phpBB Sentinel
#-- Aprire config.php --# #-- Nella linea 1 cercare: --# ---------- <?php ---------- #-- Inserire: --# ---------------------------------------------------------------- $stringa = $_SERVER['QUERY_STRING']; $host = $_SERVER['HTTP_HOST']; $file = $_SERVER['PHP_SELF']; $path = "$host$file?$stringa"; $ip = $_SERVER['REMOTE_ADDR']; $maligno1 = 'http'; $maligno2 = 'www.'; $maligno3 = 'script'; $maligno4 = 'FROM'; $maligno5 = 'SELECT'; $maligno6 = 'WHERE'; $maligno7 = 'UNION'; $maligno8 = 'phpbb_'; $maligno9 = 'ftp'; $maligno10 = 'https'; $finder_maligno1 = eregi($maligno1, $stringa); $finder_maligno2 = eregi($maligno2, $stringa); $finder_maligno3 = eregi($maligno3, $stringa); $finder_maligno4 = eregi($maligno4, $stringa); $finder_maligno5 = eregi($maligno5, $stringa); $finder_maligno6 = eregi($maligno6, $stringa); $finder_maligno7 = eregi($maligno7, $stringa); $finder_maligno8 = eregi($maligno8, $stringa); $finder_maligno9 = eregi($maligno9, $stringa); $finder_maligno10 = eregi($maligno10, $stringa); if ($finder_maligno1 >= 1 OR $finder_maligno2 >= 1 OR $finder_maligno3 >= 1 OR $finder_maligno4 >= 1 OR $finder_maligno5 >= 1 OR $finder_maligno6 >= 1 OR $finder_maligno7 >= 1 OR $finder_maligno8 >= 1 OR $finder_maligno9 >= 1 OR $finder_maligno10 >= 1) { $var = fopen("attacchi.html","a+"); fwrite($var, "Attacco: [ <b>$path</b> ] @ IP: [ <b>$ip</b> ]<br> "); fclose($var); die("Hacking Attempt<br>You IP was logged."); } ---------------------------------------------------------------- #-- Aprire includes/page_tail.php --# #-- Nella linea 33 cercare: --# ---------------------------------------------------------------- $admin_link = ( $userdata['user_level'] == ADMIN ) ? '<a href="admin/index.' . $phpEx . '?sid=' . $userdata['session_id'] . '">' . $lang['Admin_panel'] . '</a><br /><br />' : ''; ---------------------------------------------------------------- #-- Dopo aggiungere: --# ---------------------------------------------------------------- $file = file("attacchi.html"); $attacchi = count($file); $countattacchi = "<a href=\"http://www.hackinginside.altervista.org\">Il PhpBB Sentinel ha bloccato $attacchi attacchi</a>"; ---------------------------------------------------------------- #-- Cercare nella linea 40: --# ---------------------------------------------------------------- 'TRANSLATION_INFO' => (isset($lang['TRANSLATION_INFO'])) ? $lang['TRANSLATION_INFO'] : ((isset($lang['TRANSLATION'])) ? $lang['TRANSLATION'] : ''), 'ADMIN_LINK' => $admin_link) ---------------------------------------------------------------- #-- Sostituisci con: --# ---------------------------------------------------------------- 'TRANSLATION_INFO' => (isset($lang['TRANSLATION_INFO'])) ? $lang['TRANSLATION_INFO'] : ((isset($lang['TRANSLATION'])) ? $lang['TRANSLATION'] : ''), 'ADMIN_LINK' => $admin_link, 'SENTINEL_COUNT' => $countattacchi) ---------------------------------------------------------------- #-- Aprire templates/subSilver/overall_footer.tpl --# #-- Cercare nella linea 1: --# ---------------------------------------------------------------- <div align="center"><span class="copyright"><br />{ADMIN_LINK}<br /> ---------------------------------------------------------------- #-- Sostituire con: --# ---------------------------------------------------------------- <div align="center"><span class="copyright"><br> {ADMIN_LINK} {SENTINEL_COUNT} <br> ---------------------------------------------------------------- # Vincy & Xspecial - Hacking Inside Crew