[code][20:09] <[R|fT]> do you know when nightstorm is going to be back on?
[20:10] <Adaera> when he gets internet lol
[20:11] <[R|fT]> oh
[20:11] <[R|fT]> well i found a really really bad thing in the server.. but im afraid to tell anyone about it
[20:12] <Adaera> what is it?
[20:12] <Adaera> I can always phone him lol
[20:12] <[R|fT]> well, i accessed it through killablogs.. but it could be done anywhere on the server where you can inject php
[20:12] <Adaera> I see
[20:12] <Adaera> so another hole for kb
[20:12] <[R|fT]> well no
[20:12] <[R|fT]> i could delete the server right now
[20:13] <[R|fT]> ill show you what im talking about
[20:13] <Adaera> no no lol
[20:13] <[R|fT]> no i wont delete it
[20:13] <[R|fT]> http://killablogs.com/images/kb_user-148-sw.php
[20:13] <Adaera> can you explain to me what it is? I can call scott tonight and maybe he can use a friend's computer to fix it
[20:13] <[R|fT]> go there
[20:14] <Adaera> I don't understand what that means
[20:14] <[R|fT]> well the biggest hole is the uploader... i can manipulate the headers to upload any file type
[20:14] <[R|fT]> okay
[20:14] <[R|fT]> in the box type this
[20:14] <[R|fT]> ls -a ../../../../../../
[20:14] <[R|fT]> and hit enter, that's a unix command
[20:14] <Adaera> I'm not typing anything in there lol
[20:14] <[R|fT]> it lists directories
[20:14] <[R|fT]> it's going to show you the root
[20:14] <Adaera> which uploader
[20:15] <[R|fT]> on killablogs, for images
[20:15] <Adaera> okay, so that needs to be removed then
[20:15] <[R|fT]> yeah or blocked till he fixes it
[20:15] <Adaera> I don't know how to block it
[20:15] <Adaera> and I don't know how to remove it lol
[20:15] <[R|fT]> well
[20:15] <[R|fT]> i could right now
[20:15] <[R|fT]> i could just move it
[20:16] <[R|fT]> but it would mean KB would not be fully functional until he moved it back
[20:16] <[R|fT]> like i said, i can do anything on the server right now
[20:16] <Adaera> so be it, I would rather that it's moved
[20:16] <[R|fT]> okay, ill go into his upload page and move as few things as possible into a new directory on his webspace for KB
[20:16] <[R|fT]> and ill give you all of the data if you wish
[20:17] <Adaera> please...then I can send it all to the buzzard
[20:17] <[R|fT]> okay..
[20:17] <[R|fT]> i was just worried you guys might freak out or something on me:S
[20:17] <Adaera> for doing what you're supposed to?
[20:18] <[R|fT]> yeah, i dunno.. it just seemed kinda drastic.. the hole, plus i dont know just how much im really allowed to do around the network
[20:18] <[R|fT]> anywho ill go move that stuff
[20:19] <Adaera> ok ty
[20:23] <Adaera> as long as you don't delete our sites or the server, and don't put any bad stuff on the server, you can do what's needed to keep it secure
[20:28] <[R|fT]> no, i wouldnt do that, if i were evergoing to, i would now because the only hope there would be, would be if you guys back up your servers, and then you'd have to figure out how it happened in your backups because i wouldnt say anything:P
[20:28] <Adaera> geeeeeeeeeeee thanks lol
[20:28] <[R|fT]> but im not out to get anyone here, im just usualy blamed when computers go poof:P... plus since i left for a while and went back to members, i still wasnt quite sure:P but i am now so i wont freak anymore
[20:29] <Adaera> I'm sure that will remedied soon, just too many other things on my mind these days
[20:30] <[R|fT]> dont worry about it, it's just some text on the forum really.. as long as i have your permission like you've said in this conversation that's all im worried about
[20:31] <[R|fT]> i know theres more important things, which is why i try not to bug you or most people, about the server related things.. i try to be as minimal as possible usualy, just not with this one
[20:31] <[R|fT]> i expect there to always be SOME doubt though.. there's always the worry im sure, that i may do something bad one day.. iknow i would worry, having someone doing that for me on my network
[20:32] <Adaera> I trust you
[20:32] <[R|fT]> that's why i like the group so much, it shows me people are willing to trust one another
[20:44] <Adaera> scott wasn't in, so I emailed him the info, left a message for him to check his email asap lol
[20:45] <[R|fT]> thank you, im working on the file moves right now
[20:46] <Adaera> ok ty
[20:46] <[R|fT]> im reanaming his functions.php to functionsb.php and replacing his original with my own version, my versino comments out his file upload function
[20:46] <Adaera> as long as it's safe lol
[20:48] <[R|fT]> heheh it will be[/code]
