Thread obsoleto [REL] phpShop 0.8

Vitty95

Utente Mitico
Autore del topic
User Legend
13 Ottobre 2006
6.554
78
Miglior risposta
0
Nuova versione di questo script per la gestione della vendita dei portali e-commerce. Fornisce una piattaforma basata su una Web Application, utilizza i CSS ed è facilmente integrabile con i più utilizzati editor HTML visuali. In questa versione sono state aggiornate funzioni tra cui la validazione e l'aggiornamento dei data_object per le sezioni commerce/ps_shopper ed commerce/ps_user_address e aggiunte nuove funzioni per una maggiore sicurezza.

Download 0.8:
Perfavore, Entra oppure Registrati per vedere i Link!

Download 0.8.1:
Perfavore, Entra oppure Registrati per vedere i Link!

Guida all'installazione

* Requisiti

- PHP 4.0.0
- MySQL 3.23

* Installazione

- 1) Scompattiamo l'archivio dello script.

- 2) Hostiamo tutti i file.

- 3) Importiamo il file /db/phpshop.sql nel database MySQL.

- 4) Rinominiamo il file config-dist.php in config.php

- 5) Modifichiamo queste righe del file config.php:
Codice:
Perfavore, Entra oppure Registrati per vedere i codici!
secondo i nostri dati del database.

- 6) Entrate nell'index della cartella di phpshop.

- 7) l'Account di amministrazione pre-creato è admin (password: test), potrete cambiare tutto dall'amministrazione.
 
Ultima modifica:
questo è il mio file config ma dv devo modificare?
<?php
#
# The phpShop Config File
#
# Copyright (c) Edikon Corporation. All rights reserved.
# Distributed under the phpShop Public License (pSPL) Version 1.0.
#
# $Id: config-dist.php,v 1.1.1.1 2004/07/27 14:57:56 pablo Exp $
#
#
define("PHPSHOP_VERSION","0.8.0");

# LANGUAGE Directive
# Designates the default language for this site. Each module has
# its own language file definitions specified by the given code.
# phpShop is currently distributed with English and Spanish by
# default. Either eng or esl.
define("LANGUAGE","eng");

# URL & SECUREURL Settings
define("URL","http://localhost/demo/");
define("SECUREURL","http://localhost/demo/");

# Database Settings
define("DB_HOST","localhost");
define("DB_NAME","phpshop");
define("DB_USER","dbuser");
define("DB_PWD","dbpass");

# Sessions
# Used to specify settings for session management.
# - SESSION_PATH sets the directory where
# session information will be saved. If left blank, the
# "session.save_path" directive from your php.ini will be used.
# - SESSION_EXPIRE sets the number of MINUTES that the session will last
# when used in cookie mode. If left blank, the "session.cookie_lifetime"
# directive from your php.ini will be used.
define("SESSION_PATH","");
define("SESSION_EXPIRE","");

# HOMEPAGE
# Sets the page to load by default
define("HOMEPAGE","shop/index");

# LOGINPAGE
define("LOGINPAGE","shop/login");

# FLYPAGE
# Sets the default flypage to use for all products (can also be specified in each category)
define("FLYPAGE","shop/flypage");

# ERRORPAGE
# Sets the page to load when an error occurs.
define("ERRORPAGE","msgs/error");

# DEBUG Directive
# Shows debug output. Good while developing
define("DEBUG","0");
define("DEBUGPAGE","msgs/debug");

# Search Directives
# SEARCH_ROWS = number of rows per page
# SEARCH_PAGES = number of pages to show in nav links at bottom of list. Should be even number.
define("SEARCH_ROWS","20");
define("SEARCH_PAGES","6"); //should be an even number
define("SEARCH_COLOR_1","#f9f9f9");
define("SEARCH_COLOR_2","#f0f0f0");

# WYSIWYG Edit for Product Information
# Enable if you are using a compatible browser. IE is known to work. See the docs/WYSIWYG_README
# for help with Netscape.
define("ENABLE_WYSIWYG","1");

# MAX_ROWS Directive
# Sets the number of rows to show in the order list select box.
define("MAX_ROWS","25");

# CHECK_STOCK Directive
# Sets whether to check the stock level when a user adds an item
# to the shopping cart. If set, this will not allow user to add
# more items to the cart than are available in stock.
define("CHECK_STOCK","0");

# ENCODE_KEY Directive
# Used to encrypt data stored in database with this key. This means that this file
# should be protected from viewing at all times.
define("STORE_CC", 1);
define("ENCODE_KEY","phpShopIsCool");


# Authorize.net Directives
# Used to set Authorize.net variables so that Authorize.net can be used with
# phpShop. Please see Authorize.Nets documentation.
#
# AN_ENABLE - If set to "1", Authorize.net will be used for the checkout
# procedures. Make sure you enable each "Payment Method". This
# is done in the Adminitration area of phpshop, In "Store"
# choose "List Payment Methods" and make sure that the desired
# Payment Methods have a "Y" for "Authorize".
# AN_LOGIN - Authorize.Net Login ID
# AN_TRAN_KEY - Merchant Provided by CyberCash
# AN_TYPE - Authorize.Net authentication type.
# AN_TEST_REQUEST - set "True" while testing, "False" for live transactions.
define("AN_ENABLE","0");
define("AN_LOGIN","dgi00000");
define("AN_TRAN_KEY","xxxxxxxxxxxxxxxx");
define("AN_TYPE","AUTH_CAPTURE");
define("AN_TEST_REQUEST","True");

# CYBERCASH Directives
# Used to set Cybercash variables so that Cybercash can be used with phpShop.
# CC_MERCHANT is the CyberCash Merchant ID
# CC_MERCHANT_KEY is the Merchant Provided by CyberCash
# CC_PAYMENT_URL is the URL provided by Cybercash for secure payment
# CC_AUTH_TYPE is the Cybercash authentication type provided by Cybercase
define("CC_ENABLE","0");
define("CC_MERCHANT","phpshop");
define("CC_MERCHANT_KEY","00000000000000000000000000");
define("CC_PAYMENT_URL","https://cr.cybercash.com/cgi-bin/");
define("CC_AUTH_TYPE","mauthonly");

# Zone Shipping
# Set this to 1 to enable the zone shipping module
define("ZONE_ENABLE","1");

# If you want zero weight items excluded from taxes, set this to 0
define("IS_TAX_VIRTUAL","1");

# SMTP Settings
define("SMTP_ENABLED",0); // if enabled, uses SMTP, otherwise PHP's mail function
define("SMTP_HOST","yourmailserver.com");
define("SMTP_PORT","25");
define("SMTP_AUTH", "Y"); // Y or N - for SMTP authentication
define("SMTP_USER","username");
define("SMTP_PASS","password");
?>
 
Vendor : PHPShop
Webiste :
Perfavore, Entra oppure Registrati per vedere i Link!

Version : v0.8.1
Author: the redc0ders / theredc0ders[at]gmail[dot]com
Condition: magic_quote_gpc = off , in php.ini setting

Details :
==========

Vulnerable Code in index.php near lines 98 - 128
Codice:
Perfavore, Entra oppure Registrati per vedere i codici!

The script check if $my_insecure_array contain 'SELECT ','UPDATE ' ...etc

so WORD+space, and this can be easily bypassed using comments like
POC : select/**/input1,input2...

Exemple to inject admin username and md5 hash password :
Perfavore, Entra oppure Registrati per vedere i Link!




Solution :
simply remove spaces in stristr() function or activate magic_quotes_gpc in php.ini

Greetz : Hacker1 - ToXiC350 - S4MI - Miyyet - Pynsso - Amigo_BM and All Moroccan Hackers =)

>From Morocco : JIB L3EZZ WELLA K7AZZ !