Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

exploiting single file php time code...


ghost's Avatar
0 0

There's this php script I found on this website. It has 3 variables. days, hour, minute and seconds. It's seems like single file. Although All I get is from the file is the text so it seems like a time, with some arrays with echos to me, Might not be…

How would I approach this to try and change the time to 0 days 0 hours 1 minute.

Thank you.

P.S. I am not asking for an detailed answer if you do not feel like it. Just help me put myself in the right direction…

Thanks


ghost's Avatar
0 0

Could you show an example output?


ghost's Avatar
0 0

I don;'t have any view on the php code. All I have is the output of the code which is only text it. Something like:

There is 28 days 4 hours 34 minutes and 21 seconds.

It's from this game. where I add a number and a few month's later it gives you maybe 50% of the amount you first put in. So i'm guessing this is php over basic javascript.


ghost's Avatar
0 0

It could just be basic javascript, its not difficult code


ghost's Avatar
0 0

I'm guessing it's all server-side code, check the source and see if it's javascript or not. if it's javascript you could easily change it to whatever time you want, if it's PHP or other server-side script, you'd need to change the date on the server or modify the PHP file itself….good luck with that ;)


ghost's Avatar
0 0

The source shows nothing much. Just shows the text. No code. so it's from an external code it seems. But ill try to track where the file is.


ghost's Avatar
0 0

It is a rather simple code, there are examples of it everywhere, and as you might guess, it probably isn't exploitable [unless it allows the input of unfiltered data]. My guess is the site you found it on is probably using a function similar to the one mentioned in the link below.

http://www.phpbuilder.com/board/printthread.php?t=10300366

If they are using something like that, I am sorry to say that you should look else where on the site, more than likely there is something you have overlooked.