Site statistics using codeignitor

Fun with UNICODE and Mirroring Character

http://digitalpbk.blogspot.com/2006/11/fun-with-unicode-and-mirroring.html is the Mirroring character. The property of mirroring character is that it makes Left to Right Text, Right to Left just by pasting the character, all text after it becomes RTL. So it can be used on sites which use UNICODE character encoding format (like orkut). The property of the mirroring character is that it reverses whatever you paste after it. So "[mirror char]hello, how are you?" becomes "?ouy era woh ,olleh". Mirror character has nothing to display, so you cant see a mirror character ...

Google Gone Mad or Hacked?

http://digitalpbk.blogspot.com/2009/01/google-gone-mad-or-hacked.html Google Gone Mad or Hacked? Google Hacked or Gone Mad ?Here is the search results for the term "Google" on the google.com, see that it shows "This site may harm your computer." on all the sites. Check out the Screenshot.Try for yourself, and let me know..Has Google Gone mad ? ...

Perl Script to Fetch PNR Status reservation on train from Indian Railways

http://digitalpbk.com/perl/script-fetch-pnr-status-reservation-train-indian-railways will be severely prosecuted. Ok, That is the warning you see on Indian Railways site to check the PNR Status. The following code written in perl fetches content from Indian Railways site, however it does not store reproduce or does anything with the data. It justs fetches the PNR Status and puts it out on the command line prompt. This code is for educational purpose only anyone using the code for any purpose should contact Indian Railways before doing so. I am not responsible for any outcomes by using ...

Wordpress nextGEN gallery XSS (Cross site scripting) Cookie Stealing Vulnerability

http://digitalpbk.blogspot.com/2009/07/wordpress-nextgen-gallery-xss.html Wordpress nextGEN gallery XSS (Cross site scripting) Cookie Stealing Vulnerability IntroNow I need not tell what actually an XSS is, for that refer to here. To see what I mean check out the links given below. If you are using NextGen wordpress plugin, you are probably infected.the VulnerabilityThe vulnerability on this wordpress plugin is seen in the pid, album, gallery GET variables. http://www.example.com/wordpress/next-gen-gallery/?album=1&pid=3&gallery=2The GET variables on most ...

Perl - cPanel V3 and the @INC

http://digitalpbk.blogspot.com/2007/09/cpanel-v3-perl-include-inc.html Perl - cPanel V3 and the @INC Modifying @INC in a SCRIPTuse Module;is executed during compile time so if you modify the @INC array at run time it will not be reflected back in the compile time. So if you have to include any more include locations in the @INC inside a script, give it inside the BEGIN { }block.BEGIN{ push @INC,"location";}The BEGIN blocks are executed during compile time. So @INC is updated at compile time and the use module are correctly searched for in the updated ...

Tata Indicom Wimax Broadband Connection sharing via Wireless router (D-Link)

http://digitalpbk.blogspot.com/2009/06/tata-indicom-wimax-connection-sharing.html Tata Indicom Wimax Broadband Connection sharing via Wireless router (D-Link) Intro: Tata Indicom Wimax BroadbandWe got a new Tata Indicom WiMax Broadband connection, and one of the first problems was sharing the net connection with the room mates. After doing a little research on it I found Tata Indicom uses a net (HTTP) based authenticating system to logon you onto their servers, against conventional setup of PPPoE. https://loginban.tataindicombroadband.in:8443Connection SharingIn order ...

Sitemeter selling your stats to Ad Company

http://digitalpbk.blogspot.com/2007/05/sitemeter-selling-your-stats-to-ad.html Sitemeter selling your stats to Ad Company Sitemeteris or rather Was a popular site tracking service that reports about traffic stats on sites. Recently it was found by many that certain advertising company specificclick.net cookies were found in the browsers. Following it up I investigated the sitemeter code provided and here is the solid proof that sitemeter sells your stats to the company : The source code that is being generated by the sitemeter script that contains the ad code:I have ...

Mall Blog XSS in Comments

http://digitalpbk.com/2009/12/mall-blog-xss-html-comments Mall Blog XSS in Comments So you came from the The MALL blog, this is because of opened out HTML comments on the MALL blog. The MALL blog has full html support in its comments, which is a dangerous feature. More sites : www.eatsleepandcode.com www.layt.net mature-ip.eu : Any nodes can be edited on this site, wierd!!! Fix it ASAP XSS Security ...

SQL Injection: Tutorial Part 1

http://digitalpbk.blogspot.com/2009/06/hacking-sql-injection-tutorial.html SQL Injection: Tutorial Part 1 SQL InjectionWhat? What is SQL ? SQL stands for Structured Query Language, It is the most widely used database querying language. Before reading on I must say that this is an old technique and I dint want this to be posted because most sites have patched up this hole. I am posting this for the few websites I came across that had this vulnerability. If you have a website or planning to build one or administrates one please read on and fix the security holes ...

CAPTCHA - What ?

http://digitalpbk.blogspot.com/2007/07/captcha-what.html what's written in it (easily). CAPTCHA's are present in most sites including here. Try posting a comment and you will be asked to enter a word as shown in the figure.CAPTCHA's are used to prevent bots or programs to spam the site with lots of biasing information or advertisements. Effectiveness of CAPTCHACAPTCHA has been here for a couple of years and hence programs defeating the CAPTCHA's have obviously been developed! So how does an effective CAPTCHA system work?A good captcha ...