 |
|
26/11/2009, 10:06 PM
|
#1 |
|
High-roller
 Join Date: Aug 2009
Posts: 1,206
Reputation: 9
|
PHP Code [TROJAN?] Where?
I'm getting complaints from people who went to http://ucp.south-westrp.com/UCP.php and they said there received Trojan warning from AVAST, Can someone look at this code and see where the problem is at?
Code:
<html>
<head>
<?php
$sql = mysql_connect("BLOCKED", "BLOCKED", "BLOCKED");
mysql_select_db(BLOCKED, $sql);
if($_POST["fname"] && $_POST["ppassword"])
{
if(!isset($_POST['fname']) || !trim($_POST['fname'])) die('Please enter a name.');
//foreach($_POST as $name=>$val)
// {
// $_POST[$name] = mysql_real_escape_string($val);
//}
$fname = $_POST["fname"];
$ppassword = $_POST["ppassword"];
$sql = mysql_query("SELECT * FROM players WHERE Name = '$fname' AND Password = '$ppassword' LIMIT 1");
if(mysql_num_rows($sql)>0)
{
echo("You are logged in!");
}
else
{
echo("Password does not match, or there is no account!");
return 0;
}
}
else
{
echo("Password does not match, or there is no account!");
return 0;
}
?>
<?php
$sql = mysql_connect("BLOCKED", "BLOCKED", "BLOCKED");
$select = "SELECT * FROM players WHERE Name = '".mysql_real_escape_string($_POST['fname'])."'";
$query = mysql_query($select) or die('MySQL error: '.mysql_error());
mysql_select_db(BLOCKED, $sql);
while($list = mysql_fetch_array($query)) {
?>
<div style="color: #FFFFFF;">
Name: <?=$list['Name']?><br />
Level: <?=$list['PlayerLevel']?><br />
Admin Level: <?=$list['AdminLevel']?><br />
Moderator: <?=$list['Moderator']?><br />
Helper: <?=$list['Helper']?><br />
Money: <?=$list['Cash']?><br />
Skin: <?=$list['Skin']?><br />
Faction ID: <?=$list['Faction']?><br />
Faction Rank ID: <?=$list['Rank']?><br />
House Key: <?=$list['HouseKey']?><br />
Rent House Key: <?=$list['RHouseKey']?>
</div><br />
<?php
}
?>
</head>
<body>
<p><center><b>_</center></p>
<body background="http://img43.imageshack.us/img43/7428/hometu.jpg">
</body>
</html>
|
|
|
|
26/11/2009, 10:11 PM
|
#2 |
|
Big Clucker
Join Date: Aug 2009
Posts: 132
Reputation: 0
|
Re: PHP Code [TROJAN?] Where?
Hm, I get this warning usually if the Site has some popups with wierd content, do you have any popups, advertisements on your site?
|
|
|
|
|
26/11/2009, 10:11 PM
|
#3 | |
|
High-roller
Join Date: Aug 2009
Posts: 1,206
Reputation: 9
|
Re: PHP Code [TROJAN?] Where?
Quote:
|
|
|
|
|
|
26/11/2009, 10:12 PM
|
#4 |
|
Banned
 Join Date: Jan 2008
Location: Ontario, Canada
Posts: 471
Reputation: 0
|
Re: PHP Code [TROJAN?] Where?
Also recieved a warning from AVG and McAfee SiteAdvisor actually pulled me away from the site, because it breaches security. The trojan is coming from this page:
Code:
jl.chura.pl/rc Edit: The problem does not appear to be from the page, I can't find anything to do with iFrames in there. It might be coming from your SQL database. |
|
|
|
|
26/11/2009, 10:13 PM
|
#5 | |
|
High-roller
Join Date: Aug 2009
Posts: 1,206
Reputation: 9
|
Re: PHP Code [TROJAN?] Where?
Quote:
|
|
|
|
|
|
26/11/2009, 10:20 PM
|
#6 |
|
Big Clucker
Join Date: Aug 2009
Posts: 132
Reputation: 0
|
Re: PHP Code [TROJAN?] Where?
|
|
|
|
|
26/11/2009, 11:56 PM
|
#7 | |
|
High-roller
Join Date: Aug 2009
Posts: 1,206
Reputation: 9
|
Re: PHP Code [TROJAN?] Where?
Quote:
|
|
|
|
|
|
27/11/2009, 02:24 AM
|
#8 | ||
|
Big Clucker
Join Date: Aug 2009
Posts: 132
Reputation: 0
|
Re: PHP Code [TROJAN?] Where?
Quote:
|
||
|
|
|
|
27/11/2009, 02:26 AM
|
#9 | |||
|
High-roller
Join Date: Aug 2009
Posts: 1,206
Reputation: 9
|
Re: PHP Code [TROJAN?] Where?
Quote:
|
|||
|
|
|
|
27/11/2009, 02:31 AM
|
#10 |
|
High-roller
Join Date: Jun 2009
Location: Toronto
Posts: 1,494
Reputation: 143
|
Re: PHP Code [TROJAN?] Where?
try a different webhost - 110mb sucks ass, infact all free web hosting sucks imho.
http://justhost.com http://bluehost.com ^2 of the best rated cheap webhosts on the internet, ive used jh for around 6 months, never had any downtime or lag, if you need a cheap host you should go to them |
|
|
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Trojan.Win32.Agent.dfdu in samp-server.exe | DizeL-ZR- | Server Support | 26 | 11/01/2010 09:22 PM |
| Trojan.Win32.Agent.dfdu in samp-server.exe | omm | Server Support | 3 | 08/01/2010 01:33 PM |
| sa-mpserver.exe detected as a Trojan? | Giacomand | Server Support | 11 | 20/12/2009 02:19 PM |
| Trojan bots | Sayaron | Server Support | 6 | 20/08/2009 09:43 PM |
| cannot download samp client (Trojan:Win/Stration.A!dll) | valgaard_diablo | Client Support | 5 | 16/04/2009 12:07 PM |
Linear Mode
