ItsMods

Full Version: Upload Clipboard Text data to a server
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2
(04-12-2013, 21:08)kokole Wrote: [ -> ]Even PHP can be highly vulnerable to crackers and stuff. So try to use some packer or whatever.

What? Sure you can capture data but it isn't exactly vulnerable.

OT: Open a HTTP stream to the webpage and add headers.

CSHARP Code
  1. ...other code...
  2.  
  3. conn.headers.Add("Content-Disposition: form-data; name="uploaded"; filename="content.txt");
  4. conn.headers.Add("Content-Type: text/plain");
  5. conn.WriteLine(...clipboard data...);


Server side:
  • Check file type (restrictions)
    Check file size (restrictions)
    Possibly limit the number of uploads per IP/at a time
    Generate random file name
    Save file to a server folder and return a link to it (or use a PHP file to serve the data instead of direct)
@kokole PHP is not unsafe.
I wonder how you got that idea.

(If it's sooooooo unsafe, why don't you deface itsmods.com?)
(04-13-2013, 11:04)SuperNovaAO Wrote: [ -> ]@kokole PHP is not unsafe.
I wonder how you got that idea.

(If it's sooooooo unsafe, why don't you deface itsmods.com?)

Sorry I was wrong, what I wanted to say is that if you want to protect your app against cracking, you better hide those php queries if the data recieved is critical.
(04-13-2013, 11:04)SuperNovaAO Wrote: [ -> ]@kokole PHP is not unsafe.
I wonder how you got that idea.

(If it's sooooooo unsafe, why don't you deface itsmods.com?)

PHP is not unsafe, but write a file to the server and then display it in a browser can be unsafe if it's not perfectly managed....
(04-13-2013, 14:08)kokole Wrote: [ -> ]
(04-13-2013, 11:04)SuperNovaAO Wrote: [ -> ]@kokole PHP is not unsafe.
I wonder how you got that idea.

(If it's sooooooo unsafe, why don't you deface itsmods.com?)

Sorry I was wrong, what I wanted to say is that if you want to protect your app against cracking, you better hide those php queries if the data recieved is critical.

But there is no risk in that. If someone cracks your C# app to look how the data is transmitted, he/she then knows how to transmit text to your server which can be outputted later. Whoop fucking doo. Nothing of value was lost.
Pages: 1 2