Anyone Interested in trying to Hack my login page on my site would be very helpful to me :)
chislam wrote: Try and go hack my login page at my website. If you find out the usersnames and passwords(There are only 2) then PM them to me. here is the site chislam.t35.com/DoomHaxxors/login.php If you guys could try and help me out that would mean alot because I am just learning PHP. Thanks Guys!
I wasnt able to. Pretty secure as far as I see.
i doubt its mysql based, so that rules out SQL injection.
all it would be vunerable to is brute forcing, and thats because it doesnt have any limit on the amount of logins it has. to stop this just add a quick session based function, to stop continuos logins.
I have it a quick brute force but because theres no set "invalid" string thats produced, its hard to distinguish between invalid and valid logins.
so, theres little you can actually do to this script.