All Forums  Snitz Forums 2000 MOD-Group  MOD Add-On Forum (W/Code)  hack antispam code (if numbers are not changed)

Note: You must be registered in order to post a reply.
To register, click here. Registration is FREE!
Before posting, make sure you have read this topic!

Screensize: 640 x 480 800 x 600 1024 x 768 1280 x 1024 UserName: Password: Format Mode: Basic  Help  Prompt  Format: Font Andale Mono Arial Arial Black Book Antiqua Century Gothic Comic Sans MS Courier New Georgia Impact Lucida Console Script MT Bold Stencil Tahoma Times New Roman Trebuchet MS Verdana   Size 1 2 3 4 5 6   Color Black Red Yellow Pink Green Orange Purple Blue Beige Brown Teal Navy Maroon LimeGreen Message: * HTML is OFF * Forum Code is ON Smilies [quote][i]Originally posted by Sonic[/i] [br][b]where:[/b] anti-spam-registration code and guestbook 3.6 [b]what:[/b] users / scripts can count back the antispam code and can enter the right security code [b]exploit:[/b] right click on a security image you should see --> e.g. http://aspire/register.asp?code=image&rc=[red]12343321851[/red]&p=1 - we now need the number red marked - and the count variable (in the antispam code) RandCode = (strRCCode + 17456) / 50000 ==> now count: [red]12343321851[/red] + 17456 / 50000 = [green]you get the image code[/green] [b]bugfix:[/b] to prevent this change the numbers to some other e.g. from -> RandomizedCode = NumbersToShow * [red]50000 - 17456[/red] to => RandomizedCode = NumbersToShow * [green]47900 - 15249[/green] and: from -> RandCode = (strRCCode + [red]17456) / 50000[/red] to => RandCode = (strRCCode + [green]15249) / 47900[/green] don't use the numbers here it is just a sample use other numbers... i don't know a page where it was happen but the way is there... so it is better to change everything to make it heavy to hack something [:)]< [/quote]   Check here to include your profile signature. Check here to subscribe to this topic.