Home | Community | Message Board
You are not signed in.
Sign In New Account
Forum Index Search Posts Trusted Vendors Highlights Galleries FAQ User List Chat Store Random Growery

MagicBag Grow Bags
This site includes paid links. Please support our sponsors.

General Interest > Science and Technology
Threaded Mode Threaded  Previous topic Previous  View all topics Index  Next topic Next 

Welcome to the Shroomery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!

Jump to first unread post Pages: 1
PHP? Crazy!
    #1882637 -

http://www.danasoft.com/vipersig.jpg

Someone enlighten me to how this was done as an image that gets your info...

Extras: Filter Print Post Top
Re: PHP? Crazy! [Re: TinMan]
    #1882853 -

yeah, I just noticed someone had that in their sig. I did a triple-take :smile:

from the site:

I wrote this signature after a long drive when I was inspired by the thought of taking the referring information in a scipt and putting a "tricky" wrapper around it. Yes, the image above is really a PHP script that uses referrer information to make the image on-the-fly. I use a rewrite rule on my server to fool browsers into thinking its an image and allowing it in signatures. You may have picked up on that when you realized the image is actually a PNG file, but called a JPG file.

not exactly sure on how it works, though. I wonder what the security risks are.
 


--------------------
As we know, there are known knowns. There are things we know we know. We also know there are known unknowns. That is to say we know there are some things we do not know. But there are also unknown unknowns, the ones we don't know we don't know.

-Donald Rumsfeld 2/2/02 Pentagon

Extras: Filter Print Post Top
Re: PHP? Crazy! [Re: Xochitl]
    #1883118 -

CGI scripts do this type of thing all the time. Typical usage is a gif image that displays a hit counter. The only tricky thing in this case is the rewriting of a .jpg filename into a script invocation, but I don't see why that should be necessary to make it work. It's perfectly legal html to use .cgi or .pl or .php filenames inside an IMG SRC tag as long as the script outputs the correct http CONTENT-TYPE header ("image/png" in this case).

Since the script runs on the server, the only user information it can play with is what your browser supplies it with. This is limited to the IP address and port number, and the USER-AGENT and REFERER headers supplied by your browser. In this example the "ISP" information is simply the reverse domain of the IP address, and the referrer information (the url of the originating web page) does not seem to be used at all, at least not when I click on that link.

As for security risks it's no different from allowing regular inline images from other servers, because those servers will get all the above information in any case, script or no script.

Extras: Filter Print Post Top
Re: PHP? Crazy! [Re: Rhizoid]
    #1883661 -

gotcha. thanks man :smile: 


--------------------
As we know, there are known knowns. There are things we know we know. We also know there are known unknowns. That is to say we know there are some things we do not know. But there are also unknown unknowns, the ones we don't know we don't know.

-Donald Rumsfeld 2/2/02 Pentagon

Extras: Filter Print Post Top
Re: PHP? Crazy! [Re: Xochitl]
    #1885140 -

I went to a site for the Matrix (movie) and it had that on it too.


--------------------
What if everything around you
Isn't quite as it seems?
What if all the world you think you know,
Is an elaborate dream?
And if you look at your reflection,
Is it all you want it to be?


Extras: Filter Print Post Top
Re: PHP? Crazy! [Re: Rhizoid]
    #1885684 -

Yea, but the fact that you are only linking to a picture surprised me...

Extras: Filter Print Post Top
Re: PHP? Crazy! [Re: TinMan]
    #1893279 -

You can make the PHP parser execute any file regardles of its file ending.
Example:
http://www.fungifun.org/bpics/pic.jpg

Hit reload a couple of times when the new page opens.


--------------------
Grow Mushrooms from Spores - PF-Tek for Simple Minds

Extras: Filter Print Post Top
Re: PHP? Crazy! [Re: TinMan]
    #1904922 -



--------------------
Your friendly neighborhood loon

Extras: Filter Print Post Top
Jump to top Pages: 1

General Interest > Science and Technology
Threaded Mode Threaded  Previous topic Previous  View all topics Index  Next topic Next 

Similar ThreadsPosterViewsRepliesLast post
* PHP vs. Cold Fusion Evolving 1,151 7 03/15/03 06:08 AM
by Lana
* Good php scripts? Murex 584 1 01/14/04 06:19 PM
by nife
* Scripting Languages: Ruby vs. Python Evolving 1,219 8 02/14/04 08:57 PM
by djfrog
* FREE ASP SCRIPT SITES? Fliquid 871 5 09/23/03 09:31 AM
by Fliquid
* PHP NUKE RIPPING Genius 619 3 11/06/04 05:11 PM
by Ythan
* Suspicious Script: rollback.js question_for_joo 574 1 09/05/04 06:57 PM
by psyka
* The boundary of informational compression whiterasta 1,048 5 08/19/03 11:44 PM
by monoamine
* webmasters HELP ( php ) ChromeCrow 757 3 09/08/03 07:47 AM
by Seuss

Extra information
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: trendal, automan, Northerner
1,148 topic views. 0 members, 18 guests and 2 web crawlers are browsing this forum.
[ Show Images Only | Sort by Score | Print Topic ]
Search this thread:

Copyright 1997-2026 Mind Media. Some rights reserved.

Generated in 0.027 seconds spending 0.009 seconds on 16 queries.