Radio DJ Panel v3 - Beta Testing

[QuickScriptz]

This is the first public announcement of the new v3 of my Radio DJ Panel script! We are currently in the process of developing and testing our latest and greatest version, v3, and we need Beta Testers!

If you would be interested in being a Beta Tester for this cool new project please leave a reply just with some general info about your site and where it can be found and we will contact you if you are accepted!

Current Version
Version: 2.2
Download: http://www.quickscriptz.uni.cc/v3/freebies-radio.php

For more info on our scripts and to download the previous versions of the Radio DJ Panel script you can visit www.quickscriptz.ca.kz (http://www.quickscriptz.ca.kz).

[lew!]

Nice site. Ill be a Tester.

Site: www.habbohand.co.uk
Description: A brand new habbo hotel fansite that is dedicated to bringing the latest news and media to you :P

[DJ_CJ]

hi, ill put the panel on my site, i love testing lol. Its a habbo fansite, just opening, its called habhop.co.uk

[bad-dj]

well i could do some betta testing on my localhost server and test it from top to bot.

[hybride]

My site is GIANT Developments / Habbo Ring.

I'll be happy to help ;-)

[Florx]

il help im well impressed with the old one. im using it on my site www.habblio.com =D

[QuickScriptz]

Ok, all the support is great! We definitely shouldn't need any further Beta Testers for the time being....

We are currently just finishing the updates to the Panel, so the Testers will be contacted when needed!

Thanks for all the support!

[bad-dj]

this verion sound like its going to be good :)

[QuickScriptz]

Progress Update

Finished
-Major Security Updates (Re-did Entire System)
-Complete Makeover Of Look
-Revamped [Encrypted] Session Handling
-User Validating Check Update
-Added Editable Rules Section

To Do...
-Add The Secret New Features ;)
-Timetable Booking Fixes
-Admin Login Logs
-Automatic Script Updater

So at this time it looks like I should be able to finish it all and get some Beta Testing done for the release on March 30th, so keep an eye out for future updates!

[hybride]

Lovely work. I think April will be an interesting month for DJ Panels, Kristall-Panel and Radio DJ Panel will be released pretty much at the same time and PowerPanel will be here soon.

[Mr.OSH]

Cool, hope you do well and good luck :)

[CFairweather]

Ill BETA Test x] BobbleTech.info Maintenance At the moment tho =[

[QuickScriptz]

Progress Update #2

Finished Since Last Update
-Ability To Switch Between Preset Styles
-Timetable (re-coded, no longer using the faulty Kristall Panel timetable)
-Rules Page (admin can edit/add rules)
-News System (add, edit, delete)
-File Uploads (admin only - ability to delete files from within panel)
-Login Logs (every attempt is recorded)
-Navigation Changes/Edit
-Automatic Script Updater

To Come...
-DJ "Check In" System (like a clock in/out system @ work or something)
-DJ Profile System (undecided, might or might not happen)
-Style Community System (admin can download new styles)
-Other Secret Ideas (maybe...)

Release Status
We are currently on track for March 30!

Note: Any feature suggestions are more than welcome - post them below!

[bad-dj]

ok i have some feature suggestions.

1)a way of delete one should out at a time and having the delete all shouts.

2)Dj banner so like when making some one a dj login you can upload a banner for them so when they dj they can set the banner so people can see it.

3)a bit so you can trun the panel off and on so like when off only the admins can login and if they are not a admin when the panel is off when they try to login it wil say some ting like sory panel is off line and when on they can all login.

[QuickScriptz]

That's right.... read the title again!

I am very pleased to inform you that I have completed v3 of the Radio DJ Panel and it is now available for Beta Testing to a lucky select few! :o So this is just a "head-up" to everyone who volunteered earlier that they will be receiving more info shortly.

Note: Beta Testers will be eligible for cool panel extras not available to normal downloaders when the trials are over! :D

[bad-dj]

its good to see a panel that comes nicely and by the sound of it, it will be a good one.

[Lysine]

I will be a beta tester :) For my site www.thishabbo.net

[Jordan,]

Well in the last one you had a ip alert why dont you get a full site alert?

[QuickScriptz]

The Beta Testers have been choosen, we currently have 4 users who are going to be testing our panel on their site. Links to each site are below:

JBrooks
http://www.airwavesfm.ca

bad-dj
n/a

hybride
http://www.habboring.com

RaveFM
http://www.habbohand.co.uk

Beta Testers were choosen based on their site, forum rep, and various other things. If you were not choosen then sorry, but March 30th is only 8 days away so keep watching this thread! ;)

[Agnostic Bear]

I am looking forward to seeing this.
My dev machines are looking forward to going through your coding.

[bad-dj]

The Beta Testers have been choosen, we currently have 4 users who are going to be testing our panel on their site. Links to each site are below:

JBrooks
http://www.airwavesfm.ca

bad-dj
n/a

hybride
http://www.habboring.com

RaveFM
http://www.habbohand.co.uk

Beta Testers were choosen based on their site, forum rep, and various other things. If you were not choosen then sorry, but March 30th is only 8 days away so keep watching this thread! ;)

cool i am a betta tester ok i will test it untill it can not be tested no more oh ok i had to PM you there Scriptz.

[QuickScriptz]

@Lol - does that basically mean you will just try and hack the system and exploit it ;)

[Agnostic Bear]

@Lol - does that basically mean you will just try and hack the system and exploit it ;)


Been there done that already on one of your beta testers ;)

Managed to get the sql from the users table and display everyones password and username =D

[QuickScriptz]

Lol - nice :P But this time I got smart and used encryption! See displaying the data from the tables is the easy part, its trying to break the irreversible md5 encryption that might give you a tough time ;)

[F32]

cool i am a betta tester ok i will test it untill it can not be tested no more oh ok i had to PM you there Scriptz.
what's a betta tester?

[QuickScriptz]

what's a betta tester?

hahaha... your so funny :P anyways... ya....

@Lol - fyi if you find any vulnerabilities mind lettin me know? :rolleyes:

7 DAYS TILL PUBLIC RELEASE

[Agnostic Bear]

hahaha... your so funny :P anyways... ya....

@Lol - fyi if you find any vulnerabilities mind lettin me know? :rolleyes:

7 DAYS TILL PUBLIC RELEASE

Don't let people use php code anywhere in the panel, I got in, took the pass to an md5 cracking website and got it in like 2 seconds cause it was already stored >_> :P

Teh government moved away from sha1 and md5

Also, that could lead to people deleting the panel >_>

[QuickScriptz]

Hmm.... well we can't have that now can we? Lol... anyways would using crypt() be a better encryption option? And what do you mean by dont let people use php code anywhere in the panel? As of right now they can't?

[Agnostic Bear]

Hmm.... well we can't have that now can we? Lol... anyways would using crypt() be a better encryption option? And what do you mean by dont let people use php code anywhere in the panel? As of right now they can't?


They can in the admin message if memory serves, and make a custom encryption like this:



function encrypt($string)
{
$string2 = strrev($string);
$string = md5(sha1($string));
$string2 = crc32($string2);
$string = $string . $string2;
$string = sha1($string);
$string2 = strlen($string);
$string2 = $string2 * 2;
$string2 = crypt($string2);
$string = sha1(md5(crc32(base64_encode(crypt($string . $string2)))));
return $string;
}


LOL

[QuickScriptz]

Holy! I have never even heard of half the encryptions you used there! LMAO

But seriously would something like that but customized work? Just randomly encrypt the passwords so many times that it becomes just too confusing to try and decrypt it? So would something like this work....?


function encrypt($string)
{
$string = strrev($string);
$string2 = md5(sha1($string));
$string3 = strrev($string2);
$string4 = base64_encode(md5($string3));
$string5 = crypt($string4);
return $string5;
}

[Agnostic Bear]

Holy! I have never even heard of half the encryptions you used there! LMAO

But seriously would something like that but customized work? Just randomly encrypt the passwords so many times that it becomes just too confusing to try and decrypt it? So would something like this work....?


function encrypt($string)
{
$string = strrev($string);
$string2 = md5(sha1($string));
$string3 = strrev($string2);
$string4 = base64_encode(md5($string3));
$string5 = crypt($string4);
return $string5;
}

Yep, looks fine to me

[QuickScriptz]

Ok, thanks for your help! I have customized the encryption function you gave me an example of - but I won't be puclisizing it anywhere ;)

EDIT: +rep thxs

[timROGERS]

By the way, you shouldn't ever decrypt what's in your database - just encrypt the user input in the same way as you did, and then compare the two encrypted versions :)

[QuickScriptz]

Lol ya - I definitely know that ;) What I was doing in the beta version was just using md5 until Lol "opened my eyes" so ya... but thxs for the input!

[timROGERS]

It's fine just to use md5 actually, it's very secure. The only way of cracking it in a sensible amount of time is with a dictionary, and not everyone has dictionary passwords. Base64 is a waste of time, as you can just decrypt it in 5 seconds.

[QuickScriptz]

It's fine just to use md5 actually, it's very secure. The only way of cracking it in a sensible amount of time is with a dictionary, and not everyone has dictionary passwords.

Ya, very secure indeed, my first result off Google: (i thought the same thing before Lolcopters came along)

http://www.md5decrypter.com/

[timROGERS]

Ya, very secure indeed, my first result off Google: (i thought the same thing before Lolcopters came along)

http://www.md5decrypter.com/

That site only works with dictionary words, or words that have already been used on the site. It misleads you, as if you encrypt on there, when you decrypt it will work, and it'll look like it will work on any hash.

[Agnostic Bear]

That site only works with dictionary words, or words that have already been used on the site. It misleads you, as if you encrypt on there, when you decrypt it will work, and it'll look like it will work on any hash.

Milw0rm > MD5

it'll crack any md5 hashed thingy ;)

[bad-dj]

i have to ask why do a lot of people can not stop them self and like wast there time by getting in to other people panels and so on?

[Recursion]

MD5 Hash is un crackable. The ones you will find on the internet will have a database of words and their Hashes.

Say If i used this as a password: J4ff4 C4k3s!

It could not be cracked.

[timROGERS]

MD5 Hash is un crackable. The ones you will find on the internet will have a database of words and their Hashes.

Say If i used this as a password: J4ff4 C4k3s!

It could not be cracked.

Exactly, at least someone who understands. MD5 has not been cracked, it's just that if you use a dictionary word, it's easy.

[QuickScriptz]

Ok now children... calm down... anyways... :)

Just an update that we are currently on track for the March 30th Release and that the download link will likely be posted around 5-7PM that night.

3 DAYS!!

[bad-dj]

cool can not wait for it (and still no more bugs i can find in the beta)

[Agnostic Bear]

Exactly, at least someone who understands. MD5 has not been cracked, it's just that if you use a dictionary word, it's easy.

How can you be the technical dude if you don't even know that md5 can be decrypted if given a long enough time.
Edit: That means any string.

[QuickScriptz]

Ok... we are still going on about this? Anyways just fyi to everyone here.... the National Security Agency (NSA) have this little machine that they like to call:


our super-duper can break any encryption code-breaking thingymabober

Which can basically crack anything you feed it - and no offense to anyone here but if a human created the encryption then chances are a human can also break the encryption. :)

[CHTom]

Just thought that I'd mention that salted MD5 passwords take years to decode, lol...VBulletin, IPB, PHPBB etc... all salt their MD5 strings to ensure safety.

Although, If you want to be extra carefull, sha1(md5($variable)); lol

[Agnostic Bear]

Just thought that I'd mention that salted MD5 passwords take years to decode, lol...VBulletin, IPB, PHPBB etc... all salt their MD5 strings to ensure safety.

Although, If you want to be extra carefull, sha1(md5($variable)); lol

Days to decode actually :P

[Florx]

Ok... we are still going on about this? Anyways just fyi to everyone here.... the National Security Agency (NSA) have this little machine that they like to call:



Which can basically crack anything you feed it - and no offense to anyone here but if a human created the encryption then chances are a human can also break the encryption. :)
thats quite true. No matter how complex you encode it - it can be decoded.


unless its an eternity code (you make up a new language and base it on that)

[hybride]

1 day.

[YouFail]

It's fine just to use md5 actually, it's very secure. The only way of cracking it in a sensible amount of time is with a dictionary, and not everyone has dictionary passwords. Base64 is a waste of time, as you can just decrypt it in 5 seconds.

Hate to call you a noob but there are things called bruteforcers
John The Ripper, Cain and Abel to name two.

Seriously, depending on complexity of passwords can do them in seconds trying up to 5,000 passwords a minute.

A dictionary attack rarely works as not many people put something like "cabbage" as their password.

[bad-dj]

well it should be out soon in Australia it's the 30 of march so to night it should be out :)

[Florx]

wt time is it out????? lol

[YouFail]

wt time is it out????? lol

Supposedly around 20 hours ago o.O
Unless release has been delayed

[Agnostic Bear]

Supposedly around 20 hours ago o.O
Unless release has been delayed

He said 30th march which is today so in a few hours.