Title: bitfreak!'s BTC-SCI Post by: jopo on January 22, 2013, 10:04:25 PM Hey guys,
i'm trying to get bitfreak!'s SCI running (actually on my local XAMPP). But when I try to donate something it doesn't show anything else than a white page. When i remove this part from the payment.php it shows the deposit address. Code: // check for potential errors before proceeding What is wrong in this part? And: It doesn't generate a private key into the CSV-File. Hope you can help me getting this thing running, thanks alot, - jopo Title: Re: bitfreak!'s BTC-SCI Post by: mjc on January 23, 2013, 02:56:30 AM This is not an answer to your question, just an observation.
You are checking those parameters right? Other wise someone could attack your system by injecting commands into your script. You are concatenating user parameters into your code. Particularly the sid parameter. The way is written its ripe for a remote file include. Not a perfect example but relevane https://www.owasp.org/index.php/Top_10_2007-Malicious_File_Execution |