GoFuckYourself.com - Adult Webmaster Forum
Page 3 of 4 < 12 3 4 >
Show 40 post(s) from this thread on one page

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   Fun With Tevs - Not Good If You Are Running Tevs (https://gfy.com/showthread.php?t=812300)

sortie 03-03-2008 09:56 PM
Quote:
Originally Posted by KrisKross (Post 13865211)
Are you retarded?
No, but you are because you can't read.

Here, read.... http://us3.php.net/security.cgi-bin


Your php is most likely running as cgi on the server yet you claim that
php is somehow better than cgi. :1orglaugh:1orglaugh:1orglaugh

KrisKross 03-03-2008 10:02 PM
Quote:
Originally Posted by sortie (Post 13865301)
No, but you are because you can't read.

Here, read.... http://us3.php.net/security.cgi-bin


Your php is most likely running as cgi on the server yet you claim that
php is somehow better than cgi. :1orglaugh:1orglaugh:1orglaugh
I made no such claims, tardo.

pr0 03-03-2008 10:54 PM
Quote:
Originally Posted by Zorgman (Post 13864924)
Hi Guys,

While I do not like the fact that teksonline has to resort to blackmail to tell someone that their is a problem, I thank him for pointing out a major problem that I didn't even know about.

Over 5 weeks ago I had a few programmers check the source code of TEVS for any errors I made. They came back with a few fixed and I put those fixes into place. I rezipped TEVS and uploaded it to the server. But it was my mistake I had uploaded it to the wrong directory. So up till now everyone has downloaded the old original files. - My Fault. I am sorry about that.

I believe a few installs that I did got the secure files but please contact me anyway with the below details.

If you have TEVS installed, please contact me right away and I will personally fix this for you.

Email: [email protected]

BTW - MrYellow, trying to force your services and script project on me and webmasters using TEVS is in way helping me or these webmasters. As I have pointed out, you took offense when I declined your offer and now you call me names like {wanked} and {tosser}. For what reason?

I think everyone here at GFY is totally cool with ya....theres always gonna be a few script kiddies with mental issues. Just shake it off & continue selling your product bro :thumbsup

Nookster 03-03-2008 11:35 PM
So wait...he didn't know about battling against simple sql injection??? That's unbelievable.

Nookster 03-03-2008 11:54 PM
Quote:
Originally Posted by Nookster (Post 13865716)
So wait...he didn't know about battling against simple sql injection??? That's unbelievable.
Please say it 'aint so mang. :(

Zorgman 03-04-2008 09:10 AM
Quote:
Originally Posted by pr0 (Post 13865553)
I think everyone here at GFY is totally cool with ya....theres always gonna be a few script kiddies with mental issues. Just shake it off & continue selling your product bro :thumbsup
Thanks pr0. I've updated about 200 sites today with the fixes and there is still about 220 to do. But we're get there. Another issue is, because the front end is raw code webmasters have changed their code so much that those fixes are no longer required. However 1 of them is a must and they have all done this themselves. Other webmasters who haven't changed the code at all really need to get this updated.

mrkris 03-04-2008 04:14 PM
As a developer, it saddens me to see people using the raw mysql* calls from PHP when you can use an abstraction layer that makes it DIFFICULT to allow SQL injection.

:2 cents:

farkedup 03-04-2008 04:29 PM
You mean like whats packaged in PEAR? the problem is on scripts like this you're stuck using some pretty basic things at times.

I think its kind of pushing things to ask people for extras like FFMPEG but if you want the really cool features you really do need some extras.

quantum-x 03-04-2008 05:00 PM
Quote:
Originally Posted by farkedup (Post 13864609)
have you rewritten 100% or just most?

here is a basic security function: http://entertainmentscript.com/sec.phps is 1 thing and running mysql_real_escape_string on EVERY user submitted $_POST or $_GET or $_REQUEST variable BEFORE inserting it into the DB will go a LONG ways.

This at the bottom of something like a config file will reject forms submitted from other places.
Code:
if (isset($_POST)){
$ip2 = (empty($_SERVER['REMOTE_ADDR'])) ? 'empty' : $_SERVER['REMOTE_ADDR'];
$ua = (empty($_SERVER['HTTP_USER_AGENT'])) ? 'empty' : $_SERVER['HTTP_USER_AGENT'];
$ru = (empty($_SERVER['REQUEST_URI'])) ? 'empty' : $_SERVER['REQUEST_URI'];
$rm = (empty($_SERVER['REQUEST_METHOD'])) ? 'empty' : $_SERVER['REQUEST_METHOD'];
if ($ua == "empty") { exit();} 
if ($ua == "-")        { exit();}
if ($ip2 == "empty"){ exit();}
if ($ru == "empty") {exit();} 
if ($rm == "empty") { exit();} 
}
Holy shit, that's worse than wordpress code.
I'm scared by the coding 'proficency' of people here.
Zorg: unless you're sanitising those strings further up, that's a nasty hole. And even if you are, not escaping is scary.

Eric 03-04-2008 05:16 PM
If you wanted to be banned alll you had to do was ask. Good Bye

ThumbLord 03-04-2008 05:18 PM
Eric at the Helm again, go baby go

Zorgman 03-04-2008 07:12 PM
teksonline
So Fucking Banned

Leason to everyone. Do NOT blackmail anyone in public.

Thanks Eric.

sortie 03-05-2008 11:19 AM
http://blackmonsters.com/backfire.jpg


More expedient tools are in development :

http://blackmonsters.com/GunBackfire.gif

WarChild 03-05-2008 11:23 AM
TEVS ... I guess it's kind of a cute little script. :1orglaugh:1orglaugh:1orglaugh

lazycash 03-05-2008 11:45 AM
I hope if anything good comes out of this thread is that Zorg works on securing TEVS. I just bought the script and am clueless on coding, but don't exactly feel comfortable installing the script based on some of the accusations in this script.

Gonzozilla 03-05-2008 01:32 PM
Quote:
Originally Posted by teksonline (Post 13863783)
Want the truth?

I really dont give to shits anymore about anyone on or in this industry, i have 12 years of business relationships and only thing I have learned, is oyur all skillless, you're all thieves, and you would all ass rape your own mothers if given the chance
Looks like you don't know the difference between "to" "too" & "two".

You don't "give two shits". :thumbsup

dozey 03-05-2008 04:31 PM
Quote:
Originally Posted by sortie (Post 13874276)
For every charlatan who had a smart word in this thread; just wait until you're spewing forth the same contempt as some script kiddie sodomises your cookie cutter tube site.

I guess when mr. exit said "php combined with mysql is known for this," what he probably meant was "php / mysql developers are known to develop abhorrent code like this." Which is absolutely true.

Make no mistake, there are time-honoured patterns and practises to avoid this exact situation. They exist for a reason. Does TEVS adhere to any of them? I sincerely doubt it. (no, inline mysql_real_whatever doesn't count)

That said, TEVS might well be the best commercial script out there. That's just the way most of these scripts are.

But by all means, persist with the usual webmaster antics, semantics and disputes. The objective truth of the matter will be waiting to shaft you and your pride though.

:2 cents:

dozey 03-05-2008 04:46 PM
Quote:
Originally Posted by farkedup (Post 13864609)
Code:
if (isset($_POST)){
$ip2 = (empty($_SERVER['REMOTE_ADDR'])) ? 'empty' : $_SERVER['REMOTE_ADDR'];
$ua = (empty($_SERVER['HTTP_USER_AGENT'])) ? 'empty' : $_SERVER['HTTP_USER_AGENT'];
$ru = (empty($_SERVER['REQUEST_URI'])) ? 'empty' : $_SERVER['REQUEST_URI'];
$rm = (empty($_SERVER['REQUEST_METHOD'])) ? 'empty' : $_SERVER['REQUEST_METHOD'];
if ($ua == "empty") { exit();} 
if ($ua == "-")        { exit();}
if ($ip2 == "empty"){ exit();}
if ($ru == "empty") {exit();} 
if ($rm == "empty") { exit();} 
}
Concise version follows

Code:
die("Incompetent");

sortie 03-05-2008 05:15 PM
Quote:
Originally Posted by dozey (Post 13876481)
For every charlatan who had a smart word in this thread; just wait until you're spewing forth the same contempt as some script kiddie sodomises your cookie cutter tube site.

I guess when mr. exit said "php combined with mysql is known for this," what he probably meant was "php / mysql developers are known to develop abhorrent code like this." Which is absolutely true.

Make no mistake, there are time-honoured patterns and practises to avoid this exact situation. They exist for a reason. Does TEVS adhere to any of them? I sincerely doubt it. (no, inline mysql_real_whatever doesn't count)

That said, TEVS might well be the best commercial script out there. That's just the way most of these scripts are.

But by all means, persist with the usual webmaster antics, semantics and disputes. The objective truth of the matter will be waiting to shaft you and your pride though.

:2 cents:
Whatever dude.

You need to develope a sense of humor or either you don't read worth a shit.

And by the fucking way I'm that one who made the php/sql comment.

The fact is that if someone programs in php it's because the can't fucking learn PERL or C.

Php is basically a cgi script written in C to make things easier to program.
It's only "needed" by idiots.

And a load of idiots don't even know that php runs as cgi and claim php
will replace cgi. :1orglaugh:1orglaugh:1orglaugh:1orglaugh


Here read this : http://en.wikipedia.org/wiki/Php


Quote:
Originally Posted by Wiki
PHP was written as a set of Common Gateway Interface (CGI) binaries in the C programming language by the Danish/Greenlandic programmer Rasmus Lerdorf in 1994

dozey 03-05-2008 05:34 PM
I know you made the comment, sortie = French for exit. I didn't catch your humor, no. Can't help but look at these issues in dismay.

I'm won't risk affirming anything you said in detail, just incase I miss more humor :)
Suffice to say it is all true and causes ongoing problems.

dozey 03-05-2008 05:48 PM
Sortie, I hope you didn't take the backfire quote as a personal retort.

The inference was a double irony for any complacent individuals, just incase anyone / everyone else missed it.

psili 03-05-2008 06:03 PM
Watching self-glorified engineers spank their own meat in on an adult message board in the name of "their practice" sucks. Go back to slashdot, you fucktards.

I find it funny someone posts "if someone can't (doesn't) program in perl or c"... blah blah blah. WTF? Does someone who posts something like that not respect some javascript? How about a savage combination of HTML and CSS that's easily integrated into a template system that works across browsers and is pretty much plug-n'-play?

Sanitizing database inputs (prepared statements) is necessary regardless of what you code / script in. Ripping on people's abilities because they don't code in some language is retarded.

*** Edit:
I have no edit.
Just my opinion.

sortie 03-05-2008 06:30 PM
Quote:
Originally Posted by psili (Post 13876954)
Watching self-glorified engineers spank their own meat in on an adult message board in the name of "their practice" sucks. Go back to slashdot, you fucktards.

I find it funny someone posts "if someone can't (doesn't) program in perl or c"... blah blah blah. WTF? Does someone who posts something like that not respect some javascript? How about a savage combination of HTML and CSS that's easily integrated into a template system that works across browsers and is pretty much plug-n'-play?

Sanitizing database inputs (prepared statements) is necessary regardless of what you code / script in. Ripping on people's abilities because they don't code in some language is retarded.

*** Edit:
I have no edit.
Just my opinion.

Hey, I didn't say anyting about javascript or CSS or HTML,
But it's just a fact that those things don't have jack shit to do with backend
programming to run a website.

It's "fluff" for the front end. PHP was design to handle "fluff" to the frontend
with a little extra data retrieval functions.

The guy who wrote PHP was trying to make an easier way to show his
resume. :1orglaugh He wasn't making a search engine.

It's fucking fluff and Yahoo or google aint ever going to be developed as
a php application. They might make a few cool pages with it but that's it.

GFY is done in PHP and mySQL. So...how many times did you have to click to get this fucking page to load. :1orglaugh

I can see the sql tables wobbling and straining everytime I click this site.
Thank god GFY isn't serving up video too. This shit would be dead already.

sortie 03-05-2008 06:40 PM
Quote:
Originally Posted by dozey (Post 13876884)
Sortie, I hope you didn't take the backfire quote as a personal retort.

The inference was a double irony for any complacent individuals, just incase anyone / everyone else missed it.
Don't mind me much. I like talking shit so don't be offended.

I agree with you about the ones running the script that acted like the
orignal poster was an idiot; but he acted like an idiot so it went both ways.

dozey 03-05-2008 06:40 PM
Like I said, the usual webmaster antics, semantics and disputes.

Point being, the quality in many of these products leaves MUCH to be desired.

Furthermore, without being too petty, most of these abominations do come from a certain demographic. Choose to ignore at your own despair.

farkedup 03-05-2008 06:51 PM
I learned perl way before I learned PHP. When I was learning web programming it was AFTER the usual rounds of Visual Basic and later C.

I will admit that one of the biggest reasons why I dropped perl right about the time PHP4 came out is because of how EASY it is to do about anything you can think of.

What I use perl for:
+ Many server side tools, it is simply more powerfull than PHP

What does PHP have a huge edge in?
1) Rapid development
2) Handles high traffic sites a LOT better than perl, there is simply no comparison. As a Server Side language for high traffic sites there is simply no comparison!
3) Easy to find a programmer for mods
4) Anything using a DB such as MySQL perl's DBI is a bad joke.

When developing a script if you can make basically every page a flatfile then by all means perl is a viable option. but of course this is basically comparing SHTML pages using SSI's to a normal .php page just using include('/path/to/file');

When developing scripts that you know will take a LOT of CPU power and you don't need to have many users perl is better.

You're retarded if you use a blanket statement like PHP is better or Perl is better or even more retarded if you say that a PHP programmer only uses it because he can't learn PERL or C.

Coming from somebody who has completely made his living off of the web for 10 years and been a programmer and server builder/administrator this whole time too I bet that sortie isn't smart enough to make even a basic tube script in PHP/MySQL.

THIS IS A CHALLENGE, you think you're smart, I am preparing to release a free tube script which I did 90&#37; of it in a single day... Make something at least as good as that by time I release mine and hell even sell it for $5 or give it away and you'll have nothing but respect from me and plenty of others if you put your time/money where that bigass mouth of yours is.

sortie 03-05-2008 07:14 PM
Quote:
Originally Posted by farkedup (Post 13877208)
I learned perl way before I learned PHP. When I was learning web programming it was AFTER the usual rounds of Visual Basic and later C.

I will admit that one of the biggest reasons why I dropped perl right about the time PHP4 came out is because of how EASY it is to do about anything you can think of.

What I use perl for:
+ Many server side tools, it is simply more powerfull than PHP

What does PHP have a huge edge in?
1) Rapid development
2) Handles high traffic sites a LOT better than perl, there is simply no comparison. As a Server Side language for high traffic sites there is simply no comparison!
3) Easy to find a programmer for mods
4) Anything using a DB such as MySQL perl's DBI is a bad joke.

When developing a script if you can make basically every page a flatfile then by all means perl is a viable option. but of course this is basically comparing SHTML pages using SSI's to a normal .php page just using include('/path/to/file');

When developing scripts that you know will take a LOT of CPU power and you don't need to have many users perl is better.

You're retarded if you use a blanket statement like PHP is better or Perl is better or even more retarded if you say that a PHP programmer only uses it because he can't learn PERL or C.

Coming from somebody who has completely made his living off of the web for 10 years and been a programmer and server builder/administrator this whole time too I bet that sortie isn't smart enough to make even a basic tube script in PHP/MySQL.

THIS IS A CHALLENGE, you think you're smart, I am preparing to release a free tube script which I did 90% of it in a single day... Make something at least as good as that by time I release mine and hell even sell it for $5 or give it away and you'll have nothing but respect from me and plenty of others if you put your time/money where that bigass mouth of yours is.
:1orglaugh

You quit PERL because you suck at at thinking.

You thought PHP would make things easy for you but it only made things
easy for hackers and that says all that needs to be said about your thinking.

Good luck patching your shit while I'm at the bar fucking chicks. :1orglaugh

farkedup 03-05-2008 07:21 PM
Quote:
Originally Posted by sortie (Post 13877322)
Good luck patching your shit while I'm at the bar fucking chicks. :1orglaugh
fat bar skanks aren't even fun.... any of the ones that will fuck AT the bar I'd pass on...

Your script sales won't buy the ladies many drinks thats for sure ;) I honestly don't think I've seen a single person say they've bought your script and are actually HAPPY with it LMAO massive numbers of happy customers are about all that matter.

baddog 03-05-2008 07:26 PM
Quote:
Originally Posted by sortie (Post 13877322)
:1orglaugh

You quit PERL because you suck at at thinking.
Not a programmer, but I would suggest that PHP is more lucrative than PERL these days.

I wish I could find a decent PERL programmer.

Nookster 03-05-2008 07:36 PM
Quote:
Originally Posted by sortie (Post 13877095)
Hey, I didn't say anyting about javascript or CSS or HTML,
But it's just a fact that those things don't have jack shit to do with backend
programming to run a website.

It's "fluff" for the front end. PHP was design to handle "fluff" to the frontend
with a little extra data retrieval functions.

The guy who wrote PHP was trying to make an easier way to show his
resume. :1orglaugh He wasn't making a search engine.

It's fucking fluff and Yahoo or google aint ever going to be developed as
a php application. They might make a few cool pages with it but that's it.

GFY is done in PHP and mySQL. So...how many times did you have to click to get this fucking page to load. :1orglaugh

I can see the sql tables wobbling and straining everytime I click this site.
Thank god GFY isn't serving up video too. This shit would be dead already.
That's kinda funny you think like that. Do you know what PHP is coded in?? Take a wild guess.

sortie 03-05-2008 07:49 PM
Quote:
Originally Posted by Nookster (Post 13877461)
That's kinda funny you think like that. Do you know what PHP is coded in?? Take a wild guess.
It's kind of funny that I already posted that PHP is a CGI script written
in C but you didn't bother to read that and think you are making a point.

V_RocKs 03-05-2008 07:52 PM
Quote:
Originally Posted by sortie (Post 13865170)
Well, I'd say that it's impossible to inject something into a
mysql database that doesn't even exist.

But maybe you know something I dont know.

You did read what the stated problem was didn't you?

And for your information many servers, if not most, are now running php as cgi.

http://us3.php.net/security.cgi-bin

Read that. Please fucking read it!!!! :mad::mad::mad:


The notion that running php means never running cgi is the biggest lie ever sold!
%00;ls -la

sortie 03-05-2008 08:00 PM
Quote:
Originally Posted by baddog (Post 13877393)
Not a programmer, but I would suggest that PHP is more lucrative than PERL these days.

I wish I could find a decent PERL programmer.

Nobody wants to program for you because you talk too much shit.

Lots of people are looking for PHP programmers, that is true.
But the reason they are looking is beacause they are cheaper than
PERL or C programmers.

And they get what they pay for.

Zorgman 03-05-2008 08:00 PM
Just for the record.

TEVS has been fixed of this security issue. We're in the process of finishing the last of the domains using TEVS -- which atm is over 400 domains.

sortie 03-05-2008 08:05 PM
Quote:
Originally Posted by V_RocKs (Post 13877588)
%00;ls -la
open(A,"<.......

open(A,">.......

fuzebox 03-05-2008 08:38 PM
I started ignoring teksonline threads after he accused 2bet.com of being rigged because I knocked him out of a tournament...

Useless Warrior 03-05-2008 10:46 PM
dozey is not only well spoken, he may possibly be psychic as well.
Quote:
Originally Posted by dozey (Post 13876481)
But by all means, persist with the usual webmaster antics, semantics and disputes.
Quote:
Originally Posted by sortie
Good luck patching your shit while I'm at the bar fucking chicks.
Enough said?

The Sultan Of Smut 03-06-2008 12:52 AM
Quote:
Originally Posted by sortie (Post 13877095)
It's fucking fluff and Yahoo or google aint ever going to be developed as
a php application.
http://www.mysql.com/news-and-events...o_finance.html

bhutocracy 03-06-2008 12:59 AM
Gawd.. the Very Hungry Caterpillar.. haven't seen that in a few decades.

tiger 03-06-2008 01:11 AM
Just wondering if it was is such a shitty script why you bought multiple licenses of it?


All times are GMT -7. The time now is 01:17 AM.
Page 3 of 4 < 12 3 4 >
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123