DesireCMS [r1.0.0]

Status
Not open for further replies.

brsy

nah mang
May 12, 2011
1,530
272
DesireCMS [1.0.0]
(Previously known as ShadowCMS)

General Information (brief):

DesireCMS is a Habbo Hotel Content Management System created by Dayron1234 & zTriick. DesireCMS is a v18 Habbo Retro CMS, designed to be upgraded in each release.

DesireCMS [r1.0.0]:

Download Link:




Installation Guide:

Import your v18 Habbo Retro database, then import the sql found in the Documentation/desiredb.sql.

Notes:

Right now, we have drafted up our own design, but when we reach r63+, we will COMPLETELY mimic Habbo's design & layout. In DesireCMS r2 we will be stepping up to v26, which will come with a lot of never before seen features - some already being worked on. So stay tuned to us by following us, & if you like our work, like this post :up:

Credits:

Dayron1234 - 50% ( Coded parts of the CMS with me )
zTriick - 50% ( Coded parts of the CMS; came up with unique ideas )

Monetary Donations:

If you like our work & want to fund our project, send a donation to [email protected]

Don't forget! If you like DesireCMS then like this post! :lol:
 

TesoMayn

Boredom, it vexes me.
Oct 30, 2011
1,482
1,482
Better than a screenie, how about a working demo?

Also, why isn't Desire-Hotel using this?
 

brsy

nah mang
May 12, 2011
1,530
272
Better than a screenie, how about a working demo?

Also, why isn't Desire-Hotel using this?
Because Desire Hotel isn't v18. I'll put up a demo on my site & provide download link in OP (as I forgot)
 

Kryptos

prjRev.com
Jul 21, 2010
2,205
1,252
Post a download link... Or your thread will be deleted.

Oh, and this isn't 'Brute CMS'?? Edit your first post.
 

brsy

nah mang
May 12, 2011
1,530
272
Post a download link... Or your thread will be deleted.

Oh, and this isn't 'Brute CMS'?? Edit your first post.
Just edited Original Post, sorry about that.
Download link added.
 

Kryptos

prjRev.com
Jul 21, 2010
2,205
1,252
I have a question...

Do you have a demo? Because it seems like some stuff makes no sense... Like where is the code you use to register the user into database? Because the form says: action="register2.php", but there is no register2.php file..

And,
It has about.... 3-5 SQL exploits ( From what I saw )

Don't take this as a 'hate' comment. I'm just telling you so you can take a look and fix all these things, because if you don't, you really can't expect anyone using this.
 

Dayron1234

Rapnameiszero,cuzIhavezero,toleranceforidiots
Jun 30, 2010
772
35
register2.php? I named it done.php for my version.... and 3 - 5 exploits in which files? Anyways I made sure to use strip_tags, and mysql_real_escape_strings for the login so it can be secured enough.
 

Kryptos

prjRev.com
Jul 21, 2010
2,205
1,252
register2.php? I named it done.php for my version.... and 3 - 5 exploits in which files? Anyways I made sure to use strip_tags, and mysql_real_escape_strings for the login so it can be secured enough.

Mhm.. It says register2.php in the download.. Anyways, make sure to release the new version.

Exploits I saw:
  • done.php
  • sent.php
  • update.php
It also seems like one of you(or both) don't know how to do a MySQL query( and afterwards do mysql_num_rows ), or close PHP tags, or put a ';' after doing an echo.
PHP:
<?php
$vipcheck = "SELECT * FROM users WHERE vip";
if($vipcheck == "1") {
echo "<i>Here you can change your <?php echo $hotelname; ?> settings, such as your password, email, and username</i><br><br>
<form action='update.php' method='POST'>
<strong>Current Password:</strong><input type='password' name='cpassword'><br /><br />
<b>New username:</b><input type='text' name='username'><br /><br />
<b>New Password:</b><input type='password' name='password'><br /><br />
<b>New E-mail:</b><input type='text' name='email'><br /><br />"
}
elseif($vipcheck =="0") {
echo "<i>Here you can change your <?php echo $hotelname; ?> settings, such as your password,and email</i><br><br>
<form action='update.php' method='POST'>
<strong>Current Password:</strong><input type='password' name='cpassword'><br /><br />
<b>New Password:</b><input type='password' name='password'>
<b>New E-mail:</b><input type='text' name='email'><br /><br />"
}
 
$checkpass = "SELECT * FROM users WHERE password";
if($checkpass == "0") {
echo "The password you have entered is incorrect. Please verify your password then try again.";
 
elseif($checkpass == "1") {
 
 
  <input type='submit' name='submit' value='Change now!'>
</div>  </form>
</div>
</div>
}
That piece of code there, is not functional and it'll throw an error.
So, you have released a non-working and non-tested CMS.

Revise your work before you release, else your thread will just end like this.
Closed.
 
Status
Not open for further replies.

Users who are viewing this thread

Top