SnowCode
/
threadr.lostcave.ddnss.de
forked from root/threadr.lostcave.ddnss.de
1
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

fixed invalid escape string

master
BodgeMaster 2020-04-08 03:02:54 +02:00
parent 7c32f270ad
commit 9d3e3945b2
3 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
variable_grabbler.pass1.json
View File

@ -1,4 +1,4 @@
{
"STYLESHEET":"<link rel=\"stylesheet\" type=\"text\/css\" href=\"%CONTENT_DIR%\/style.css\">",
"REQUIRE_LOGIN":"if (!$login) { header(\"Location: https:\/\/lostcave.ddnss.de%CONTENT_DIR%\/login\/\?error=session\"); die(); }"
"REQUIRE_LOGIN":"if (!$login) { header(\"Location: https:\/\/lostcave.ddnss.de%CONTENT_DIR%\/login\/\\?error=session\"); die(); }"
}

2
variable_grabbler.pass2.json
View File

@ -1,6 +1,6 @@
{
"CONTENT_DIR":"/common/threadr",
"NO_CHEAP_SESSION_STEALING":"if (isset($_SESSION['user_id'])) {if ($_SESSION['user_ip']!=$_SERVER['REMOTE_ADDR'] || $_SESSION['user_http_user_agent']!=$_SERVER['HTTP_USER_AGENT']){ $_SESSION = array(); if (ini_get(\"session.use_cookies\")){ $params = session_get_cookie_params(); setcookie(session_name(), '', time() - 42000, $params[\"path\"], $params[\"domain\"], $params[\"secure\"], $params[\"httponly\"]); } session_destroy(); header(\"Location: https://lostcave.ddnss.de/common/threadr/login/\?error=session\"); die();}}",
"NO_CHEAP_SESSION_STEALING":"if (isset($_SESSION['user_id'])) {if ($_SESSION['user_ip']!=$_SERVER['REMOTE_ADDR'] || $_SESSION['user_http_user_agent']!=$_SERVER['HTTP_USER_AGENT']){ $_SESSION = array(); if (ini_get(\"session.use_cookies\")){ $params = session_get_cookie_params(); setcookie(session_name(), '', time() - 42000, $params[\"path\"], $params[\"domain\"], $params[\"secure\"], $params[\"httponly\"]); } session_destroy(); header(\"Location: https://lostcave.ddnss.de/common/threadr/login/\\?error=session\"); die();}}",
"SET_LOGIN_VARIABLE":"if (isset($_SESSION['user_id'])) { $login = true; } else { $login = false; }",
"PLEAZE_NO_CACHE":"header('Cache-Control: no-cache, no-store, must-revalidate');header('Pragma: no-cache');header('Expires: 0');",
"FORCE_LOGOUT":"$_SESSION = array(); if (ini_get('session.use_cookies')) { $params = session_get_cookie_params(); setcookie(session_name(), '', time() - 42000, $params['path'], $params['domain'], $params['secure'], $params['httponly']);} session_destroy();",

7
variable_grabbler.py
View File

@ -6,9 +6,10 @@ Variable Grabbler - version 4.0_pre1
################################################################
# Changes in this version:
#===============================================================
# *"\?" in a variable will now be replaced with a simple ? before
# processing
# *commands are now not run over and over again fi not needed
# *"\?" in a variable will now be replaced with a simple ?
# before processing, remember to double escape that because
# json (=> \\?)
# *commands are now not run over and over again if not needed
#
################################################################