Mario oddmario

In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:

http://techcrunch.com/2007/08/11/facebook-source-code-leaked/

It became a big deal:

http://www.techmeme.com/070812/p1#a070812p1

The two files are index.php (the homepage) and search.php (the search page)

Andorra

Paymill

	<!DOCTYPE html>
	<html>
	<head>
	<title>Upload your files</title>
	</head>
	<body>
	<form enctype="multipart/form-data" action="upload.php" method="POST">
	<p>Upload your file</p>
	<input type="file" name="uploaded_file"></input><br />
	<input type="submit" value="Upload"></input>

	<?php

	/* From https://www.usps.com/send/official-abbreviations.htm */

	$us_state_abbrevs_names = array(
	'AL'=>'ALABAMA',
	'AK'=>'ALASKA',
	'AS'=>'AMERICAN SAMOA',
	'AZ'=>'ARIZONA',
	'AR'=>'ARKANSAS',

	package main

	import (
	"bufio"
	"bytes"
	"fmt"
	"io"
	"log"
	"os"
	)

	<!DOCTYPE html>

	<html>
	<head>
	<meta http-equiv="Content-type" content="text/html; charset=utf-8">
	<title>Pinger test</title>
	<script src="https://code.jquery.com/jquery-3.6.0.min.js" type="text/javascript" charset="utf-8"></script>
	</head>
	<body>

	<?php
	$url = 'http://www.example.com/a-large-file.zip';
	$path = '/path/to/a-large-file.zip';

	$fp = fopen($path, 'w');

	$ch = curl_init($url);
	curl_setopt($ch, CURLOPT_FILE, $fp);

	$data = curl_exec($ch);

	var setIntervalSynchronous = function (func, delay) {
	var intervalFunction, timeoutId, clear;
	// Call to clear the interval.
	clear = function () {
	clearTimeout(timeoutId);
	};
	intervalFunction = function () {
	func();
	timeoutId = setTimeout(intervalFunction, delay);
	}

	#!/bin/bash

	aptitude -y install expect

	// Not required in actual script
	MYSQL_ROOT_PASSWORD=abcd1234

	SECURE_MYSQL=$(expect -c "

	set timeout 10

	-- Remove the history from
	rm -rf .git

	-- recreate the repos from the current content only
	git init
	git add .
	git commit -m "Initial commit"

	-- push to the github remote repos ensuring you overwrite history
	git remote add origin [email protected]:<YOUR ACCOUNT>/<YOUR REPOS>.git

Mario oddmario

Andorra

Australia