Simple linkex exploit. BEWARE.

[cykoe6]

No apologies for shitty code?

Why should he apologize when the script is free? I think it is a very useful script considering it is free and I apprecaite the quick action to fix the problem.

[v0id]

No apologies for shitty code?

I don't see why I should. As I recall you either have or are using LinkEX on your site(s), never heard any "thank you" from you?

The only thing I regret is the trouble people is going to have, since they have to update their installations, because of a stupid mistake.
There are properly many more bugs in LinkEX, but you get what you pay for, and I don't feel like apologise for every one of them. You get the script for free, and in return help me come up with ideas and report bugs.

- v0id

[Libertine]

You get the script for free, and in return help me come up with ideas and report bugs.

Protip: if you want ideas and bug reports, make your code readable. Hell, you could even splurge and add some comments.

[Doctor Feelgood]

does the uodate still use this path for cron to check backlinks?
my-site.com/linkex/index.php > /dev/null

[v0id]

does the uodate still use this path for cron to check backlinks?
my-site.com/linkex/index.php > /dev/null

Yup

/path/to/php /path/to/your/linkex/index.php[ --verbose]

will check the backlinks, use the --verbose to have it write the results to stdout

[KrisKross]

I don't see why I should. As I recall you either have or are using LinkEX on your site(s), never heard any "thank you" from you?

The only thing I regret is the trouble people is going to have, since they have to update their installations, because of a stupid mistake.
There are properly many more bugs in LinkEX, but you get what you pay for, and I don't feel like apologise for every one of them. You get the script for free, and in return help me come up with ideas and report bugs.

- v0id

I don't use your script and don't intend to.

When you release code for people to use across hundreds of sites, it's common courtesy to ensure your code is readable and not full of major security holes.

People with no scripting knowledge trust that YOU know what you're doing and that the code will be safe.

[v0id]

I don't use your script and don't intend to.

Sorry my bad, just thought you did based on a post like this gofuckyourself.com/showpost.php?p=12746111&postcount=8

When you release code for people to use across hundreds of sites, it's common courtesy to ensure your code is readable and not full of major security holes.

It is readable, perhaps not formatted, but many IDE will do that for you if you need it.

Of course it should not have security holes, no doubt about that, but this is the first major security hole since the first release, which is dated 20060311.

I have no intension of putting security holes into the script, but it's human made, errors are bound to occur. I can think of some blogging platform used on many many more sites that also has security holes found every now and then.

I don't tell people to use my script, and I never said it's bug free. It's free and you get what you pay for.

One more thing, I diden't intend it to be used across hundres of sites, it should be used across one hundred millions of sites!

[fluffygrrl]

I don't see why I should. As I recall you either have or are using LinkEX on your site(s), never heard any "thank you" from you?

The only thing I regret is the trouble people is going to have, since they have to update their installations, because of a stupid mistake.
There are properly many more bugs in LinkEX, but you get what you pay for, and I don't feel like apologise for every one of them. You get the script for free, and in return help me come up with ideas and report bugs.

- v0id

Yesm okay, fair enough.

Would you stick the spacing back in ? Please ?

[v0id]

Sure thing.. I'll just have to clean up my messy comments. I'll let you know

[u-Bob]

Windows = shitty code

and this is relevant how exactly...?

[xroach]

that's probably the most nub security flaw you could write into a program. i'd expect it says something about the rest of the code. this thread is totally deserving, a public service and probably the quickest way to get it fixed. though i'd not be running that script at all anymore until i'd read through it myself.

[fluffygrrl]

though i'd not be running that script at all anymore until i'd read through it myself.

From what the man's saying, he's gonna fix it so you can do just that.

[v0id]

released a new version with the spaces, I'll make it better formatted in the future, but this will do for now.
Have fun, and please report any bugs you encounter

[fluffygrrl]

released a new version with the spaces, I'll make it better formatted in the future, but this will do for now.
Have fun, and please report any bugs you encounter

There you go. Time to change my siggy then.

[tenderobject]

Yup

/path/to/php /path/to/your/linkex/index.php[ --verbose]

will check the backlinks, use the --verbose to have it write the results to stdout

does the code you gave me to check backlinks will still work with this update

anyways, ive just upgraded my linkEx to 6 of my sites. heh when will you release a paid linkEx which we can manage linkEx sites in one directory? upgrade/add/check links in one dmin would be awesome man. i won't hesitate to pay for the script.

[Why]

the fix is retardedly easy. if you are using linkex and it concerns you, go fix it.

[d-null]

I'm impressed by LinkEX's attitude, seems like a really good guy

[pussyluver]

Thanks for the use of the FREE script. Some applications call for a simple easy solution. LinkEx fills a need.

Your thick skin in taking the abuse is also appreciated and respected.

[zigx]

can linkex handle a large site??

[minusonebit]

Bump for those who have not yet seen this and fixed their shit... :-)

[d-null]

bump again