Adding chapter 32,33,34,35 and fixing and adjusting database backend …

…for newer lessons along with main page corrections
ashurwu · May 1, 2013 · 779a155 · 779a155
1 parent 16a8522
commit 779a155
Show file tree

Hide file tree

Showing 275 changed files with 537 additions and 10 deletions.
diff --git a/Less-1/index.php b/Less-1/index.php
diff --git a/Less-1/result.txt b/Less-1/result.txt
diff --git a/Less-10/index.php b/Less-10/index.php
diff --git a/Less-11/index.php b/Less-11/index.php
diff --git a/Less-12/index.php b/Less-12/index.php
diff --git a/Less-13/index.php b/Less-13/index.php
diff --git a/Less-14/index.php b/Less-14/index.php
diff --git a/Less-15/index.php b/Less-15/index.php
diff --git a/Less-16/index.php b/Less-16/index.php
diff --git a/Less-17/index.php b/Less-17/index.php
diff --git a/Less-18/index.php b/Less-18/index.php
diff --git a/Less-19/index.php b/Less-19/index.php
diff --git a/Less-2/index.php b/Less-2/index.php
diff --git a/Less-2/result.txt b/Less-2/result.txt
diff --git a/Less-21/result.txt b/Less-21/result.txt
diff --git a/Less-22/result.txt b/Less-22/result.txt
diff --git a/Less-23/index.php b/Less-23/index.php
diff --git a/Less-24/Logged-in.php b/Less-24/Logged-in.php
diff --git a/Less-24/failed.php b/Less-24/failed.php
diff --git a/Less-24/forgot_password.php b/Less-24/forgot_password.php
diff --git a/Less-24/index.php b/Less-24/index.php
diff --git a/Less-24/logged-in.php b/Less-24/logged-in.php
diff --git a/Less-24/login.php b/Less-24/login.php
diff --git a/Less-24/login_create.php b/Less-24/login_create.php
diff --git a/Less-24/new_user.php b/Less-24/new_user.php
diff --git a/Less-24/pass_change.php b/Less-24/pass_change.php
diff --git a/Less-25/index.php b/Less-25/index.php
diff --git a/Less-25a/index.php b/Less-25a/index.php
diff --git a/Less-25a/result.txt b/Less-25a/result.txt
diff --git a/Less-26/index.php b/Less-26/index.php
diff --git a/Less-26/result.txt b/Less-26/result.txt
diff --git a/Less-26a/index.php b/Less-26a/index.php
diff --git a/Less-27/index.php b/Less-27/index.php
diff --git a/Less-27/result.txt b/Less-27/result.txt
diff --git a/Less-27a/index.php b/Less-27a/index.php
diff --git a/Less-28/index.php b/Less-28/index.php
diff --git a/Less-28a/index.php b/Less-28a/index.php
diff --git a/Less-29/hacked.php b/Less-29/hacked.php
diff --git a/Less-29/index.php b/Less-29/index.php
diff --git a/Less-29/login.php b/Less-29/login.php
diff --git a/Less-3/index.php b/Less-3/index.php
diff --git a/Less-30/hacked.php b/Less-30/hacked.php
diff --git a/Less-30/index.php b/Less-30/index.php
diff --git a/Less-30/login.php b/Less-30/login.php
diff --git a/Less-31/hacked.php b/Less-31/hacked.php
diff --git a/Less-31/index.php b/Less-31/index.php
diff --git a/Less-31/login.php b/Less-31/login.php
diff --git a/Less-32/index.php b/Less-32/index.php
@@ -0,0 +1,85 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<title>Less-32 **Bypass addslashes()**</title>
+</head>
+
+<body bgcolor="#000000">
+<div style=" margin-top:70px;color:#FFF; font-size:23px; text-align:center">Welcome&nbsp;&nbsp;&nbsp;<font color="#FF0000"> Dhakkan </font><br>
+<font size="5" color="#00FF00">
+
+
+<?php
+//including the Mysql connect parameters.
+include("../sql-connections/sql-connect.php");
+
+function check_addslashes($string)
+{
+    $string = preg_replace('/'. preg_quote('\\') .'/', "\\\\\\", $string);          //escape any backslash
+    $string = preg_replace('/\'/i', '\\\'', $string);                               //escape single quote with a backslash
+    $string = preg_replace('/\"/', "\\\"", $string);                                //escape double quote with a backslash
+
+
+    return $string;
+}
+
+// take the variables 
+if(isset($_GET['id']))
+{
+$id=check_addslashes($_GET['id']);
+//echo "The filtered request is :" .$id . "<br>";
+
+//logging the connection parameters to a file for analysis.
+$fp=fopen('result.txt','a');
+fwrite($fp,'ID:'.$id."\n");
+fclose($fp);
+
+// connectivity 
+
+
+$sql="SELECT * FROM users WHERE id='$id' LIMIT 0,1";
+$result=mysql_query($sql);
+$row = mysql_fetch_array($result);
+
+	if($row)
+	{
+  	echo '<font color= "#00FF00">';	
+  	echo 'Your Login name:'. $row['username'];
+  	echo "<br>";
+  	echo 'Your Password:' .$row['password'];
+  	echo "</font>";
+  	}
+	else 
+	{
+	echo '<font color= "#FFFF00">';
+	print_r(mysql_error());
+	echo "</font>";  
+	}
+}
+	else { echo "Please input the ID as parameter with numeric value";}
+
+
+
+?>
+</font> </div></br></br></br><center>
+<img src="../images/Less-32.jpg" />
+</br>
+</br>
+</br>
+</br>
+</br>
+<font size='4' color= "#33FFFF">
+<?php
+echo "Hint: The Query String you input is escaped as : ".$id;
+?>
+</center>
+</font> 
+</body>
+</html>
+
+
+
+
+
+
diff --git a/Less-33/index.php b/Less-33/index.php
@@ -0,0 +1,81 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<title>Less-32 **Bypass addslashes()**</title>
+</head>
+
+<body bgcolor="#000000">
+<div style=" margin-top:70px;color:#FFF; font-size:23px; text-align:center">Welcome&nbsp;&nbsp;&nbsp;<font color="#FF0000"> Dhakkan </font><br>
+<font size="5" color="#00FF00">
+
+
+<?php
+//including the Mysql connect parameters.
+include("../sql-connections/sql-connect.php");
+
+function check_addslashes($string)
+{
+    $string= addslashes($string);    
+    return $string;
+}
+
+// take the variables 
+if(isset($_GET['id']))
+{
+$id=check_addslashes($_GET['id']);
+//echo "The filtered request is :" .$id . "<br>";
+
+//logging the connection parameters to a file for analysis.
+$fp=fopen('result.txt','a');
+fwrite($fp,'ID:'.$id."\n");
+fclose($fp);
+
+// connectivity 
+
+
+$sql="SELECT * FROM users WHERE id='$id' LIMIT 0,1";
+$result=mysql_query($sql);
+$row = mysql_fetch_array($result);
+
+	if($row)
+	{
+  	echo '<font color= "#00FF00">';	
+  	echo 'Your Login name:'. $row['username'];
+  	echo "<br>";
+  	echo 'Your Password:' .$row['password'];
+  	echo "</font>";
+  	}
+	else 
+	{
+	echo '<font color= "#FFFF00">';
+	print_r(mysql_error());
+	echo "</font>";  
+	}
+}
+	else { echo "Please input the ID as parameter with numeric value";}
+
+
+
+?>
+</font> </div></br></br></br><center>
+<img src="../images/Less-33.jpg" />
+</br>
+</br>
+</br>
+</br>
+</br>
+<font size='4' color= "#33FFFF">
+<?php
+echo "Hint: The Query String you input is escaped as : ".$id;
+?>
+</center>
+</font> 
+</body>
+</html>
+
+
+
+
+
+
diff --git a/Less-34/index.php b/Less-34/index.php
@@ -0,0 +1,119 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+	<title>Less-34- Bypass Add SLASHES</title>
+</head>
+
+<body bgcolor="#000000">
+<div style=" margin-top:20px;color:#FFF; font-size:24px; text-align:center"> Welcome&nbsp;&nbsp;<font color="#FF0000"> Dhakkan </font><br></div>
+
+<div  align="center" style="margin:40px 0px 0px 520px;border:20px; background-color:#0CF; text-align:center; width:400px; height:150px;">
+
+<div style="padding-top:10px; font-size:15px;">
+
+
+<!--Form to post the data for sql injections Error based SQL Injection-->
+<form action="" name="form1" method="post">
+	<div style="margin-top:15px; height:30px;">Username : &nbsp;&nbsp;&nbsp;
+	    <input type="text"  name="uname" value=""/>
+	</div>  
+	<div> Password  : &nbsp;&nbsp;&nbsp;
+		<input type="text" name="passwd" value=""/>
+	</div></br>
+	<div style=" margin-top:9px;margin-left:90px;">
+		<input type="submit" name="submit" value="Submit" />
+	</div>
+</form>
+
+</div>
+</div>
+<div style=" margin-top:10px;color:#FFF; font-size:23px; text-align:center">
+<font size="3" color="#FFFF00">
+<center>
+<br>
+<br>
+<br>
+<img src="../images/Less-34.jpg" />
+</center>
+
+<?php
+//including the Mysql connect parameters.
+include("../sql-connections/sql-connect.php");
+
+
+// take the variables
+if(isset($_POST['uname']) && isset($_POST['passwd']))
+{
+	$uname1=$_POST['uname'];
+	$passwd1=$_POST['passwd'];
+
+        //echo "username before addslashes is :".$uname1 ."<br>";
+        //echo "Input password before addslashes is : ".$passwd1. "<br>";
+
+	//logging the connection parameters to a file for analysis.
+	$fp=fopen('result.txt','a');
+	fwrite($fp,'User Name:'.$uname1);
+	fwrite($fp,'Password:'.$passwd1."\n");
+	fclose($fp);
+
+        $uname = addslashes($uname1);
+        $passwd= addslashes($passwd1);
+
+        //echo "username after addslashes is :".$uname ."<br>";
+        //echo "Input password after addslashes is : ".$passwd;    
+
+	// connectivity 
+	@$sql="SELECT username, password FROM users WHERE username='$uname' and password='$passwd' LIMIT 0,1";
+	$result=mysql_query($sql);
+	$row = mysql_fetch_array($result);
+
+	if($row)
+	{
+  		//echo '<font color= "#0000ff">';	
+
+  		echo "<br>";
+		echo '<font color= "#FFFF00" font size = 4>';
+		//echo " You Have successfully logged in\n\n " ;
+		echo '<font size="3" color="#0000ff">';	
+		echo "<br>";
+		echo 'Your Login name:'. $row['username'];
+		echo "<br>";
+		echo 'Your Password:' .$row['password'];
+		echo "<br>";
+		echo "</font>";
+		echo "<br>";
+		echo "<br>";
+		echo '<img src="../images/flag.jpg"  />';	
+
+  		echo "</font>";
+  	}
+	else  
+	{
+		echo '<font color= "#0000ff" font size="3">';
+		//echo "Try again looser";
+		print_r(mysql_error());
+		echo "</br>";
+		echo "</br>";
+		echo "</br>";
+		echo '<img src="../images/slap.jpg" />';	
+		echo "</font>";  
+	}
+}
+
+?>
+
+</br>
+</br>
+</br>
+<font size='4' color= "#33FFFF">
+<?php
+
+echo "Hint: The Username you input is escaped as : ".$uname ."<br>";
+echo "Hint: The Password you input is escaped as : ".$passwd ."<br>";
+?>
+
+</font>
+</div>
+</body>
+</html>
diff --git a/Less-35/index.php b/Less-35/index.php
@@ -0,0 +1,81 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<title>Less-35 **why care for addslashes()**</title>
+</head>
+
+<body bgcolor="#000000">
+<div style=" margin-top:70px;color:#FFF; font-size:23px; text-align:center">Welcome&nbsp;&nbsp;&nbsp;<font color="#FF0000"> Dhakkan </font><br>
+<font size="5" color="#00FF00">
+
+
+<?php
+//including the Mysql connect parameters.
+include("../sql-connections/sql-connect.php");
+
+function check_addslashes($string)
+{
+    $string = addslashes($string);
+    return $string;
+}
+
+// take the variables 
+if(isset($_GET['id']))
+{
+$id=check_addslashes($_GET['id']);
+//echo "The filtered request is :" .$id . "<br>";
+
+//logging the connection parameters to a file for analysis.
+$fp=fopen('result.txt','a');
+fwrite($fp,'ID:'.$id."\n");
+fclose($fp);
+
+// connectivity 
+
+
+$sql="SELECT * FROM users WHERE id=$id LIMIT 0,1";
+$result=mysql_query($sql);
+$row = mysql_fetch_array($result);
+
+	if($row)
+	{
+  	echo '<font color= "#00FF00">';	
+  	echo 'Your Login name:'. $row['username'];
+  	echo "<br>";
+  	echo 'Your Password:' .$row['password'];
+  	echo "</font>";
+  	}
+	else 
+	{
+	echo '<font color= "#FFFF00">';
+	print_r(mysql_error());
+	echo "</font>";  
+	}
+}
+	else { echo "Please input the ID as parameter with numeric value";}
+
+
+
+?>
+</font> </div></br></br></br><center>
+<img src="../images/Less-35.jpg" />
+</br>
+</br>
+</br>
+</br>
+</br>
+<font size='4' color= "#33FFFF">
+<?php
+echo "Hint: The Query String you input is escaped as : ".$id;
+?>
+</center>
+</font> 
+</body>
+</html>
+
+
+
+
+
+
diff --git a/Less-4/index.php b/Less-4/index.php
diff --git a/Less-5/index.php b/Less-5/index.php
diff --git a/Less-6/index.php b/Less-6/index.php
diff --git a/Less-7/index.php b/Less-7/index.php
diff --git a/Less-8/index.php b/Less-8/index.php
diff --git a/Less-9/index.php b/Less-9/index.php