My favorites | Sign in
php portal-w3challs
Version Control With Subversion
Project Home
  
Issues
  
Source
    
Checkout | Browse | Changes |
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<center>
<font color=red>Administration</font></b><br><br>

<?php

function authentication($your_password)
{
// TODO : change the password below choosing a more complex one (! dictionnary word)
// but it *must* contain only lowercase alphabetical characters
$password = "unetulipe";

if(!is_string($your_password) || strlen($your_password) != strlen($password))
return(0);

$your_password = strtolower($your_password);

for($i = 0; $i < strlen($password); $i++)
{
if($password[$i] != $your_password[$i])
return(0);

usleep(150000);
}

return(1);
}

$time1 = microtime(true);
if(isset($_POST["your_password"]) && authentication($_POST["your_password"]))
echo "<br />Congratulations, the flag to solve this challenge is the same than the one you used to log in";

else
{

?>
<form action=administration.php method=post>
<input type=text name=your_password maxlength=9>
<input type=submit value="authentication">
</form>
<?php
}
$time2 = microtime(true);
$res = ceil(($time2-$time1) * 1000);
?>
<br><br>
<font size=1><b>page generated in <?php print("$res ms"); ?> </b> copyleft <a href=php_portal.php>php_portal_vuln</a></font>
</center>
</html>
Show details Hide details

Change log

r3404 by tulipe on Feb 22, 2010   Diff
Update www/ URLs to point to the new
location of our sources.

Older revisions

r2982 by coclico on Feb 24, 2008   Diff
* www/administration.php: minor bug corrected
All revisions of this file

File info

Size: 3664 bytes, 113 lines
View raw file

File properties

svn:mime-type
text/html; charset=UTF-8
svn:eol-style
native
svn:keywords
Id
Powered by Google Project Hosting