 16 -=-=-=-=-=-=- http://w1.my-fantasy.net/market.php?p[]=your_items Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=- http://w1.my-fantasy.net/map.php?p[]=move Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=- http://w1.my-fantasy.net/market.php?p[]=your_items&city_id[]=20 Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 + Query error -=-=-=-=-=-=- http://w1.my-fantasy.net/map.php?p[]=map Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/index.php?p[]=news&s_pos=-10 Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 + Query error -=-=-=-=-=-=-=- http://w1.my-fantasy.net/services.php?p[]=charge Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/services.php?p[]=services Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/services.php?p[]=log Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/services.php?p[]=error Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/services.php?p=charge&type[]=cos Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/services/charge.php on line 10 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/logs.php?p[]=market&pid=768445 Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/logs.php?p[]=level&pid=768445 Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/logs.php?p[]=team&pid=768445 Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/logs.php?p[]=gm&pid=768445 Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/logs.php?p[]=boss&pid=768445 Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/logs.php?p[]=cups&pid=768445 Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/logs.php?p[]=rank&pid=768445 Warning: Illegal offset type in /home/mfo/public_html/logs.php on line 15 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/services.php?p=error&type[]=wizard&qid=1 Warning: preg_match() expects parameter 2 to be string, array given in /home/mfo/public_html/logic/services/error.php on line 2 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/items.php?p[]=armor Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/items.php?p[]=items Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/items.php?p[]=gems Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/ai.php?p[]=settings Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/ai.php?p[]=edit Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/ai.php?p=edit&script_id=&msg[]=cos Warning: Illegal offset type in /home/mfo/public_html/logic/ai/edit.php on line 22 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/challenge.php?p[]=challenges Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/challenge.php?p[]=fights Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/teams.php?msg[]=team_do_not_have Warning: Illegal offset type in /home/mfo/public_html/logic/teams/team.php on line 15 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/teams.php?p[]=challenges Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/teams.php?p[]=fights Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/teams.php?p[]=teams Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/index.php?p[]=write&msg_to=Proximus Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/index.php?p=write&msg_to[]=Proximus Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/mfo/public_html/logic/messages/write.php on line 43 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/cups.php?p[]=fights Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/cups.php?p[]=yours Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/cups.php?p[]=private Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/cups.php?p[]=public Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/cups.php?p=public&search[]=&join_cost_min[]=&join_cost_max[]=&cup_name[]=&owner_name[]=&finished[]=1&member_only[]=&available_only[]=&order_by[]=creation_time&order_dir[]=desc&s_pos[]=5 Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/cups/show.php on line 64 Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/cups/show.php on line 67 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/market.php?p[]=search Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/market.php?p[]=your_items Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/market.php?p[]=observed Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/market.php?p[]=avg_prices Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/profile.php?p[]=edit Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/profile.php?p[]=show Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/search.php?p[]=player Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/search.php?p[]=team Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/search.php?p=player&search_now[]=1&s_sort_by[]=p.name&s_sort_dir[]=asc Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/player.php on line 51 Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/player.php on line 54 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/search.php?p=team&search_now[]=1&s_sort_by[]=t.name&s_sort_dir[]=asc Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/team.php on line 11 Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/search/team.php on line 14 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/rank.php?p[]=players Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/rank.php?p=players&rank_type[]=rank_points_change Warning: array_key_exists() [function.array-key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/rank/players.php on line 3 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/faq.php?p[]=mirabar.eu Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/regulamin.php?p[]=gm Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/regulamin.php?p[]=kodeksgm Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/regulamin.php?p[]=penalty Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/regulamin.php?p[]=regulamin Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/pp.php?p[]=logs Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/pp.php?p[]=info Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=- http://w1.my-fantasy.net/pp.php?p[]=about Warning: key_exists() [function.key-exists]: The first argument should be either a string or an integer in /home/mfo/public_html/logic/overall_header.php on line 53 -=-=-=-=-=-=-=-

Większość opiera się na tym samym pliku overall_header.php

Prawdopodobnie powodem jest złe filtrowanie co poniektórych zmiennych na obecność tablic (brak rzutowania typów).

Pozdrawiam Proximus

[musaraj]

A mógłbyś po polsku

[Proximus]

Jest po polsku, admini techniczni na pewno zrozumieją błąd

[HaSu]

Proximus, kawal dobre roboty trzeba przyznac

[Walkmen]

[Proximus]