Anyone know where I can get It was able to be downloaded awhile back but can't find it.. :(
Printable View
Anyone know where I can get It was able to be downloaded awhile back but can't find it.. :(
Ask Dentafrice, he made it.
Its the housekeeping edited thats all
http://habboring.com/hr2-webscripts.htm
and download housekeeping guy panel :)
HK V2 is a lot better, the coding is a LOT better and more secure, using Caleb's previous version is strongly not advised, even Caleb admitted that he was a bad coder when he coded his first version, it's also a hell of a lot more customizable.Quote:
Originally Posted by Avux
I really wouldn't advise using HK 1 or HKG.
Firstly HK1 is VERY badly coded (sorry caleb) and secondly HKG doesn't protect from html chars, sql injections ect on the request line.
Why not, use the one Invent! had coded. Forgot the name of that panel though.
It's Power Panel.Quote:
Originally Posted by xScoldx
Because that's just as poorly coded.Quote:
Originally Posted by xScoldx
HKV1 was poorly coded. HKV2 was poorly coded. HKG was even more poorly coded.
It's not going to matter though, if it works, it works. HKV2 never has had any security issues, it's just lacking features.
But in security wise HKG is safest right?
Marginally, yes. However, Housekeeping Guy is also unsecure. It was the first PHP project I ever did (my coding has improved a great deal now but I don't have enough time to take on new PHP projects anymore - especially free ones).
Guy could you tell me the exploits then i can patch them and re-release :D
:rolleyes::S Since when could you code PHP..Quote:
Originally Posted by HHGS.Net
Look at the frontend files and if you know about PHP you'll immediately see what's missing.Quote:
Originally Posted by HHGS.Net
Find them yourself. There's not too much to look through.Quote:
Originally Posted by HHGS.Net
*REMOVED* Im trying to learn PHP.Quote:
Originally Posted by Calgon
Edited by MattGarner (Forum Super Moderator): Please do not insult forum members.
Telling him to "find them himself", and "if he knew PHP, he could spot them.." isn't going to help him a bit.
Jackasses.
I'm guessing from what he said, there's probably some XSS flaws in the public files, although those should be cleaned out on input too..
On my version of thkg I have already mashed in the nareshs pm system (took about 10 minutes) so someone could do that pretty easily considering I suck at coding. And then beef up the security
If you looking for a **** panel, use dePanel. Its useless.