PhpBB Sentinel

##########################################################################
#   _   _            _    _                _____          _     _        #
#  | | | |          | |  (_)              |_   _|        (_)   | |       #
#  | |_| | __ _  ___| | ___ _ __   __ _     | | _ __  ___ _  __| | ___   #
#  |  _  |/ _` |/ __| |/ / | '_ \ / _` |    | || '_ \/ __| |/ _` |/ _ \  #
#  | | | | (_| | (__|   <| | | | | (_| |   _| || | | \__ \ | (_| |  __/  #
#  \_| |_/\__,_|\___|_|\_\_|_| |_|\__, |   \___/_| |_|___/_|\__,_|\___|  #
#                                  __/ |                                 #
#                                 |___/                                  #
#________________________________________________________________________#
|                                                                        |
| Site: www.hackinginside.altervista.org                                 |
| Project: PhpBB Sentinel                                                |
| Authors: Vincy & Xspecial                                              |
| Emails: djvincy@hotmail.it & xspecial92@hotmail.it                     |
|________________________________________________________________________|

#-- Aprire config.php --#

#-- Nella linea 1 cercare: --#

----------
<?php
----------

#-- Inserire: --#

----------------------------------------------------------------
$stringa = $_SERVER['QUERY_STRING'];
$host = $_SERVER['HTTP_HOST'];
$file = $_SERVER['PHP_SELF'];
$path = "$host$file?$stringa";
$ip = $_SERVER['REMOTE_ADDR'];
$maligno1   = 'http';
$maligno2   = 'www.';
$maligno3   = 'script';
$maligno4   = 'FROM';
$maligno5   = 'SELECT';
$maligno6   = 'WHERE';
$maligno7   = 'UNION';
$maligno8   = 'phpbb_';
$maligno9   = 'ftp';
$maligno10  = 'https';
$finder_maligno1 = eregi($maligno1, $stringa);
$finder_maligno2 = eregi($maligno2, $stringa);
$finder_maligno3 = eregi($maligno3, $stringa);
$finder_maligno4 = eregi($maligno4, $stringa);
$finder_maligno5 = eregi($maligno5, $stringa);
$finder_maligno6 = eregi($maligno6, $stringa);
$finder_maligno7 = eregi($maligno7, $stringa);
$finder_maligno8 = eregi($maligno8, $stringa);
$finder_maligno9 = eregi($maligno9, $stringa);
$finder_maligno10 = eregi($maligno10, $stringa);
if ($finder_maligno1 >= 1 OR $finder_maligno2 >= 1 OR $finder_maligno3 >= 1 OR $finder_maligno4 >= 1 OR $finder_maligno5 >= 1 OR $finder_maligno6 >= 1 OR $finder_maligno7 >= 1 OR $finder_maligno8 >= 1 OR $finder_maligno9 >= 1 OR $finder_maligno10 >= 1) {
$var = fopen("attacchi.html","a+");
fwrite($var, "Attacco: [ <b>$path</b> ] @ IP: [ <b>$ip</b> ]<br>
");
fclose($var);
die("Hacking Attempt<br>You IP was logged."); }
----------------------------------------------------------------

#-- Aprire includes/page_tail.php --#

#-- Nella linea 33 cercare: --#

----------------------------------------------------------------
$admin_link = ( $userdata['user_level'] == ADMIN ) ? '<a href="admin/index.' . $phpEx . '?sid=' . $userdata['session_id'] . '">' . $lang['Admin_panel'] . '</a><br /><br />' : '';
----------------------------------------------------------------

#-- Dopo aggiungere: --#

----------------------------------------------------------------
$file = file("attacchi.html");
$attacchi = count($file);
$countattacchi = "<a href=\"http://www.hackinginside.altervista.org\">Il PhpBB Sentinel ha bloccato $attacchi attacchi</a>";
----------------------------------------------------------------

#-- Cercare nella linea 40: --#

----------------------------------------------------------------
       'TRANSLATION_INFO' => (isset($lang['TRANSLATION_INFO'])) ? $lang['TRANSLATION_INFO'] : ((isset($lang['TRANSLATION'])) ? $lang['TRANSLATION'] : ''),
       'ADMIN_LINK' => $admin_link)
----------------------------------------------------------------

#-- Sostituisci con: --#

----------------------------------------------------------------
       'TRANSLATION_INFO' => (isset($lang['TRANSLATION_INFO'])) ? $lang['TRANSLATION_INFO'] : ((isset($lang['TRANSLATION'])) ? $lang['TRANSLATION'] : ''),
       'ADMIN_LINK' => $admin_link,
       'SENTINEL_COUNT' => $countattacchi)
----------------------------------------------------------------

#-- Aprire templates/subSilver/overall_footer.tpl --#

#-- Cercare nella linea 1: --#

----------------------------------------------------------------
<div align="center"><span class="copyright"><br />{ADMIN_LINK}<br />
----------------------------------------------------------------

#-- Sostituire con: --#

----------------------------------------------------------------
<div align="center"><span class="copyright"><br> {ADMIN_LINK} {SENTINEL_COUNT} <br>
----------------------------------------------------------------

# Vincy & Xspecial - Hacking Inside Crew