Extended basic 6

[footyfanatic77]

I'm having a great deal of trouble with this mission. I understand the idea, but a nudge in the right direction would be great.
Thanks for your help.

[Mindzai]

I'm having a great deal of trouble with this mission. I understand the idea, but a nudge in the right direction would be great.
Thanks for your help.

Have a read up on PHP configuration, especially the register_globals setting

[footyfanatic77]

thank you so much!

[AbyssV3]

Eh, the solution that I eventually got to work, shouldn't work.

In fact I took the code and tested it, and tried the solution, and it didn't work in a real environment.

I got past this, but login should be theoretically always impossible. Unless I'm missing something? If I'm not, this mission is wrong.

[Aesmade]

Eh, the solution that I eventually got to work, shouldn't work.

In fact I took the code and tested it, and tried the solution, and it didn't work in a real environment.

I got past this, but login should be theoretically always impossible. Unless I'm missing something? If I'm not, this mission is wrong.

"This site in run by a new sysadmin who does not know much about web configuration"
I think the exploit is based on the PHP configuration, or it could be some bug in a previous version of PHP or something. I'm pretty sure I've seen something similar in some other site too, so it should be correct.

[kfealz]

After the above comment about checking out how "register_globals" is used, I looked at the explanation here: http://us.php.net/register_globals

So it seems that once, this probably would have been a common exploit used, but as of PHP 6.0.0, this feature is disabled by default (which is probably why it didn't work on your test server). So even if the sysadmin didn't know what he/she was doing while configuring the server, it is unlikely that he/she would have messed this up.

Regardless, it is still a good thing to know about as apparently register_globals can be used safely, so it's something to look for.

Really hoping I didn't break the spoiler rule on my first post...

[CyberP1708]

I have trouble with this one :-/
Not to find the solution (with register_globals, etc.) but to find what to submit for the script to accept it

I don't even know if the answer has to be like: "me.php?var=value&..." or like "var=value&..."
Do you have to add "&user=&pass=" ?

:-/

[Qubit]

After the above comment about checking out how "register_globals" is used, I looked at the explanation here: http://us.php.net/register_globals

So it seems that once, this probably would have been a common exploit used, but as of PHP 6.0.0, this feature is disabled by default (which is probably why it didn't work on your test server).

If you read that page again, you'll see that it was disabled by default in 4.2.0 and removed in 6.0.0.

[Corvus]

Wow. Case sensitivity, anyone? For some odd reason I kept using the wrong case...

[Qubit]

Wow. Case sensitivity, anyone? For some odd reason I kept using the wrong case...

Yep, I couldn't do it for days because of case sensitivity. *sigh*