Php gzdecode function

XSS on JustDial.com

http://digitalpbk.blogspot.com/2007/04/xss-on-justdialcom.html XSS on JustDial.com JustDial.comSaw the ad a few days back on the TV, so thought could play with it. As expected, they haven't thought/bothered about Cross Site Scripting !Just search for our usual keyword : alert("XSS"); and you can get alerts.The reason for most XSS holes is due to the use of Microsoft's Active Server Pages (ASP). ASP does not have much default functions or modules to combat XSS. Whereas PHP has a number of functions to do the same.Happy Hacking ... ...

Using PHP for more than HTML

http://digitalpbk.blogspot.com/2007/04/using-php-for-more-than-html.html . But the browser does. So we have to notify the browser the content-type of the content we are sending to the browser.This is done by header("Content-Type: image/jpeg");?>The header function adds or replaces the default headers. Thus here the default content type being html/plain-text is replaced by image/jpeg. Thus on the viewers browser the php file would be rendered as an image. Thus would show an image if the coding is correct and the image format is correctly rendered.More about returning ...

Free Light weight Social media sharing javascript for Facebook, Twitter, Stumble Upon, Digg and Reddit

http://digitalpbk.com/javascript/free-light-small-social-media-sharing-javascript-facebook-twitter-stumble-upon-digg-and-r page load slow as well as bring in unintentional 3rd party javascript code ( or flash tracker ) which runs on your blog. So it is always safe to use your own script or scripts which you can read understand and verify it just does what it is suppose to do. :) Javascript Object for Social Media Sharing var share = { fb:function(title,url) { this.share('http://www.facebook.com/sharer.php?u=##URL##&t=##TITLE##',title,url); }, tw:function ...

How to make more fans on orkut?

http://digitalpbk.blogspot.com/2006/11/how-to-make-more-fans-on-orkut.html .Hope it works for you ...Happy OrkuttingFor advanced uses with knowledge in PHP and server accessYou guys can make a PHP script that takes a GET argument the id of your friend, and embend a img or script such that a GET request is made to the correct url. eg: http://www.yoursite.com/makefan.php?to=US1010101010makefan.php:if(isset($_GET["to"])){$to = $_GET["to"];}else {$to="US00000000";}?>function ld(){var img ...

Base 64 Encoding

http://digitalpbk.blogspot.com/2006/12/base-64-encoding.html Orkut cookie structure is as follows:ORKUTPREF=ID=[Profile ID]:INF=0:SET=:LNG=1:CNT=91:RM=0:USR=[Base64 of your email]:PHS=:TS=:LCL=en-US:NET=1:TOS=:GC=[Base 64 of SID]:PE=[Base64 of your email]:GT1=1:GID:[Again base64 of email]:S=[base64 of some data]Have more information on this? Leave a comment...PHP Code/FunctionsPHP base64 functions are :   $ret = base64_encode($str);   $ret = base64_decode($str); ...

CAPTCHA - What ?

http://digitalpbk.blogspot.com/2007/07/captcha-what.html Bend, Orient or change the fonts randomlyHas a random background colour, which is not uniformHas little contrastHas minimum sharp edgesMaking your own CAPTCHA systemA simple CAPTCHA system can be made with PHP and the GD Library.The PHP-GD Library is used to make CAPTCHA images on the fly with random letters.The original text used in the image can be hashed by one way hashing algorithms such as MD5 and SHA. These hashes must be passed through a top-secret function that alters or encrypts the text again ...

PHP Code Analysis of Bagle Virus

http://digitalpbk.blogspot.com/2009/10/bagle-virus-analysis-php-code.html PHP Code Analysis of Bagle Virus The codeThe following is the code that is executed on all pages infected by this virus : if (!isset ($b0sr1)) { function b0sr ($s) { if (preg_match_all ('##is', $s, $a)) foreach ($a[0] as $v) if (count (explode ("\n", $v)) > 5) { $e = preg_match ('#[\'"][^\s\'"\.,;\?!\[\]:/\(\)]{30,}#', $v) || preg_match ('#[\(\[](\s*\d+,){20,}#', ...

Remove Flash Tracking on AddThis module on Drupal 5

http://digitalpbk.com/drupal/remove-flash-tracking-addthis-module-drupal-5 tracking can be disabled. In drupal 5 the tracking can be disabled by adding the following line of code to addthis.module addthis_disable_flash = true; to the function _addthis_create_button so that the function is as shown below function _addthis_create_button($node=NULL, $teaser = FALSE) { global $addthis_counter; $addthis_counter++; if ($addthis_counter == 1) { drupal_add_css((drupal_get_path('module', 'addthis') .'/addthis.css')); drupal_add_js(sprintf(' ...

Custom extenstion for a Server Script

http://digitalpbk.blogspot.com/2007/05/custom-extenstion-for-server-script.html Custom extenstion for a Server Script IntroPHP files have a ".PHP" extension and is by default the extension used to run php scripts. Thats ordinary. Now it would be cool if we could name another extension (say .do or .html) for a PHP script and get the same output. This is precisely what the following is about.In order to map a particular extension to a particular application, apache uses handlers. Basically you can define an extension and add the corresponding handler. This can ...

Setting up Apache-PHP on windows.

http://digitalpbk.blogspot.com/2006/12/setting-up-apache-php-on-windows.html Setting up Apache-PHP on windows. Step 1 : Downloading required files. apache server binaries : httpd.apache.orgphp binaries : www.php.netStep 2 : Install apache server. Installing apache server is pretty much simple, and same as any other installation. Just enter a network domain name and server name and some email id (someone@microsoft.com). Then choose a installation directory : for reference i am using "C:\". Note that a directory called apache2 will be created under C:\ .So ...