Test my security!

[Chippiewill]

My user system needs testing i just want to see how secure it is so can peeps try and break into it and then tell me where the flaws are ;D

Plus rep to all hacks

www.thehabbies.com/us/login.php <--- for user system

(when you,if you need to, login you will have to refesh the page after you have logged in, minor glitch and when you use the back button onto the homepage you will need to refesh also)

When you hack in just do something noticeable like add loads of furni to the shop or sumin.

ps i know somelinks are duffed but that was a glitch from when I was building it. I will fix soon

[Eccentric]

techtuts, proberly easy to get into ?!
ill have a look

sessions?

use my skin script !

[Chippiewill]

Ive done every securing script for nereshs user system known to man :eusa_danc

muhahahahahah
not enough
hahahahahahahahahahahhaha
If you hack it i will actually cry
but you wont muhahaha
---------------------------------------------------------------------
Back on topic:

Skin script?
for user system?
on techtuts or habboxforum?

[Eccentric]

on tt ill post link hang on http://www.techtuts.com/forums/index.php?showtopic=4299
farp,'s sucks cos its just css mine actually owns all and mine was the original one

[=gamemaster=]

Im on ur admin account

EDIT: Its just an account som1s made :p lol

Try an IP login thing? You log the ip a person logs in, and if som1 trys loggin in on a diff IP, then you gotta request...


sumthin like that?

[today]

Im on ur admin account

LOL

LOL, do stuff to prove it to him & explain how

[=gamemaster=]

Ive editted... I look in members and the account is rank: member

Im sure you can geuss the pass for ADMIN... lol

[Chippiewill]

Try an IP login thing? You log the ip a person logs in, and if som1 trys loggin in on a diff IP, then you gotta request...


sumthin like that?

i would but that would only wrk if someone has static ip

oh and yeh that password for the admin acc is easy to guess

[=gamemaster=]

Yh lol :p

[awelsh]

heres a flaw

I typed in deposit credits or whatever: -9999999999999999, heres what i got back

You have successfully deposited -9999999999999 points!
You now have -1.0E+13 points deposited!

now i tried doing deposit 909999999999999

You have successfully deposited 909999999 points!
You now have -1237483649 points deposited!

edit: then i did withdraw

You have successfully withdrawn -99999999999999999999 points!
You now have 9.99999999988E+19 points deposited!