4chan source code leaked (2010)

Post by wfn » Thu, Apr 24, 2014, 11:06 AM UTC

  if ($sectrip != "") {
    $salt = "LOLLOLOLOLOLOLOLOLOLOLOLOLOLOLOL"; #this is ONLY used if the host doesn't have openssl
                                                #I don't know a better way to get random data

Post by mandalar12 » Thu, Apr 24, 2014, 11:09 AM UTC

NewsReader42 wrote: post #6

if(isset($_COOKIE['4chan_auser'])&&isset($_COOKIE['4chan_apass'])){ $user = mysql_real_escape_string($_COOKIE['4chan_auser']); $pass = mysql_real_escape_string($_COOKIE['4chan_apass']); } HAHAHAHAAHAHAHAHAA Steal a cookie, gain access.. WTF

Post by lucb1e » Thu, Apr 24, 2014, 11:10 AM UTC

phpnode wrote: post #9

Villodre wrote: post #3

It seems that it's too terrible to be the true code. "if($_COOKIE['4chan_auser']", "extract($_POST); extract($_GET); extract($_COOKIE);"

this makes it even more likely that it's the real code. Let's face it, no one is expecting a shining example of software design and architectural brilliance here

Post by slipstream- » Thu, Apr 24, 2014, 11:11 AM UTC

wfn wrote: post #12

if ($sectrip != "") { $salt = "LOLLOLOLOLOLOLOLOLOLOLOLOLOLOLOL"; #this is ONLY used if the host doesn't have openssl #I don't know a better way to get random data

Post by MichaelGG » Thu, Apr 24, 2014, 11:15 AM UTC

ledneb wrote: post #11

spoiler wrote: post #5

Earlier quoted context omitted.

> It seems that it's too terrible to be the true code. 1. It's written in PHP. Finding a good PHP developer is nigh impossible (there are exceptions, like always). 2. I expected worse, to be honest.

No serious, modern PHP developer writes code like this. If it were a code sample for any respectable PHP job, it would be a massive "do not hire" flag.