Flávio H. Ferreira fhferreira

In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:

http://techcrunch.com/2007/08/11/facebook-source-code-leaked/

It became a big deal:

http://www.techmeme.com/070812/p1#a070812p1

The two files are index.php (the homepage) and search.php (the search page)

Install Nginx on Mac OS from source

no Homebrew required

1. Download Nginx

$ cd /usr/local/src
$ curl -OL http://nginx.org/download/nginx-1.12.2.tar.gz
$ tar -xvzf nginx-1.12.2.tar.gz && rm nginx-1.12.2.tar.gz

	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<meta http-equiv="x-ua-compatible" content="ie=edge">

	<title>Some Random Title</title>
	<style>
	body{

	setTimeout(function() {
	function getAllModules() {
	return new Promise((resolve) => {
	const id = _.uniqueId("fakeModule_");
	window["webpackJsonp"](
	[],
	{
	[id]: function(module, exports, __webpack_require__) {
	resolve(__webpack_require__.c);
	}

	setTimeout(function () {
	function getAllModules() {
	return new Promise((resolve) => {
	const id = _.uniqueId("fakeModule_");
	window["webpackJsonp"](
	[], {
	[id]: function (module, exports, __webpack_require__) {
	resolve(__webpack_require__.c);
	}
	}, [id]

	<?php

	function slugify($text)
	{
	// replace non letter or digits by -
	$text = preg_replace('~[^\pL\d]+~u', '-', $text);

	// transliterate
	$text = iconv('utf-8', 'us-ascii//TRANSLIT', $text);

	-> GRID - onRecord

	--------------------------------------------------------------------

	{wpp} = "<img class='cm_wpp' data-phone='".{telefone}."' data-nome='".{nome}."' data-id='".{id}."' src='/scriptcase9/app/BootstrapTour/_lib/img/grp__NM__ico__NM__if_WhatsApp_1298775.png' border='0'>";

	--------------------------------------------------------------------

	-> GRID - onScriptInit

	APP_ENV=local // changed from production to see if that worked
	TELESCOPE_ENABLED=true