//That is the sourcecode of the index.php file. I have only changed the name of all files that are linked with this one and I //have removed some smaller stuff '; $script.="alert(\"Sorry that nick already exist!\");"; $script.='window.location.href="index.php";'; $script.=''; $html='Error!'.$script.''; echo $html; } $nick = urldecode(substr($HTTP_GET_VARS["nick"], 0, 20)); $id = urldecode(substr($HTTP_GET_VARS["id"], 0, 20)); fputs($hfile, "::".$sessionuser['user']."::".$nick."::".$id."\n"); fclose($hfile); $script=''; $html='Error!'.$script.''; echo $html; }else{ $script=''; $html='Error!'.$script.''; echo $html; } } if ($HTTP_GET_VARS["action"]=="login"){ if(isset($HTTP_GET_VARS["nick"]) and isset($HTTP_GET_VARS["id"])){ $hfile = fopen($target, "r"); $i = 0; while (!feof ($hfile)){ $line[$i] = fgets ($hfile, 1024); $cntrl = strstr($line[$i], "::".$sessionuser['user']."::".$HTTP_GET_VARS["nick"]."::".$HTTP_GET_VARS["id"]); if ($cntrl){ $len = strlen("::".$sessionuser['user']."::".$HTTP_GET_VARS["nick"]."::".$HTTP_GET_VARS["id"]); if (substr(($line[$i]), strlen($line[$i])-8, strlen($line[$i])-1-$len)=="::admin"){ header('Location:bbb.php'); }else{ header('Location:ccc.php'); } } $i += 1; } $script=''; $html='Error!'.$script.''; echo $html; } else{ echo "Sorry but your input was incorrect. You can't log in without nick or pin!"; } } }else{ //some stuff ?>
This is my new programm. It looks really save for me but some days ago, an other guy found a way to get admin . I have no idea how he did it. Can you find it out for me? To help you, I give you the sourcecode



register
login