Joseph Richardson EHLOVader

Deploy your site with git

This gist assumes:

you have a local git repo
with an online remote repository (github / bitbucket etc)
and a cloud server (Rackspace cloud / Amazon EC2 etc)
- your (PHP) scripts are served from /var/www/html/
- your webpages are executed by apache
apache's home directory is /var/www/

Originally reported by Joseph Richardson @EHLOVader on 2011-11-30 disclosure policy (RFv2.0)

A session injection/hijacking vulnerability through cookie manipulation

Lemonstand specific

Originally reported by Joseph Richardson @EHLOVader on 2011-11-07 disclosure policy (RFv2.0)

A NULL byte poisoning in URL for both CSS and JS combination script

PHP < 5.3.4

	# Ignore metadata
	.DS_Store
	.svn
	Thumbs.db

	# Ignore /logs directory contents
	/logs/*
	!/logs/.htaccess

	# Ignore /temp directory contents

	<?php /*
	* Add the anchor link button back to the TinyMCE Editor in WordPress
	*/
	function sennza_mce_buttons( $buttons ){
	array_push( $buttons, "anchor" );
	return $buttons;
	}
	add_filter( 'mce_buttons', 'sennza_mce_buttons' ); ?>

	<?php
	/**
	* Cloud load balancer sets these for us so we know we're secure,
	* preventing LemonStand from performing a redirect loop.
	**/
	if( isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https' )
	{
	$_SERVER['HTTPS'] = 'on';
	$_SERVER['SERVER_PORT'] = 443;
	}

	public static function list_unique_values_in_category($name, $category = NULL)
	{
	$category = (int) $category;

	$values = Db_DbHelper::scalarArray('
	SELECT DISTINCT value, t4.name
	FROM shop_product_properties t1
	LEFT JOIN shop_products_categories t3
	ON t1.product_id = t3.shop_product_id
	LEFT JOIN shop_categories t4

	# See: http://draconianoverlord.com/2010/03/04/git-config.html
	# See: https://github.com/rtomayko/git-sh
	# See: https://gist.github.com/502434


	# REPO/.git/config
	[remote "origin"]
	# Generic by default.
	fetch = +refs/heads/:refs/remotes/origin/
	url = https://[email protected]/IET-OU/pd-open-ac-uk.git