| |
|
|
|
 |
Posted 2004-12-07, 02:00 PM
in reply to Chruser's post starting "It shouldn't save pictures twice if you..."
|
|
|
|
It let me upload a text file renamed as a jpg - http://www.picaroni.com/text_renamed_as_jpg.jpg
..Although, it DID change the text into this:
Quote:
<br />
<b>Warning</b>: imagecreatefromstring(): Data is not in a recognized format. in <b>/home/zelaron/domains/picaroni.com/public_html/showfull.php</b> on line <b>47</b><br />
<br />
<b>Warning</b>: imagesx(): supplied argument is not a valid Image resource in <b>/home/zelaron/domains/picaroni.com/public_html/showfull.php</b> on line <b>48</b><br />
<br />
<b>Warning</b>: imagesy(): supplied argument is not a valid Image resource in <b>/home/zelaron/domains/picaroni.com/public_html/showfull.php</b> on line <b>49</b><br />
<br />
<b>Warning</b>: imagecreatetruecolor(): Invalid image dimensions in <b>/home/zelaron/domains/picaroni.com/public_html/showfull.php</b> on line <b>50</b><br />
<br />
<b>Warning</b>: imagecopyresampled(): supplied argument is not a valid Image resource in <b>/home/zelaron/domains/picaroni.com/public_html/showfull.php</b> on line <b>51</b><br />
<br />
<b>Warning</b>: imagejpeg(): supplied argument is not a valid Image resource in <b>/home/zelaron/domains/picaroni.com/public_html/showfull.php</b> on line <b>93</b><br />
<br />
<b>Warning</b>: imagedestroy(): supplied argument is not a valid Image resource in <b>/home/zelaron/domains/picaroni.com/public_html/showfull.php</b> on line <b>105</b><br />
|
Also, the standard SQL injection trick didn't work ("or 1=1", you know the drill) so that's good, and all bad file types seem to get the error-in-the-file treatment, though it still uploads it without errors..
-----
Although, I just noticed that there seems to be no way to log out short of deleting your own cookies.
-----
I'll mention also that it allows you to sign up with a just a space for the email field, which I assume you want to be valid. (Unless you figure it's not a problem if they can't retrieve their password if they give a space for the email)
Also, I love the PORKY PORK messages
Last edited by BlueCube; 2004-12-07 at 02:13 PM.
|
|
 |
|
|
|
|
|
|
|
|
|